Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231352e3138332e302f32342d3234203d3e20383334.roa
File: 3138352e3231352e3138332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Kf216KIbFSphSlIL5vGsja2Ogo1sPahiMAGfLMLz5jU=
Subject key identifier: 9C:75:C5:83:A6:38:41:24:CE:E7:4E:0A:74:C1:90:96:D9:75:46:FC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 015B71DD6C48898BFB151E741E80315232CDD98F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231352e3138332e302f32342d3234203d3e20383334.roa
Signing time: Fri 19 Apr 2024 07:03:30 +0000
ROA not before: Fri 19 Apr 2024 06:58:30 +0000
ROA not after: Fri 18 Apr 2025 07:03:30 +0000
asID: 834
IP address blocks: 185.215.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:5b:71:dd:6c:48:89:8b:fb:15:1e:74:1e:80:31:52:32:cd:d9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 19 06:58:30 2024 GMT
Not After : Apr 18 07:03:30 2025 GMT
Subject: CN=9C75C583A6384124CEE74E0A74C19096D97546FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:3b:af:6a:5b:35:cb:c9:ba:13:62:3e:62:
72:5a:01:7c:f3:fa:72:6e:6c:ce:12:c2:37:01:16:
77:fa:9e:0a:72:92:a7:7e:08:fd:ed:29:54:2f:80:
92:b1:eb:f1:9e:35:86:77:c7:e6:8e:58:6a:bd:3d:
71:eb:d7:f1:ff:ef:32:49:90:69:7b:e1:89:b8:78:
ba:ee:3a:2a:d2:97:03:bd:ad:d3:16:30:2a:94:eb:
98:b1:0d:e6:8f:20:ff:0d:7a:fa:2e:ba:9d:83:de:
8a:be:08:ac:12:f6:df:28:97:2a:62:f1:52:02:3c:
5f:ba:0b:3a:0d:16:f9:82:40:8f:17:1d:15:4b:f6:
b9:03:4b:ab:fe:7a:0b:cd:05:6c:db:76:bc:be:13:
a3:13:f1:d2:d3:50:ee:28:d0:d9:fa:f7:dd:31:e1:
a0:5d:1a:05:82:a4:bc:bd:cd:d9:49:a9:56:20:6d:
85:45:61:e7:2f:f4:b7:dd:51:80:ce:74:e1:ac:ca:
d2:9c:3d:f3:b8:28:98:a5:f7:59:e7:0b:5d:96:93:
74:1b:5e:71:bf:ca:84:57:06:ab:66:14:92:c7:8a:
ec:5f:4b:92:10:6f:d2:28:30:3a:1a:12:69:c8:f1:
b1:77:29:dd:1d:3e:38:11:e4:8e:37:66:58:f2:4c:
1c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:75:C5:83:A6:38:41:24:CE:E7:4E:0A:74:C1:90:96:D9:75:46:FC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231352e3138332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.183.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:1d:78:e9:df:57:b4:4b:84:e1:f9:a3:2a:bd:ae:15:04:bb:
b5:86:46:64:5d:ad:a2:f2:07:2f:6f:f7:13:c1:66:b0:43:57:
72:f8:ab:22:01:e7:ff:2e:f3:25:00:73:ed:a8:d3:72:51:69:
1d:41:f3:94:4b:3f:6e:7b:71:c9:60:91:2d:2b:02:df:b6:41:
c3:88:fc:f1:75:5d:d9:e7:a5:f0:11:e5:c2:ef:5a:bd:91:0e:
6b:24:7a:c2:eb:09:82:e8:e5:b6:5c:88:c8:62:08:37:38:be:
d4:a1:f2:14:78:57:af:70:ef:ba:ec:d5:84:55:8a:15:98:8b:
51:6e:b6:69:48:96:87:ae:42:4f:37:4c:78:17:0d:04:9f:03:
8e:cd:ec:82:55:8a:d6:3d:ba:43:ed:7f:db:23:26:3e:b3:d4:
74:ca:ac:47:10:c7:88:60:f7:4a:39:38:7d:ab:fa:0f:10:f7:
26:3e:29:21:a8:b2:2c:b0:60:fd:de:d2:0a:0c:96:57:70:01:
0c:70:0e:99:cc:91:27:7c:e1:e1:85:5d:f3:ff:9b:ad:60:cf:
f0:0c:a1:ca:7a:80:1b:b8:10:b7:05:23:7b:28:f2:ed:11:6b:
2b:02:88:e5:07:f8:93:8c:22:b4:29:76:c8:27:16:c4:63:54:
0b:c4:9e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 14:46:47 2024 by rpki-client on console-ams.rpki-client.org