Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139392e3130302e302f32342d3332203d3e20313336373837.roa
File: 3138352e3139392e3130302e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: YnWnrjl5dWgkyznQb5JZ140k4sQ7LhJzizkgAkW9km0=
Subject key identifier: F1:0B:7C:AA:C7:20:D1:21:88:80:07:94:58:D9:9A:CF:4D:42:2C:B1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5A7D9479B502A4238B94BE775AA03C517D1341C1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139392e3130302e302f32342d3332203d3e20313336373837.roa
Signing time: Fri 20 Oct 2023 13:41:50 +0000
ROA not before: Fri 20 Oct 2023 13:36:50 +0000
ROA not after: Fri 18 Oct 2024 13:41:50 +0000
asID: 136787
IP address blocks: 185.199.100.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:7d:94:79:b5:02:a4:23:8b:94:be:77:5a:a0:3c:51:7d:13:41:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:50 2023 GMT
Not After : Oct 18 13:41:50 2024 GMT
Subject: CN=F10B7CAAC720D1218880079458D99ACF4D422CB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:25:38:3c:9f:0c:76:ea:b7:ff:e9:20:f5:71:
d8:d7:6b:db:c3:5f:43:be:f7:0f:53:76:e1:75:a0:
51:49:c5:64:04:5f:3e:b0:42:e2:32:6f:49:07:71:
c6:85:79:3d:9b:38:de:c4:a7:d4:10:ba:76:0f:ee:
ea:fb:d0:52:38:53:fa:75:bb:a0:33:0f:65:9a:da:
93:0b:b6:8c:d7:23:1b:6d:cd:38:cc:49:cc:21:20:
9a:d0:7a:75:38:ca:d3:0d:f4:50:f1:04:98:a9:61:
a5:a5:b0:63:88:8c:86:33:be:02:70:18:90:3f:c9:
80:a9:47:05:1d:34:17:1e:d5:f4:0d:b2:72:36:4a:
c6:2e:99:a3:46:0d:fb:8c:16:54:0b:2a:16:d4:0e:
51:5d:c5:ea:89:02:09:ec:7c:47:62:c6:a2:22:07:
41:a1:87:4c:0a:f5:dd:08:71:05:b7:94:2e:8d:f2:
1a:22:29:16:6a:19:24:a9:f8:f7:9c:de:c5:b3:13:
e6:c4:88:bc:d3:fc:de:f3:e9:18:43:8d:28:02:85:
d3:2e:ea:e4:6c:16:9e:71:c6:22:bb:84:04:ff:18:
be:88:ab:1e:b1:13:48:96:a2:bd:7e:ea:94:d7:cb:
a5:49:ef:04:54:8f:9b:f1:bb:aa:5e:02:93:78:3e:
4f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0B:7C:AA:C7:20:D1:21:88:80:07:94:58:D9:9A:CF:4D:42:2C:B1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139392e3130302e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.100.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:86:0d:45:00:a8:45:ce:f3:3d:d1:2b:00:2d:e3:4d:2b:45:
79:2e:e4:24:93:ef:39:b2:77:7f:7b:61:ba:54:e9:ba:15:24:
86:63:3d:3a:fd:eb:8e:dc:4a:57:8e:ff:29:83:3d:16:4b:89:
75:29:6b:aa:f3:b1:f6:1c:b3:e3:b2:64:36:28:54:6b:45:77:
f2:19:b3:c5:01:ac:01:b2:4d:0d:5b:66:fb:1e:fa:91:08:87:
64:b2:aa:d6:cc:61:74:aa:5c:12:9f:03:fa:79:49:e0:f2:fa:
63:2d:38:3e:59:fa:c2:95:9a:51:6b:d3:c0:7d:fa:f3:a8:af:
df:76:54:2e:cd:0f:96:3a:0d:70:0e:c1:dc:a0:d1:f3:a9:1a:
ca:9b:b2:41:5c:a1:ff:fd:c5:fb:5c:36:b5:27:e9:26:4e:0c:
93:68:c3:f5:ca:f0:e5:1e:73:19:1c:d9:67:c0:33:fa:b6:40:
50:d2:9f:61:db:0a:35:d1:26:fa:b8:cd:83:91:46:db:f4:45:
db:fe:da:67:91:a9:08:46:41:79:5b:92:06:fe:97:3d:b6:7f:
dc:02:21:cc:bc:89:ff:48:b1:0b:e8:32:57:87:5f:a4:aa:23:
35:96:85:93:f2:ee:87:3a:d6:fc:b7:bb:17:f3:64:eb:89:1f:
08:e2:69:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:21:53 2024 by rpki-client on console-ams.rpki-client.org