Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3233372e302f32342d3234203d3e20323039383534.roa
File: 3138352e3230322e3233372e302f32342d3234203d3e20323039383534.roa (raw, json)
Hash identifier: UZzR3ru/LnfDgRsAwWpHNQwnjbaj+gPFC6gWNhnoNos=
Subject key identifier: 18:BB:18:EE:F5:36:20:12:13:D6:18:0D:7F:15:4E:31:2C:74:78:61
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 15CF53193844084D56AAF636BA92ED6F5EAB3926
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3233372e302f32342d3234203d3e20323039383534.roa
Signing time: Mon 04 Mar 2024 09:26:53 +0000
ROA not before: Mon 04 Mar 2024 09:21:53 +0000
ROA not after: Mon 03 Mar 2025 09:26:53 +0000
asID: 209854
IP address blocks: 185.202.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:cf:53:19:38:44:08:4d:56:aa:f6:36:ba:92:ed:6f:5e:ab:39:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 4 09:21:53 2024 GMT
Not After : Mar 3 09:26:53 2025 GMT
Subject: CN=18BB18EEF536201213D6180D7F154E312C747861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:3f:b6:cf:96:9a:1b:14:72:da:b1:e1:aa:
e0:a9:64:6d:a4:d4:76:f2:af:0c:d0:c0:5a:0e:d0:
3e:c3:6d:70:f2:d1:e4:b3:3a:99:c6:47:ff:2a:aa:
cf:d4:4e:4f:0a:e6:9f:f1:39:96:f0:fc:28:a9:38:
38:06:f2:ef:58:e9:55:fd:39:d5:b1:e0:a8:a7:5e:
b6:98:1d:cf:d2:d2:19:9d:2c:56:3d:0e:96:4e:6f:
5a:c4:75:36:7b:7d:44:f8:45:a6:2c:f5:55:f0:43:
bb:43:55:31:85:e8:b2:f0:d7:f8:0b:02:4d:13:56:
93:2c:f6:03:ea:77:82:58:8d:a8:ca:74:2d:35:d0:
83:15:7f:12:fe:0d:91:ef:30:c6:4b:6b:17:a6:f4:
af:c0:d1:31:0f:78:63:d7:d2:d2:b8:9d:98:63:84:
3f:91:a0:32:8a:7a:e7:51:3a:64:51:e2:59:1b:ec:
54:4b:b6:87:39:f9:96:c5:4b:53:8b:6d:95:dc:ce:
d0:1c:99:a8:51:63:b6:d1:5b:7b:34:72:25:56:d7:
ec:9d:52:e4:56:cb:ed:1c:93:58:f0:ec:83:89:11:
74:01:4c:0c:7a:2c:f7:d6:21:ba:4c:25:d3:8b:1a:
1c:72:c4:3a:2f:de:99:17:ef:10:0f:ff:a0:ef:e6:
71:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BB:18:EE:F5:36:20:12:13:D6:18:0D:7F:15:4E:31:2C:74:78:61
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3233372e302f32342d3234203d3e20323039383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.237.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:07:34:d0:d5:81:7e:76:98:9d:23:c5:a3:25:74:28:78:08:
f8:68:85:78:fb:05:1d:9a:34:93:13:49:8c:4e:2c:ae:83:98:
71:19:0c:e0:d7:93:ce:51:45:88:e0:02:76:7e:47:61:c1:75:
5c:8a:de:b7:8e:86:9c:c2:92:1b:dd:c1:d6:c5:aa:be:a7:50:
9c:1d:f2:fa:8d:4c:0b:4b:f6:fa:e9:04:98:aa:ed:06:c6:27:
25:be:1f:7e:4b:d7:9f:c9:1d:1c:0a:ea:f4:1b:84:9f:3f:92:
ed:5d:de:69:98:d2:b1:0d:c1:4b:90:83:4a:2e:ae:4f:a2:98:
cd:61:ca:e4:1e:81:a6:ec:3b:d0:36:47:1e:8a:38:5c:05:97:
fd:3a:43:0e:a3:31:a4:92:f6:d9:c3:4c:75:90:41:ce:c4:52:
01:ab:84:4f:65:19:4b:1d:a7:16:3b:b5:7a:27:25:c5:a2:e0:
69:8b:48:09:b1:1b:f6:2c:a4:82:ba:27:b5:52:1c:63:c2:0d:
8c:fc:17:2d:d7:86:db:2b:25:39:4c:06:3b:28:15:f5:74:7f:
6c:6a:95:df:bd:40:a1:80:45:4a:e8:24:f6:9b:e6:83:21:28:
dd:bc:23:41:bc:a3:13:f7:4e:17:f2:26:d9:8e:38:7e:2b:30:
de:90:12:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:04:27 2024 by rpki-client on console-fra.rpki-client.org