Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231322e36382e302f32342d3234203d3e20313336373837.roa
File: 3138352e3231322e36382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: /ffLwMYDSveonKRX+nxjhYgupknn/SymbF71/oIykqY=
Subject key identifier: 2A:64:36:8F:DC:19:77:DD:4E:5E:8E:2F:99:38:D9:3F:E4:9E:85:6C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 48BC1CE9BAAEF81E8157F176C09A199F6E55859F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231322e36382e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 11 Jun 2023 11:00:23 +0000
ROA not before: Sun 11 Jun 2023 10:55:23 +0000
ROA not after: Sun 09 Jun 2024 11:00:23 +0000
asID: 136787
IP address blocks: 185.212.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:bc:1c:e9:ba:ae:f8:1e:81:57:f1:76:c0:9a:19:9f:6e:55:85:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 11 10:55:23 2023 GMT
Not After : Jun 9 11:00:23 2024 GMT
Subject: CN=2A64368FDC1977DD4E5E8E2F9938D93FE49E856C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e3:31:8d:53:03:bf:9e:f7:74:52:8d:dd:02:
8e:cb:83:3a:c7:59:fc:da:93:12:e9:86:64:66:45:
37:40:55:01:fd:3d:46:8f:a7:e5:e5:17:91:47:30:
59:4b:2b:63:7d:f3:56:50:a9:c0:c3:ef:69:95:af:
e7:9d:b1:c2:f7:c8:fb:e3:d1:a8:15:02:43:ab:6d:
34:d0:f8:32:41:e6:93:ca:8a:5b:ab:2e:32:3e:76:
98:5c:37:41:79:b6:33:37:56:76:4a:b5:4a:30:63:
13:79:c1:1e:94:22:50:4d:dc:f4:44:69:3b:09:e1:
42:09:6c:4e:1c:91:57:88:01:7f:b9:38:98:42:51:
fa:18:dd:a2:41:23:d3:e8:bb:ab:2f:74:b3:e0:f8:
4c:16:b8:ec:05:05:8c:6a:f4:08:2a:de:c7:e4:5d:
c0:6e:a4:4a:3f:77:c7:c2:37:8f:43:04:25:e6:7c:
45:bb:04:2a:6a:6b:a8:fe:c9:62:dc:01:8f:37:49:
da:a0:d7:2f:15:91:bc:28:15:c6:c7:8e:6d:9d:f5:
9a:c9:b5:ec:5e:b7:9f:a8:21:a8:98:9e:61:4b:a8:
67:64:dc:05:83:ff:41:c4:31:9a:87:c2:7d:8f:fd:
f5:d3:b5:64:00:76:c9:74:3a:4f:c0:66:9c:90:8a:
c0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:64:36:8F:DC:19:77:DD:4E:5E:8E:2F:99:38:D9:3F:E4:9E:85:6C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231322e36382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.68.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:2f:88:9d:1d:cd:bb:fe:b5:c8:c2:0c:07:06:02:95:30:59:
d5:66:8a:1c:c6:05:70:a6:ae:a1:59:b6:50:84:6d:4d:e0:f6:
b9:d4:a0:1c:14:40:eb:70:08:e5:4d:36:ed:07:4b:0c:51:b8:
6c:e8:b7:dd:31:0a:61:f0:4a:f6:40:4d:f8:60:79:74:fa:cb:
9d:67:79:c7:36:36:ed:d6:fa:77:59:d2:84:0e:ea:88:3a:cf:
5a:88:f2:da:86:4e:34:6c:08:1b:2d:80:74:a5:a2:f5:5f:0d:
a2:fa:b1:81:b4:e9:82:38:5b:b6:46:c9:8b:8d:0b:28:d3:e9:
44:bf:e5:d5:7f:46:e4:db:5c:fb:ec:2d:20:b9:e1:3c:df:86:
a0:81:50:81:cd:69:f7:46:73:5d:b5:5e:60:d2:91:05:1f:74:
cd:06:d5:8a:8a:19:f1:f3:d5:20:b6:a5:ba:7e:a1:f2:4d:8e:
d5:71:e4:77:0d:7c:fe:8c:a1:78:3c:b9:6a:9b:ab:4e:ba:8f:
56:41:54:2d:fb:6f:b2:1b:dc:72:60:b2:f6:83:ac:97:e8:70:
ac:47:c0:2f:f7:e2:d0:9b:d7:2b:d7:39:bb:d4:d8:c7:c7:14:
33:bd:31:5e:5a:08:a1:dd:3a:70:30:16:1f:4d:a6:07:7e:f5:
2f:f0:d0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:21:25 2024 by rpki-client on console-fra.rpki-client.org