Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3235302e302f32332d3332203d3e203531313637.roa
File: 3138352e3139372e3235302e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: W7U4L/1kWXqpH2dDJzVBi4LcZtRgEwLMO0O0/s9/zDs=
Subject key identifier: CA:C6:A0:A5:2C:F3:9A:BE:10:32:B4:43:08:31:D0:09:59:5A:C3:A2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 73C43A509E0C46F912992DFE338BAD3029F3980E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3235302e302f32332d3332203d3e203531313637.roa
Signing time: Mon 26 Feb 2024 08:53:05 +0000
ROA not before: Mon 26 Feb 2024 08:48:05 +0000
ROA not after: Mon 24 Feb 2025 08:53:05 +0000
asID: 51167
IP address blocks: 185.197.250.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:c4:3a:50:9e:0c:46:f9:12:99:2d:fe:33:8b:ad:30:29:f3:98:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:05 2024 GMT
Not After : Feb 24 08:53:05 2025 GMT
Subject: CN=CAC6A0A52CF39ABE1032B4430831D009595AC3A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:23:4a:ee:a8:8f:4b:97:21:50:2c:b1:64:98:
4b:98:56:bb:0f:41:05:4b:03:dc:fc:f1:a6:fa:20:
f9:16:de:c4:58:7e:ba:20:bd:3f:8e:40:4e:02:e8:
ba:ae:00:22:c1:eb:20:43:93:25:62:d3:8f:9d:0f:
df:bb:01:a9:4b:d2:51:c6:81:26:e2:60:62:80:a4:
35:4d:05:96:65:49:bb:fd:93:40:7a:67:bb:71:3a:
b5:6c:a4:14:a4:5c:63:5b:bc:e7:02:bc:50:b4:27:
71:69:4a:9a:17:b7:52:da:61:70:d1:85:a7:b0:a4:
97:fe:58:7d:c7:30:f0:f9:43:95:d5:0f:ff:4f:d6:
cb:40:42:c1:9e:0b:ab:11:27:e5:86:09:51:8f:b5:
2b:48:ef:80:dc:39:45:01:e2:fd:e2:0b:4e:35:d2:
89:c9:37:1f:a6:99:97:3e:e9:60:34:dc:fd:9d:67:
1a:50:a8:ac:ff:a2:9f:80:7d:99:17:77:9c:67:45:
e0:f1:3a:4e:bc:da:33:1e:13:a3:fb:6c:a7:1c:af:
68:bd:a9:ac:2d:f9:7e:f6:de:f0:17:50:ca:65:55:
66:a6:91:4f:5a:67:02:22:fb:71:08:e4:0f:0e:f6:
78:87:cf:a0:7e:e8:6d:cc:ef:e3:b0:34:ef:15:18:
ca:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C6:A0:A5:2C:F3:9A:BE:10:32:B4:43:08:31:D0:09:59:5A:C3:A2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3235302e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.250.0/23
Signature Algorithm: sha256WithRSAEncryption
06:08:8d:49:0a:c7:a4:d1:65:3c:c8:e5:a9:1d:f6:66:55:76:
0e:9b:1a:26:f8:84:62:8d:23:e4:1d:5f:79:fe:f1:c6:0a:9b:
78:51:12:ce:5e:f4:48:83:e8:12:1c:26:49:b2:7b:9d:3d:0d:
ff:fe:9d:af:f0:d9:67:c3:65:89:81:0b:3e:df:7b:35:5f:f3:
0d:46:c6:09:e4:0b:b0:44:77:2c:50:7f:fe:d2:6b:82:63:31:
67:14:3f:56:e4:4e:db:92:f6:39:1a:da:c9:dd:c8:e5:9b:ec:
d9:74:4c:20:19:10:09:6b:ea:ce:c9:8f:fb:ac:2c:00:6d:30:
4e:5a:97:61:73:78:76:67:53:cb:55:60:8b:d2:e7:1c:8d:1b:
68:18:ea:d4:80:ef:f9:47:cc:e5:86:c1:16:70:f9:ee:e5:3b:
bf:9b:6c:fe:fe:ea:df:2e:75:b5:74:93:07:10:db:6c:dc:0d:
2a:8e:55:de:83:48:0b:f6:4d:b0:bd:86:5b:7d:86:5a:32:18:
b1:b2:b1:d3:92:92:d7:a8:9d:eb:c6:96:30:25:f8:39:27:6b:
ff:44:33:2d:93:4c:d0:13:a1:0c:03:45:1e:c3:d0:7b:0c:cb:
91:f6:65:55:53:e0:98:18:49:d4:57:f3:9f:94:65:e4:66:b4:
9f:e7:1d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:12:36 2024 by rpki-client on console-fra.rpki-client.org