Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231312e352e302f32342d3332203d3e203531313637.roa
File: 3138352e3231312e352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: swm91/CZekXE838nu3uCFiXPWr80i66FWp5XJnIbEaI=
Subject key identifier: F5:F4:67:55:C3:BE:03:99:CE:7A:F0:1B:90:6F:A4:73:74:9B:8F:6D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 03636E66EF94635700201818614CD115C97B606C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231312e352e302f32342d3332203d3e203531313637.roa
Signing time: Fri 20 Sep 2024 14:05:02 +0000
ROA not before: Fri 20 Sep 2024 14:00:02 +0000
ROA not after: Fri 19 Sep 2025 14:05:02 +0000
asID: 51167
IP address blocks: 185.211.5.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:63:6e:66:ef:94:63:57:00:20:18:18:61:4c:d1:15:c9:7b:60:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 14:00:02 2024 GMT
Not After : Sep 19 14:05:02 2025 GMT
Subject: CN=F5F46755C3BE0399CE7AF01B906FA473749B8F6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3f:25:7a:88:8e:b5:53:9e:cc:85:3f:cd:33:
d6:05:46:e7:df:19:e9:5b:4c:b6:ae:8c:3f:e1:76:
83:24:a1:52:4e:84:d8:78:e9:df:19:7d:2c:a8:7d:
92:9d:f5:1c:17:b7:a0:82:13:8b:f3:a6:1c:1a:18:
92:7d:a2:44:8f:ad:d7:c5:b7:5b:14:e8:42:ee:b2:
9f:4c:a0:54:5e:4e:3b:d8:98:8b:19:0b:72:ac:5f:
5e:40:e1:d6:26:97:a3:f5:7b:95:b7:61:47:46:60:
08:dc:fb:9d:81:20:82:92:fa:46:76:b6:22:b3:bf:
b7:02:68:7e:44:2a:9b:47:05:f5:9d:03:41:c4:66:
b0:5a:59:f4:53:87:97:98:b7:59:6a:03:27:25:17:
91:41:db:97:50:a1:8e:aa:76:44:8e:21:1c:ae:1b:
c0:2d:94:78:8e:7c:ab:21:f3:b5:0a:81:33:5d:16:
52:35:af:d0:7f:27:f1:e5:92:29:ff:02:1c:5f:7c:
7c:65:00:e6:9f:56:6f:c5:27:96:3e:dc:89:d2:d0:
7e:97:21:eb:4a:d6:a6:5e:df:81:d6:49:27:cb:7c:
ae:9e:f7:98:e4:87:cc:bb:8e:34:37:0b:3e:7d:dc:
51:50:db:da:86:bc:c7:89:c1:fe:01:87:ef:ea:de:
10:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F4:67:55:C3:BE:03:99:CE:7A:F0:1B:90:6F:A4:73:74:9B:8F:6D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231312e352e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.5.0/24
Signature Algorithm: sha256WithRSAEncryption
33:17:b8:87:d9:d4:3d:be:7e:45:f3:88:50:69:cf:89:25:48:
84:2b:2d:3e:a0:ed:1f:c6:9e:1c:f6:27:b6:c1:e8:a1:b8:44:
05:fe:32:9c:13:c3:96:d4:23:09:62:19:cf:c1:75:50:b1:63:
6a:03:1b:dc:e5:20:09:8e:0a:81:a0:53:65:b8:bc:1a:be:b9:
be:cd:a5:f5:2b:29:23:43:55:20:49:0f:9c:e6:79:4d:77:e4:
45:f3:77:8f:8a:cc:9f:07:5b:8b:e4:a4:8a:13:29:bd:9b:71:
5a:45:49:b3:6f:09:d9:a2:47:f3:8a:40:9f:be:31:ce:40:b4:
03:40:6e:ed:32:39:64:7a:c5:75:0f:27:5c:b3:72:8c:9c:4b:
e6:21:8d:a6:86:b5:fb:dd:09:f9:c9:4a:f0:de:0a:86:31:9b:
85:d0:6b:0d:f6:78:4a:24:43:02:71:ac:3f:3a:f5:72:5d:dd:
34:59:74:43:2a:66:e2:9e:08:db:1e:33:07:6e:2a:33:2d:4c:
28:e7:77:57:6e:22:ae:ff:2f:84:ec:69:c1:7a:2e:91:68:9a:
96:be:77:eb:98:30:c4:39:57:8b:91:1f:c0:74:ff:77:5a:4b:
e5:58:22:7e:a2:0f:c3:2f:6a:9f:35:b9:0c:e6:94:4f:9f:44:
f2:39:64:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:45 2024 by rpki-client on console-ams.rpki-client.org