Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3139332e302f32342d3234203d3e20323039383534.roa
File: 3138352e3139372e3139332e302f32342d3234203d3e20323039383534.roa (raw, json)
Hash identifier: ZBr5rvEf8kObr+/OPQ8fyO0C8t+27SH/yk1/bdAwTco=
Subject key identifier: F4:05:C4:47:19:A3:1A:9B:8A:24:56:4D:F0:3A:80:B0:49:FF:19:4E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 58CBD614E5C53A1721E71F744543CF96D6F652A3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3139332e302f32342d3234203d3e20323039383534.roa
Signing time: Mon 04 Mar 2024 09:26:44 +0000
ROA not before: Mon 04 Mar 2024 09:21:44 +0000
ROA not after: Mon 03 Mar 2025 09:26:44 +0000
asID: 209854
IP address blocks: 185.197.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:cb:d6:14:e5:c5:3a:17:21:e7:1f:74:45:43:cf:96:d6:f6:52:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 4 09:21:44 2024 GMT
Not After : Mar 3 09:26:44 2025 GMT
Subject: CN=F405C44719A31A9B8A24564DF03A80B049FF194E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4e:0d:cb:6d:7c:e6:b8:fe:ca:e2:22:d6:3b:
e7:42:0b:81:4e:e7:ad:79:28:82:bc:8f:f8:be:17:
67:2e:8a:02:be:3d:14:aa:2c:b2:ed:b0:c3:f3:03:
20:2b:33:86:b7:fb:c1:a4:97:9d:a0:f9:21:01:cb:
37:9c:2f:70:21:e6:5e:87:74:5b:dc:59:34:a5:dd:
3d:db:25:ec:32:e1:97:27:88:55:15:6e:03:23:d8:
fd:94:eb:00:12:2b:dc:41:c1:82:88:ab:06:5b:ff:
32:69:45:bb:f0:dc:96:c7:32:79:dd:82:2a:8a:88:
ac:54:9b:e6:2c:92:3d:f2:23:58:e2:78:34:8c:c2:
96:0f:bb:10:5e:69:5d:ea:56:4d:4f:f9:51:16:8e:
1f:2e:ce:ca:bf:1d:67:8a:8d:38:56:26:e7:94:45:
fd:cd:6a:3f:e4:44:aa:20:17:ff:ca:9a:e3:bf:6d:
97:01:f5:24:87:91:27:40:49:a2:07:44:84:fe:c4:
9a:86:c5:af:58:1c:7e:e3:f6:27:4b:76:87:22:ce:
cc:a6:dc:58:94:7c:4d:8d:c3:e8:aa:f5:8c:a2:e1:
48:db:d3:5c:e7:88:0a:e1:32:31:1c:5d:08:67:ac:
41:f8:d7:be:30:60:ea:57:25:a3:37:5b:c5:22:48:
b9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:05:C4:47:19:A3:1A:9B:8A:24:56:4D:F0:3A:80:B0:49:FF:19:4E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3139332e302f32342d3234203d3e20323039383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.193.0/24
Signature Algorithm: sha256WithRSAEncryption
71:09:c1:c1:fe:5e:b6:80:70:81:e0:f1:95:1e:0f:d5:49:a5:
cd:cb:4e:93:ca:97:3b:45:ca:f8:f5:8b:01:95:7a:2f:ad:fa:
8b:57:de:9a:1f:50:03:1a:95:c1:34:45:d0:ba:3f:ef:f3:84:
94:67:c6:a9:1f:43:39:5f:96:37:f3:22:26:a6:44:aa:5e:36:
38:7e:bc:9a:64:33:42:6f:6c:c4:ad:26:08:7e:77:29:eb:7e:
20:97:9c:41:d7:0a:30:ff:c3:63:ca:a8:2d:de:d1:76:23:77:
78:9b:b9:93:39:cd:ed:df:62:2e:c2:12:37:00:80:12:f3:b4:
32:5e:8b:af:17:3f:97:93:95:ac:e6:87:a2:8f:8f:b0:75:66:
ea:56:94:c8:14:9f:64:90:e7:c4:d0:8f:67:68:5f:bf:a0:16:
f0:6c:81:be:88:dc:bb:17:57:fd:b2:ab:d3:d6:fe:57:ac:bc:
f0:be:61:e2:2e:67:0f:e1:e0:85:ac:aa:f9:3d:be:5a:3f:15:
7e:56:83:52:e0:94:6c:14:eb:81:1f:b4:90:54:65:ce:9f:99:
dc:01:dc:1c:7a:95:9e:8d:6b:4b:b8:b0:21:d4:bf:0c:f8:14:
70:a1:c9:1e:5a:d6:ec:ae:30:44:ab:6f:20:a9:db:7b:96:c9:
8b:50:0a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:21:53 2024 by rpki-client on console-ams.rpki-client.org