Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230372e3234392e302f32342d3332203d3e20313336373837.roa
File: 3138352e3230372e3234392e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: pfzb1qmKHM1/nJ3Sdl4Ac98IxDqU4OfhFcInKNXWC2U=
Subject key identifier: 6B:90:56:5E:96:CF:4B:3A:49:D6:AD:09:DA:24:96:D3:AE:1D:6F:12
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7741F1EE22C043CA368659DFE5AD27932086CDE3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230372e3234392e302f32342d3332203d3e20313336373837.roa
Signing time: Fri 20 Oct 2023 13:41:49 +0000
ROA not before: Fri 20 Oct 2023 13:36:49 +0000
ROA not after: Fri 18 Oct 2024 13:41:49 +0000
asID: 136787
IP address blocks: 185.207.249.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:41:f1:ee:22:c0:43:ca:36:86:59:df:e5:ad:27:93:20:86:cd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:49 2023 GMT
Not After : Oct 18 13:41:49 2024 GMT
Subject: CN=6B90565E96CF4B3A49D6AD09DA2496D3AE1D6F12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0d:ca:18:2f:44:49:cc:92:21:18:35:f8:97:
a7:0a:f7:c2:7d:92:39:ff:95:61:c7:53:14:42:e6:
22:ec:e6:5f:66:ee:3c:59:20:e5:8d:ab:20:57:17:
97:b3:de:bf:26:c4:8f:fa:f1:8f:30:26:29:c2:48:
50:1b:bc:25:40:5d:a3:c3:e9:71:b2:ec:11:8c:68:
7f:9b:17:c3:03:10:cc:ee:b5:e0:1f:38:fc:33:e1:
21:a6:52:0a:30:24:ea:76:25:6d:58:22:0f:ad:68:
0d:aa:90:0e:89:8f:4d:91:3f:32:b0:66:48:b7:d0:
e4:90:7a:53:d6:7c:b3:ed:7d:1e:08:32:06:4e:d0:
47:90:1d:4d:48:59:ae:bf:e9:18:b8:c7:6e:84:c0:
bf:50:66:59:94:7b:f5:1b:1a:ed:8a:da:c2:9d:95:
be:9b:d7:14:a5:62:a8:28:16:28:0f:e0:71:66:f7:
71:1b:c9:d7:f2:d6:90:bd:5b:f0:3b:d9:96:45:27:
94:f4:99:a1:48:b3:8c:d8:f5:1b:37:98:ea:c5:c9:
1f:fc:be:f9:a6:21:43:01:1e:e5:24:ae:13:28:9f:
fb:58:83:c7:9b:a8:6a:2e:b5:2e:f5:b7:2c:12:50:
ae:fd:e7:98:44:09:a6:0d:ec:14:c1:d3:19:4f:e3:
de:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:90:56:5E:96:CF:4B:3A:49:D6:AD:09:DA:24:96:D3:AE:1D:6F:12
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230372e3234392e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.249.0/24
Signature Algorithm: sha256WithRSAEncryption
34:3c:f1:bf:0d:b2:63:1b:38:1f:f4:8f:68:40:57:8a:74:58:
e4:31:39:46:ac:03:6a:4b:0c:60:88:1e:e7:35:95:cc:fd:c9:
d3:f3:80:24:08:46:dc:75:ea:e3:40:42:11:38:58:61:4d:cc:
e8:17:06:d8:1f:76:1b:69:bf:19:17:75:19:ca:70:ca:73:b2:
8a:3d:26:e3:7d:65:68:07:7a:86:e5:d5:54:b9:c2:03:73:71:
65:d9:7b:d7:0a:68:67:c8:64:ee:37:3e:cb:77:95:8c:b0:be:
15:ae:c9:af:b6:50:9e:1a:2c:0d:d0:c0:7a:52:62:a5:37:51:
9e:67:a6:85:5f:bd:08:5e:fa:d9:ab:33:53:fa:61:d5:f6:3d:
aa:30:63:04:7f:3d:ea:db:0e:3c:bc:a5:d6:e3:8d:61:6f:de:
11:9c:69:b5:52:21:ac:69:2c:2f:4c:c8:79:c8:84:b0:db:38:
ad:11:dc:b5:92:53:2c:84:f9:4e:03:a3:89:bc:4d:08:d5:42:
43:80:f9:d7:48:fc:86:30:6c:05:93:2e:c7:a8:f7:48:39:82:
d7:94:21:6a:3c:68:df:57:b9:a4:36:11:f4:7c:c0:58:92:31:
4e:33:f1:08:95:45:e0:1b:87:7e:a7:31:07:da:05:7d:bb:36:
d5:82:fa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:21:53 2024 by rpki-client on console-ams.rpki-client.org