Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139392e3130302e302f32342d3332203d3e20313336373837.roa
File: 3138352e3139392e3130302e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: wkhdc4PpWl3jwn3A50njFdY0Jo7hzyDUolyiFb26HzA=
Subject key identifier: 49:74:9A:42:A3:65:9C:2D:7A:BA:FE:8E:31:B8:D8:DD:FD:52:41:C1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 072DDCA72A5D9EC6AC8ECED1508639E1FB489A6D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139392e3130302e302f32342d3332203d3e20313336373837.roa
Signing time: Fri 20 Sep 2024 14:05:02 +0000
ROA not before: Fri 20 Sep 2024 14:00:02 +0000
ROA not after: Fri 19 Sep 2025 14:05:02 +0000
asID: 136787
IP address blocks: 185.199.100.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:2d:dc:a7:2a:5d:9e:c6:ac:8e:ce:d1:50:86:39:e1:fb:48:9a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 14:00:02 2024 GMT
Not After : Sep 19 14:05:02 2025 GMT
Subject: CN=49749A42A3659C2D7ABAFE8E31B8D8DDFD5241C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e8:1f:a0:db:ca:2c:bc:44:bc:03:22:05:6e:
43:1d:cd:d1:fd:1e:7a:9a:94:e6:a9:a5:b1:86:90:
dd:33:14:c0:e8:65:4b:22:27:81:8a:9a:05:61:06:
a7:62:58:93:77:61:f7:07:55:17:55:28:8c:8d:a8:
2c:b7:7c:a2:0e:5c:59:53:83:4b:a6:82:fd:17:88:
ae:6f:6a:fc:a6:8e:e0:1b:9f:f9:0b:92:fe:d3:49:
57:1f:af:09:4c:5a:76:65:27:b7:a7:96:8a:33:7a:
99:13:08:f4:17:f4:25:d4:f1:c3:45:99:7f:2a:3b:
e3:fc:1f:07:59:ee:d8:ea:2e:fe:b8:7b:7b:27:c5:
f5:7f:c2:a3:e1:f0:ac:bf:34:42:79:84:1d:c5:60:
d2:0d:6e:60:7b:cf:38:56:10:be:36:c4:9a:55:b9:
97:ce:0f:5b:c9:77:c3:9f:d0:82:16:5e:6f:42:91:
24:7e:c4:d4:cd:39:70:50:de:c0:f3:30:a4:d4:20:
76:fb:0e:4c:5e:ac:43:f6:58:a6:63:b3:2f:45:b8:
ff:af:6d:8e:78:56:63:af:97:91:4e:b1:c9:c2:3d:
14:23:6d:87:2a:66:ef:1c:8f:96:87:9e:74:49:58:
0a:1b:82:2b:84:d5:25:ed:c2:83:45:97:ae:e6:e7:
2f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:74:9A:42:A3:65:9C:2D:7A:BA:FE:8E:31:B8:D8:DD:FD:52:41:C1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139392e3130302e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.100.0/24
Signature Algorithm: sha256WithRSAEncryption
06:66:c1:e1:b2:c3:e1:f7:d4:d0:30:da:2e:3b:79:07:b5:78:
fc:94:59:c9:d2:cf:24:7e:5d:0b:5c:22:e8:c4:12:c9:07:9b:
e3:82:b8:3f:c3:30:00:22:a6:c8:42:04:22:3c:7e:2d:70:ba:
88:6c:4d:1a:d6:71:e4:83:f7:29:3b:fa:39:c3:d1:80:e6:5d:
73:b5:45:ab:86:03:d9:b9:1f:aa:12:e3:6f:5f:a3:93:72:f7:
9a:d5:a0:49:f0:fd:ea:25:8b:cb:e3:89:a8:ee:34:1e:5a:c2:
ba:5f:df:e7:25:d9:00:c5:43:ce:fb:a8:67:a3:c7:d7:c3:0a:
fa:21:11:e1:2f:f6:31:08:26:a3:2a:34:97:b2:cb:2b:29:19:
c4:df:df:99:4a:37:e5:6b:e2:92:bb:16:53:22:9e:ac:15:1c:
98:e3:79:81:2b:aa:1d:71:f6:ea:39:58:66:06:af:ea:91:eb:
35:da:c5:51:0b:ed:4c:d2:7f:d7:15:db:92:5a:8d:53:04:b2:
7c:53:b9:b3:9b:7e:84:f1:16:44:09:d9:44:5c:43:4e:81:1c:
0a:c1:55:54:96:f0:b1:84:bf:fa:46:e2:e4:69:7f:ba:58:87:
b0:eb:88:74:01:86:ac:82:28:c0:3b:64:7e:d4:a9:27:03:a9:
13:bb:75:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:29:13 2024 by rpki-client on console-ams.rpki-client.org