Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3139342e302f32342d3234203d3e203631333137.roa
File: 3138352e3230352e3139342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: 74hXcqSNCRvZ+c8HT2+2/ZFB/k2VNx7ccyfcLwPLWvI=
Subject key identifier: 88:3C:D7:14:56:C1:EE:BF:3E:59:B9:C3:F6:F5:EB:FE:6F:2E:F6:E5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1E42F0226FE224474AC7AC16BC89C4E3C55BB385
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3139342e302f32342d3234203d3e203631333137.roa
Signing time: Mon 26 Feb 2024 08:53:09 +0000
ROA not before: Mon 26 Feb 2024 08:48:09 +0000
ROA not after: Mon 24 Feb 2025 08:53:09 +0000
asID: 61317
IP address blocks: 185.205.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:42:f0:22:6f:e2:24:47:4a:c7:ac:16:bc:89:c4:e3:c5:5b:b3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:09 2024 GMT
Not After : Feb 24 08:53:09 2025 GMT
Subject: CN=883CD71456C1EEBF3E59B9C3F6F5EBFE6F2EF6E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9e:51:1e:80:a8:97:84:fc:a0:a0:78:2f:54:
78:84:72:ea:41:a0:e7:0e:8a:87:d1:10:26:43:7d:
bc:9e:4e:3a:4d:3d:e1:49:6c:f1:09:67:7e:ce:5b:
45:51:7a:e8:e6:48:0e:9b:d0:41:f7:07:87:e3:11:
22:6d:b9:58:0f:4d:49:ab:1f:07:0f:62:b7:af:f3:
19:27:53:9f:03:c0:e3:aa:56:46:c3:55:5b:e9:f9:
cf:ab:6a:83:1b:c4:c5:31:5a:36:82:de:02:91:3d:
79:9b:82:22:db:68:0e:0d:ec:ea:5a:83:2c:7d:90:
66:a3:e8:f6:1f:7a:52:e3:e3:d2:a0:c4:0d:e2:74:
43:2f:37:8e:3a:0b:78:02:e4:b1:11:8a:3a:e8:78:
68:33:2e:a8:04:2e:e8:f1:23:33:22:c9:11:73:f9:
8f:e7:31:11:84:c4:e3:dc:32:da:40:f1:33:ac:1a:
44:97:aa:4f:ae:45:aa:1a:14:bf:b4:e8:19:09:58:
d8:ec:2c:16:e1:2b:97:58:79:2e:fb:e5:36:a4:87:
d2:bd:42:22:31:87:15:34:14:f7:90:c8:cd:09:03:
05:94:69:30:40:54:a8:c2:bf:90:51:4b:2f:ec:3d:
d6:7d:00:c8:a8:d4:fc:57:a7:a2:b0:66:ac:72:8d:
64:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3C:D7:14:56:C1:EE:BF:3E:59:B9:C3:F6:F5:EB:FE:6F:2E:F6:E5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3139342e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.194.0/24
Signature Algorithm: sha256WithRSAEncryption
49:65:9b:0e:93:c4:88:f2:b7:da:3b:87:cc:23:d8:83:3f:2b:
d8:08:bb:62:46:f1:6f:38:4a:74:a0:c2:fc:ab:f7:04:8b:46:
59:9b:d9:9d:d8:1f:73:f4:52:af:74:06:1f:21:95:21:92:76:
16:3a:08:4a:d6:e6:cd:62:8b:83:b2:58:1c:f3:29:4b:5c:0e:
89:7a:05:cf:f2:4e:51:34:3d:ab:b8:26:e3:83:b8:1b:22:f6:
15:08:5f:85:b0:ba:a1:49:4d:af:7c:46:93:06:82:f7:8b:4c:
f1:78:50:cd:55:ec:9d:73:8f:ca:cf:15:c9:87:d7:d0:9f:99:
3a:27:6d:00:7d:10:35:a7:6c:c5:fd:56:e7:09:68:a3:1a:30:
e7:40:21:dc:7d:53:d6:c9:3a:4f:ed:30:67:1b:6e:75:fe:61:
ce:4e:ac:4a:f4:41:a0:fa:7e:6a:30:2f:e9:21:6a:89:35:73:
a5:f0:5f:d2:fe:de:80:3e:28:2d:01:ca:47:28:e9:cd:8a:9e:
dc:6d:58:38:91:ad:76:62:f0:22:3b:22:4b:d2:a3:d7:ca:38:
95:62:17:bc:cc:83:34:bf:97:ea:e8:fa:58:de:21:05:9c:bd:
4c:0a:e0:32:c9:d7:f6:a6:8f:2e:7a:7a:ba:bb:e0:0f:0f:ad:
d0:0e:f8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 18:15:06 2024 by rpki-client on console-ams.rpki-client.org