Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232302e302f32342d3234203d3e203432383938.roa
File: 3138352e3230392e3232302e302f32342d3234203d3e203432383938.roa (raw, json)
Hash identifier: xzQtkNonV2AwjosuD3OmCmxowAOUTlDXMkD22TsG8o0=
Subject key identifier: 70:78:09:49:DB:79:32:7F:CC:B9:A7:9E:AE:97:05:23:D2:90:DB:AD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5FBBBCE289D7DC7D0C1870FD0E21CD0231946B67
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232302e302f32342d3234203d3e203432383938.roa
Signing time: Fri 20 Sep 2024 14:04:53 +0000
ROA not before: Fri 20 Sep 2024 13:59:53 +0000
ROA not after: Fri 19 Sep 2025 14:04:53 +0000
asID: 42898
IP address blocks: 185.209.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:bb:bc:e2:89:d7:dc:7d:0c:18:70:fd:0e:21:cd:02:31:94:6b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:53 2024 GMT
Not After : Sep 19 14:04:53 2025 GMT
Subject: CN=70780949DB79327FCCB9A79EAE970523D290DBAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:99:66:c5:7c:09:de:0b:80:cb:cb:0f:95:a7:
38:53:da:47:d3:0f:f9:95:75:07:66:1f:bc:df:d1:
53:9c:e7:12:78:cb:ad:2d:c2:d9:7e:83:2a:40:26:
66:d7:b7:cf:5e:e9:0b:c4:1e:0a:f0:78:8f:16:08:
40:da:55:22:35:d0:08:54:0a:e6:5f:cb:ac:75:d3:
ad:2b:91:b5:ab:9a:70:43:b1:b7:84:23:9f:5d:77:
1b:98:a9:6f:12:98:77:21:36:44:f3:68:02:1f:de:
4d:ff:91:47:1c:25:d5:54:99:28:56:19:36:5b:e2:
28:48:1b:97:28:43:7a:f7:2f:dd:db:92:71:f0:bb:
94:e4:5a:3f:23:90:82:93:06:ef:6c:5b:41:25:5e:
e9:b6:0f:40:eb:71:cf:c8:b8:35:0b:17:90:1f:38:
bd:c7:5e:c6:81:4f:44:98:52:df:cd:5d:32:c6:0b:
bf:ed:1d:e9:e6:c7:0f:aa:5e:99:76:d5:64:bd:00:
db:dc:11:78:3b:4b:4d:63:4a:77:7e:75:fb:10:ac:
9d:37:e5:44:46:f5:f9:a6:8e:53:2f:dd:21:cf:7d:
de:cd:53:07:ec:50:64:ab:0a:05:07:ac:53:da:5c:
9c:7f:01:9b:ee:d0:f8:79:a5:eb:6a:bb:d6:07:a2:
94:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:78:09:49:DB:79:32:7F:CC:B9:A7:9E:AE:97:05:23:D2:90:DB:AD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232302e302f32342d3234203d3e203432383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:f1:a5:72:bc:a2:02:8e:69:7b:00:dc:62:68:f7:ed:07:f0:
aa:b4:cd:71:12:b9:36:bf:60:6c:38:8a:ed:d2:d8:ed:18:64:
6c:5b:0f:1e:59:7c:23:86:b2:9e:bb:06:0a:32:58:a5:20:c5:
c1:20:30:90:93:e6:a0:01:9a:34:ff:d5:d8:03:fb:97:a3:aa:
65:6f:d0:cb:ff:a1:f2:13:ed:d8:13:64:f7:17:72:c8:ec:63:
fa:ee:63:31:ee:85:7c:9e:f3:81:f8:33:2a:eb:aa:4c:7a:7c:
4e:d8:b1:66:fa:fa:a3:79:57:a3:dd:a4:4f:0d:6f:7f:66:15:
e6:94:15:e4:f7:53:ac:d9:35:c3:c0:bd:7c:6d:a8:fd:c9:f3:
73:3b:1d:98:4e:d2:6d:89:1d:06:ce:93:06:47:a9:60:a6:73:
4e:ca:be:02:4e:4b:c1:b0:c1:99:e0:b8:12:8b:73:3a:5c:d6:
71:4c:53:57:87:9e:35:75:98:45:9e:69:46:09:5a:b6:d0:82:
b1:4e:a1:70:82:a8:5e:25:6c:27:80:50:94:b9:22:8a:60:4f:
e9:50:15:ab:dd:ef:c4:56:83:19:b8:cd:c8:46:94:55:3e:fb:
56:70:ea:e1:52:65:09:4c:af:85:0f:12:f2:06:39:61:33:45:
9f:cc:11:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:03 2024 by rpki-client on console-fra.rpki-client.org