Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139392e3130312e302f32342d3234203d3e20313336373837.roa
File: 3138352e3139392e3130312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: RguOmaUoZUueNMgtWB3A3S4GyRo1ZdMU7jCF/dojdY4=
Subject key identifier: 6C:DC:63:B7:07:06:D4:CC:DE:44:B9:97:DC:34:AE:E8:89:05:5F:0B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4E39068E595455B80D9940A40D08AD9BF96404B0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139392e3130312e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Oct 2023 13:41:52 +0000
ROA not before: Fri 20 Oct 2023 13:36:52 +0000
ROA not after: Fri 18 Oct 2024 13:41:52 +0000
asID: 136787
IP address blocks: 185.199.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:39:06:8e:59:54:55:b8:0d:99:40:a4:0d:08:ad:9b:f9:64:04:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:52 2023 GMT
Not After : Oct 18 13:41:52 2024 GMT
Subject: CN=6CDC63B70706D4CCDE44B997DC34AEE889055F0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8f:84:3f:71:36:62:36:37:be:d2:ea:b6:32:
14:b3:e7:49:f6:76:9b:9f:90:df:96:b2:72:c1:0e:
e2:1f:f9:3f:13:69:5b:56:50:28:5a:8c:1c:d5:34:
96:97:5c:94:df:cd:14:0e:c4:81:d1:a0:0a:d8:41:
a9:e5:08:01:01:5f:ba:3d:0f:8c:92:c0:2a:0c:a0:
9f:38:e4:01:b5:4f:bd:5a:7f:5a:f6:17:21:42:98:
1c:f5:f5:03:c5:5e:b6:a9:1e:68:7d:3f:4e:e2:78:
b3:13:47:78:ce:41:f2:38:61:65:51:11:93:26:5d:
55:6f:d6:80:f2:01:fd:83:a4:be:d6:09:4b:00:3f:
e9:d7:d5:26:eb:8a:b7:1d:31:4b:b4:7b:6b:48:94:
68:a3:92:f8:91:7b:5d:c9:07:ae:d5:98:f9:4a:af:
ac:11:46:ca:91:90:de:17:e4:d7:b5:dc:7c:4e:09:
fe:12:cf:77:c6:cd:32:8b:b0:d8:6b:aa:5c:47:11:
7d:f9:bd:d4:63:a4:c0:8d:96:4d:1e:43:77:87:53:
02:c0:b9:8b:5c:42:2a:b9:7f:bf:20:c7:f2:03:96:
63:c1:e9:ba:ed:6a:e6:52:7c:fe:8e:97:50:a2:38:
19:17:09:98:8c:15:68:33:0a:28:bf:3a:d9:87:ea:
7a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DC:63:B7:07:06:D4:CC:DE:44:B9:97:DC:34:AE:E8:89:05:5F:0B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139392e3130312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.101.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:6b:b0:4c:6a:c0:17:fd:2d:e2:41:c0:7e:84:3f:84:4c:e4:
a5:06:8e:67:e7:18:e5:c4:d0:4e:cb:24:4d:a3:c4:2b:1b:3e:
77:dc:c7:f1:da:53:69:73:69:53:db:73:de:3a:bb:a3:9d:7e:
fb:9e:ec:ca:5d:82:17:b8:a9:00:c9:a3:ef:76:72:aa:4b:e8:
8d:68:01:59:04:06:3b:3a:66:41:09:a3:f7:73:22:89:f1:c6:
44:14:0e:49:6c:08:a6:d3:90:f8:79:37:35:ca:ea:ee:0c:36:
3b:65:cc:65:6f:e0:61:53:61:b5:9a:23:f7:f8:ed:f0:6c:dc:
49:04:d0:f8:25:90:1a:4c:fa:00:7e:32:c8:a2:e4:9f:bd:ea:
6e:09:c0:db:38:7c:f6:c4:1d:8b:de:d3:4c:36:ea:6e:bf:ee:
5c:c4:e8:e3:f7:d7:91:28:1c:89:4c:fe:cc:53:c9:fc:92:80:
80:18:f0:de:3d:f1:b9:08:dc:be:f3:55:31:e0:ff:31:d0:e9:
be:ca:de:77:ed:35:a4:e5:7a:ba:b2:a5:62:c8:1f:a7:d3:db:
ea:fe:78:86:92:cf:b0:c1:d5:60:35:d8:57:07:8b:8b:29:4f:
bf:f1:26:b3:6a:f3:9c:1c:1b:c2:84:03:dd:7e:97:fa:99:77:
0f:8c:95:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:21:53 2024 by rpki-client on console-ams.rpki-client.org