Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232332e302f32342d3332203d3e203531313637.roa
File: 3138352e3230392e3232332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: GgNFp4Ovq+Cj+f0M4RVvxbAz19Yc+vMr5vbEbAIoV+E=
Subject key identifier: D4:E3:DD:33:55:D5:34:FA:E0:7F:1F:DC:91:7A:39:C4:DA:EE:E6:C6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 20CC04F56C94AF59185F7DB3971BFE84F0BA53F1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232332e302f32342d3332203d3e203531313637.roa
Signing time: Fri 20 Sep 2024 14:04:59 +0000
ROA not before: Fri 20 Sep 2024 13:59:59 +0000
ROA not after: Fri 19 Sep 2025 14:04:59 +0000
asID: 51167
IP address blocks: 185.209.223.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:cc:04:f5:6c:94:af:59:18:5f:7d:b3:97:1b:fe:84:f0:ba:53:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:59 2024 GMT
Not After : Sep 19 14:04:59 2025 GMT
Subject: CN=D4E3DD3355D534FAE07F1FDC917A39C4DAEEE6C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8c:ff:94:12:6c:88:5d:e6:c1:d2:5f:ed:58:
5d:41:74:03:ae:4d:ae:f6:f5:c3:83:53:f1:a4:e0:
94:63:83:71:62:58:2b:91:d2:3b:fa:bf:94:20:52:
b3:b1:f6:5a:9d:a3:a0:97:20:8a:71:47:db:2a:f1:
16:a2:f8:cf:c5:54:fc:70:02:f0:2d:fd:79:47:11:
83:a9:92:0c:6b:3f:cd:45:2f:52:47:91:8e:1f:5a:
c6:9b:1f:90:12:ec:78:58:60:34:e9:a9:2c:1a:5c:
34:23:a5:e1:4a:28:dc:82:7f:84:f4:54:29:59:26:
ab:1b:ec:b1:e1:4d:80:cf:f6:da:96:53:24:07:f4:
95:6b:a9:94:f0:a9:8c:8e:51:02:7b:95:73:47:f4:
4f:b2:3f:53:29:14:04:d3:2e:b4:11:08:a3:43:e8:
0c:0e:de:7e:39:e0:f2:e2:c3:48:e2:06:b0:de:59:
24:58:a3:02:e6:07:7d:8e:ef:ce:56:51:02:36:ba:
c7:b7:8a:00:33:a1:6c:72:3a:c9:5e:7f:3f:cb:09:
55:c2:24:89:96:54:63:5f:f0:1a:a3:33:86:f9:c0:
89:86:ed:69:b0:1a:10:dc:04:aa:0d:b5:ad:c0:4b:
a0:f4:50:0a:c3:9e:2e:72:d0:cd:1f:02:d8:92:6f:
13:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E3:DD:33:55:D5:34:FA:E0:7F:1F:DC:91:7A:39:C4:DA:EE:E6:C6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232332e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.223.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:57:bf:f8:38:64:2b:07:a9:02:73:8a:38:f1:0e:21:a7:da:
7e:38:dd:60:20:b9:a0:8d:5c:d2:2a:74:0a:38:af:63:ce:23:
aa:12:aa:58:99:6c:b6:cf:14:73:6d:01:dd:05:9b:fa:e7:dd:
5d:69:c5:ee:5a:bb:35:02:cf:e4:1b:3e:24:5f:2d:c2:ca:24:
83:1e:77:05:c9:c7:82:0e:ea:dd:5c:59:f9:8f:d3:07:45:47:
14:69:7b:b6:2d:81:64:63:c8:90:25:13:89:33:96:bb:5e:83:
19:82:16:dc:c3:32:07:25:74:fd:e8:53:5f:db:4d:fb:25:9f:
7a:91:07:d7:37:16:dd:51:13:88:05:f8:03:38:81:50:2d:50:
3f:0d:82:8d:a0:de:ef:24:12:ce:c0:60:a9:c5:57:94:d1:91:
c1:b3:9b:9a:3e:74:ed:9b:e1:b9:13:10:c2:08:24:c0:3f:36:
bb:01:77:8d:c1:a6:98:5d:ba:46:ff:a5:fe:65:84:21:8f:37:
5a:88:cf:27:17:a3:b9:20:a6:d9:6f:94:c2:44:44:71:78:92:
0b:b3:ef:6d:a0:29:0c:a4:1b:bd:f0:ca:b9:e3:ba:c5:2e:c1:
d5:a4:16:75:76:1e:5b:f0:cf:43:d7:87:de:ea:4f:14:47:dd:
67:3f:4f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:29:13 2024 by rpki-client on console-ams.rpki-client.org