Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3234372e302f32342d3234203d3e20313336373837.roa
File: 3138352e3230352e3234372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: +hoEcClh+E2l3YhHcOV9P6LEDYIeg7rTgpwSKTv8is4=
Subject key identifier: 88:D3:32:61:06:8B:4D:39:76:9C:C2:1B:57:22:B5:3E:FC:C0:5E:64
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 11531F5F574C02F5129C692E3D60D2907F4EF309
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3234372e302f32342d3234203d3e20313336373837.roa
Signing time: Tue 23 Jul 2024 21:04:22 +0000
ROA not before: Tue 23 Jul 2024 20:59:22 +0000
ROA not after: Tue 22 Jul 2025 21:04:22 +0000
asID: 136787
IP address blocks: 185.205.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:53:1f:5f:57:4c:02:f5:12:9c:69:2e:3d:60:d2:90:7f:4e:f3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 20:59:22 2024 GMT
Not After : Jul 22 21:04:22 2025 GMT
Subject: CN=88D33261068B4D39769CC21B5722B53EFCC05E64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:01:83:4c:f8:ba:21:c3:de:d4:f2:05:73:85:
c6:f9:cc:1d:19:d5:bc:c3:06:09:51:8d:68:fb:6b:
2a:f3:7a:62:ef:fc:c2:3f:1a:0b:18:32:31:f9:c4:
22:1a:86:93:c9:cf:83:24:60:20:50:80:8d:3b:6e:
16:fa:01:eb:ae:6f:d6:52:48:39:93:60:d2:76:dd:
97:40:39:a9:bb:a3:7a:81:f7:75:30:85:21:0e:52:
d1:91:b0:b5:6d:6e:e3:63:35:a4:cf:f4:d2:e9:c0:
a9:32:cb:37:f1:ac:5d:77:bf:c5:b7:5e:f0:63:53:
24:fb:33:3c:05:e0:d6:0c:28:1a:13:8c:a6:09:72:
6c:3b:34:dc:e5:fe:94:0b:e6:54:21:e9:0b:ed:7a:
bc:93:59:0f:5c:e5:a4:78:25:94:77:c8:0e:1a:59:
23:e9:78:0b:09:c7:37:01:62:af:2c:7e:65:d2:4f:
76:cc:64:f5:4f:3c:a5:29:fe:2f:02:65:7f:1d:7b:
52:b7:4c:fd:c8:fa:ed:8b:7a:b5:28:e1:76:f8:6e:
bf:c5:c4:4e:ee:75:86:68:5d:f3:24:c4:1d:3f:50:
ad:68:73:b3:3d:e9:f1:be:a2:33:f3:f9:ea:ea:b3:
cd:9b:89:17:08:a8:1a:ec:7d:37:27:86:c5:bf:5f:
44:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D3:32:61:06:8B:4D:39:76:9C:C2:1B:57:22:B5:3E:FC:C0:5E:64
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3234372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.247.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:0a:41:75:82:9d:ae:07:e3:44:e6:fe:b9:2c:f5:a2:79:2d:
ed:45:6d:0f:e3:95:1c:04:52:75:99:f8:b6:eb:c1:f0:64:34:
50:3b:97:c0:84:24:fc:0f:4f:40:ce:ec:0e:b6:71:a0:1f:25:
cb:c4:4e:6e:62:19:d7:d8:d6:99:6c:93:45:0a:fb:90:2f:e5:
30:32:71:01:d4:9a:e6:7c:9a:86:5a:e4:10:43:1f:f3:dc:d2:
98:c8:45:5a:6c:ee:ff:db:b1:db:35:18:d1:7f:62:26:1f:62:
d1:a0:e9:fc:38:73:21:68:fb:46:d2:e6:fb:5f:b2:5d:72:fb:
eb:30:65:e6:a6:15:12:82:ed:db:f5:71:25:20:97:36:f6:29:
9f:8c:08:86:04:7e:8e:16:47:e0:dc:d0:08:56:a3:dc:29:4e:
cf:f2:8d:30:b4:c3:62:bd:4a:3d:47:bc:bf:97:e3:d4:91:eb:
80:69:98:f9:f7:11:a8:c2:ad:17:3b:49:1f:d5:30:33:b1:9e:
4f:91:fa:a4:58:7f:d4:82:f6:b0:30:c9:cd:66:58:26:38:6b:
fa:5f:ab:4d:2d:46:e2:0e:ff:6a:56:c5:2f:89:1c:58:c0:e8:
27:9f:fb:e4:af:70:96:23:dc:82:79:09:7c:a9:49:4f:df:86:
96:aa:b3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:45 2024 by rpki-client on console-ams.rpki-client.org