Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231352e3138322e302f32342d3234203d3e20313336373837.roa
File: 3138352e3231352e3138322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: /kQjbXuQPwJH35Qx7qlYbu/gCMA7sV2TLMyHPutxHA4=
Subject key identifier: 2E:6F:59:16:EF:CC:92:A9:49:D8:13:3B:94:F5:9E:33:B9:6D:01:CC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 45AE5C8DEE71633A718AD480D4948FB323EEE892
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231352e3138322e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:30 +0000
ROA not before: Mon 26 Feb 2024 08:48:30 +0000
ROA not after: Mon 24 Feb 2025 08:53:30 +0000
asID: 136787
IP address blocks: 185.215.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ae:5c:8d:ee:71:63:3a:71:8a:d4:80:d4:94:8f:b3:23:ee:e8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:30 2024 GMT
Not After : Feb 24 08:53:30 2025 GMT
Subject: CN=2E6F5916EFCC92A949D8133B94F59E33B96D01CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d5:24:41:23:87:c3:3d:26:0c:f3:23:fb:1a:
db:7a:63:1b:bc:b0:16:3d:b4:93:6f:81:09:24:57:
34:cb:30:94:36:d1:43:bd:bd:cb:87:0b:ec:78:96:
14:82:ff:b6:26:4f:45:e3:16:b6:04:5a:ff:c4:07:
5c:d7:92:2f:fa:56:d1:91:a4:dd:60:63:73:9d:99:
3c:8e:56:63:ac:45:9c:42:d8:10:ad:58:cc:7f:bc:
46:85:cd:32:c9:82:5e:0c:15:8e:74:e5:1a:f2:5e:
26:b2:e5:59:5b:b3:1f:fd:ec:dc:15:c4:64:50:11:
27:a2:fb:41:42:1a:c2:34:12:72:d5:13:88:04:f5:
66:30:24:4f:ba:bb:f1:a2:10:ff:92:e7:9d:02:19:
37:75:dd:30:20:b0:c2:1e:87:7b:3d:c7:71:07:5b:
e4:f1:9a:7b:d1:dd:61:fc:97:fb:c6:1f:d8:09:78:
c4:8d:bf:9a:33:c5:83:e9:db:f2:36:9a:45:8e:36:
8a:da:80:92:33:9b:b4:02:07:6f:90:2c:ee:08:c9:
7d:61:36:03:25:31:75:f3:be:04:e6:b6:60:10:ae:
46:be:0b:47:25:f7:c1:f5:21:32:52:73:df:23:e8:
16:44:5c:39:97:c3:20:d0:98:22:15:ff:42:79:15:
9e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6F:59:16:EF:CC:92:A9:49:D8:13:3B:94:F5:9E:33:B9:6D:01:CC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231352e3138322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.182.0/24
Signature Algorithm: sha256WithRSAEncryption
50:6d:39:64:d5:ed:7a:24:bc:1f:03:98:2a:c8:31:06:60:17:
cd:03:47:ce:76:08:c9:f9:4e:db:d6:1a:bf:67:8e:15:b6:0f:
ba:17:8f:24:f8:76:d8:bc:bd:62:d6:69:90:eb:9f:80:79:92:
85:e2:72:02:fc:e1:8a:f4:8d:30:18:17:39:ee:96:16:8a:50:
af:65:5b:3a:f9:b1:0e:66:b7:0c:a9:a6:79:63:ba:d6:63:00:
b8:30:7f:10:d9:7f:a2:e6:7e:d0:05:ca:ed:10:2d:4d:79:9a:
a2:23:62:43:be:af:e2:f2:98:41:e6:85:9c:b7:5c:58:ab:cb:
9b:ca:7c:9d:15:44:20:8c:76:f6:db:68:dd:96:dc:65:e8:78:
2c:3f:f5:97:09:82:51:8e:40:b9:9f:53:f2:90:98:04:ba:b4:
97:1f:01:92:19:b0:95:cf:57:f1:58:8a:a8:dc:46:6b:b9:ca:
ab:20:a1:ac:ca:a9:e5:53:f7:9e:53:9a:4c:b4:d7:ed:ef:77:
4d:e8:86:15:54:5d:6b:a0:2a:c6:85:95:bb:a5:3b:45:3f:a5:
e5:46:ac:8a:e1:e3:25:8c:6c:97:d9:c6:f4:33:2a:bf:63:c9:
c1:b5:fe:5c:61:53:02:98:09:3c:46:b5:48:96:ee:d5:f1:6b:
c9:0b:99:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:32:58 2024 by rpki-client on console-ams.rpki-client.org