Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3234352e302f32342d3234203d3e20313336373837.roa
File: 3138352e3230352e3234352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: IELVHjAdpV1qBkwjOsk4CkckbhvihrkyilwJ9TJwr5Q=
Subject key identifier: 77:F2:59:FA:51:8C:CF:B8:F4:60:DD:D6:93:49:3C:05:2F:99:50:07
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5B05FD919D16F3634BFF35901B758D5B4FF985B6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3234352e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 11 Jun 2023 11:00:17 +0000
ROA not before: Sun 11 Jun 2023 10:55:17 +0000
ROA not after: Sun 09 Jun 2024 11:00:17 +0000
asID: 136787
IP address blocks: 185.205.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:05:fd:91:9d:16:f3:63:4b:ff:35:90:1b:75:8d:5b:4f:f9:85:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 11 10:55:17 2023 GMT
Not After : Jun 9 11:00:17 2024 GMT
Subject: CN=77F259FA518CCFB8F460DDD693493C052F995007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:d1:c4:c8:7e:92:b1:0c:95:49:9b:b3:a9:
3e:8e:66:9c:be:82:8e:84:d2:d0:47:96:6b:77:41:
ba:a8:af:ff:b4:0f:6d:00:a0:0d:85:d4:5a:db:1e:
5b:1c:75:c6:de:8d:73:27:af:2f:af:2e:fe:d8:7c:
b2:af:88:02:15:7e:89:50:a1:dd:fc:ee:ae:14:9d:
cd:ad:d2:08:2c:ea:5a:73:66:28:60:4a:63:5c:c7:
b6:d2:52:45:12:a0:23:f2:94:f5:1b:2f:89:0c:ac:
6f:6f:6f:35:19:63:48:65:33:98:a9:dd:57:ba:b4:
7c:a5:0f:2d:cd:81:5f:3f:bb:e6:ab:0c:e8:e6:7a:
00:50:b1:e9:91:72:7d:70:35:0d:09:dc:0e:26:78:
c0:b3:dd:cb:6a:5f:c8:58:06:14:99:b7:34:81:b1:
0f:6e:da:fd:33:1f:32:af:c5:4f:cc:0d:f9:a8:60:
07:47:de:dd:de:4b:b3:f0:36:18:c5:d2:5c:84:1f:
98:df:0f:46:1d:e6:71:92:8a:0a:b7:4f:63:a5:56:
64:fd:0e:84:3f:d7:e1:0d:88:b2:30:02:d3:4a:1c:
25:d9:91:6d:d6:80:81:c4:dc:aa:75:02:0a:be:ac:
2c:a3:54:9f:ad:f3:3a:51:54:ef:83:cc:24:3d:0f:
c3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F2:59:FA:51:8C:CF:B8:F4:60:DD:D6:93:49:3C:05:2F:99:50:07
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3234352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.245.0/24
Signature Algorithm: sha256WithRSAEncryption
87:21:54:d9:17:ee:d3:30:b8:18:ab:21:79:92:53:8c:dd:be:
28:80:41:5e:8c:cf:f3:6c:3c:4b:cb:3b:40:9d:7c:e0:85:25:
90:a2:3c:68:79:92:ee:47:96:5c:81:ec:b1:c9:ad:44:3b:b9:
7f:bb:db:70:37:e6:1c:bb:c1:1e:4a:c7:39:c2:9e:67:06:4f:
7c:e9:2f:63:34:db:af:4b:32:d0:f8:06:94:0d:ef:a7:e5:fc:
32:fa:0d:0c:2b:cc:18:08:a9:73:23:2e:dc:b6:3e:73:c2:6d:
0d:1f:61:88:c8:bc:13:ac:aa:dc:77:6d:d3:97:ba:4b:ba:35:
b1:e6:f6:ce:45:b3:3a:0b:76:17:a2:c1:b0:5d:f1:45:4d:aa:
09:45:ba:94:d7:1a:c7:29:b3:64:41:3a:f6:1e:a9:d3:ee:98:
3b:b6:3b:1c:bd:b7:e7:5f:24:a2:dd:4b:f4:47:0b:82:4d:92:
9a:6b:f4:55:91:2a:5b:0b:89:c9:4d:71:ef:db:1a:51:38:c3:
05:bd:d8:a8:8b:8a:a6:35:46:48:49:7c:9c:49:14:3c:42:cd:
c7:04:13:ac:46:58:49:f7:aa:15:a8:65:ec:d0:a4:75:03:e9:
ce:4a:5e:f3:52:38:c6:3d:6b:4e:6c:a5:34:c5:24:82:9e:9a:
7b:f1:48:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:21:25 2024 by rpki-client on console-fra.rpki-client.org