Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3234392e302f32342d3332203d3e203531313637.roa
File: 3138352e3139372e3234392e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: H68ZCCcsIM6YS+KZVsl7BuYmaMlQfVYKSxMnH4RDI1Y=
Subject key identifier: 2B:F3:BA:24:14:74:61:F0:DB:CD:DB:B0:4D:68:E2:53:D3:0D:11:94
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 73896A3046CB729CCD3D748CCC20ADB456813051
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3234392e302f32342d3332203d3e203531313637.roa
Signing time: Mon 26 Feb 2024 08:52:59 +0000
ROA not before: Mon 26 Feb 2024 08:47:59 +0000
ROA not after: Mon 24 Feb 2025 08:52:59 +0000
asID: 51167
IP address blocks: 185.197.249.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:89:6a:30:46:cb:72:9c:cd:3d:74:8c:cc:20:ad:b4:56:81:30:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:47:59 2024 GMT
Not After : Feb 24 08:52:59 2025 GMT
Subject: CN=2BF3BA24147461F0DBCDDBB04D68E253D30D1194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:43:7a:4a:22:c0:e0:ee:c8:51:98:d8:00:f2:
d1:6c:2a:a0:16:98:97:47:f0:03:31:97:25:f0:2f:
59:2e:36:3a:c2:3f:c4:c8:49:54:14:eb:65:dd:9a:
4c:74:1c:ef:7a:4a:ee:2c:fb:90:58:69:6f:92:91:
c8:c1:35:11:39:cb:df:7e:68:85:a1:65:60:af:d5:
77:87:52:89:b5:56:7e:83:6c:e5:14:c8:66:7a:21:
10:a2:f0:92:a4:04:4f:38:48:77:fc:bc:c9:8a:c3:
7b:9d:b9:87:19:25:34:27:fa:6e:b5:d8:94:1d:70:
cc:ce:c1:1a:f8:f4:01:24:e4:16:22:95:60:ef:d7:
18:37:3a:d0:f9:e0:40:3f:6b:2a:c7:fd:64:94:fe:
48:87:62:09:f0:8e:96:93:fc:8c:6c:5d:ff:b0:47:
16:42:59:a1:7d:5d:a9:2a:ca:1b:84:23:c8:7c:1a:
5b:0e:f9:57:8d:51:df:39:44:86:28:1b:ce:7e:5b:
84:f9:7b:1e:30:df:90:9d:1a:69:54:35:da:30:b0:
92:b7:09:fe:56:8d:ef:82:00:b5:73:04:86:5d:a0:
cc:74:31:f8:ff:30:a2:9b:de:a5:51:93:9b:91:29:
21:78:d6:69:14:36:87:7d:75:2e:1c:72:38:88:30:
1f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F3:BA:24:14:74:61:F0:DB:CD:DB:B0:4D:68:E2:53:D3:0D:11:94
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3234392e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.249.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:cf:2b:65:d0:c8:86:b9:70:60:ff:b8:ae:55:87:a3:59:91:
49:67:6d:f1:05:e0:7a:21:da:03:48:c0:96:e1:3f:e1:87:3f:
40:75:e8:1d:71:a7:dd:bc:9a:97:b9:1d:f7:65:0f:05:51:58:
09:0b:d3:fe:c2:96:63:f3:2d:48:bc:63:b8:62:7c:de:c7:ae:
81:0e:72:75:27:7d:33:a0:da:03:5a:ea:83:0f:ca:8e:a4:f6:
67:33:52:5b:44:9b:2b:cd:95:f9:3b:43:93:81:56:5b:4d:9b:
56:4a:6e:8e:8e:e4:12:3a:ac:f4:77:5b:71:af:32:e5:37:0e:
f0:d1:fd:c7:bf:07:8c:ad:2a:19:7c:49:51:78:99:e8:e8:33:
a6:fd:1f:cc:80:67:b9:51:a0:42:1b:ab:85:1e:6d:00:f7:4b:
9d:e3:63:87:8a:01:fb:86:a3:df:25:85:06:a3:68:2b:3c:21:
13:39:60:9d:35:d1:2c:3b:24:ab:24:4a:4e:4d:7e:2a:c2:aa:
d2:cf:c0:a5:81:e9:bb:2b:42:9d:98:26:89:10:b4:b9:a9:c0:
ba:35:71:d6:c9:f9:62:7e:9e:c3:36:af:05:d9:8e:fd:1a:4d:
1b:57:b9:3c:d4:44:a4:1c:82:0a:1f:71:f9:c7:1e:a7:5b:43:
b4:30:96:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 08:01:44 2024 by rpki-client on console-fra.rpki-client.org