Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231362e37322e302f32342d3234203d3e20323033333633.roa
File: 3138352e3231362e37322e302f32342d3234203d3e20323033333633.roa (raw, json)
Hash identifier: c8v5EFa/pTvkqKv23KM4vCNFqtlU/tRRfodTFpirwT0=
Subject key identifier: F7:17:9D:91:84:F5:BB:07:DB:DA:76:97:8E:E4:9D:DF:DA:BF:1B:FB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5D4F8AF5FD64CB354C9618B123ABB8C5E28AEE62
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231362e37322e302f32342d3234203d3e20323033333633.roa
Signing time: Fri 20 Oct 2023 13:41:55 +0000
ROA not before: Fri 20 Oct 2023 13:36:55 +0000
ROA not after: Fri 18 Oct 2024 13:41:55 +0000
asID: 203363
IP address blocks: 185.216.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:4f:8a:f5:fd:64:cb:35:4c:96:18:b1:23:ab:b8:c5:e2:8a:ee:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:55 2023 GMT
Not After : Oct 18 13:41:55 2024 GMT
Subject: CN=F7179D9184F5BB07DBDA76978EE49DDFDABF1BFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8d:dd:3b:5e:4c:e5:3c:f0:e0:51:01:0b:b9:
bb:81:2e:ff:7d:fa:e2:5c:41:5c:37:96:7f:5e:e2:
50:5f:02:99:41:35:99:3e:ac:2a:f1:ee:61:3d:14:
bd:d0:02:a5:f9:34:83:28:c3:dd:53:e7:79:3c:66:
75:ca:9d:8e:76:cc:4c:73:50:bb:89:86:2f:78:68:
06:cc:46:e7:29:6c:8b:64:5c:ee:55:4f:b9:ee:9f:
c5:f4:64:8b:c4:d4:45:7d:5b:f5:9b:d4:10:45:75:
ee:be:4d:38:63:77:62:ce:e2:fe:b2:a3:63:e5:cc:
88:81:2b:20:33:64:db:bb:94:e3:97:f1:85:66:c4:
a1:14:2d:31:8d:7c:30:32:32:cb:68:57:ca:23:63:
d9:f7:8a:ff:bb:d0:5e:3b:84:0c:2f:e6:10:76:a3:
e1:56:96:c0:ad:c0:26:eb:e7:4a:e1:79:b9:be:6a:
bf:22:1b:3c:d6:8f:28:77:f6:5b:28:c8:9f:72:a9:
b9:3d:11:5a:11:9e:70:0b:b9:b4:42:af:82:96:85:
a2:98:2e:c2:d8:7d:51:c3:34:52:aa:de:46:87:f7:
ce:21:3f:a7:8d:48:40:eb:b0:9e:e6:30:24:83:45:
4c:20:94:78:e0:5e:dc:c3:18:a9:f9:db:5f:63:96:
1d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:17:9D:91:84:F5:BB:07:DB:DA:76:97:8E:E4:9D:DF:DA:BF:1B:FB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231362e37322e302f32342d3234203d3e20323033333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.72.0/24
Signature Algorithm: sha256WithRSAEncryption
85:d1:c3:10:08:d1:d0:fe:db:ca:20:d8:ec:6d:1d:7e:18:ee:
5d:cc:bf:7d:10:ad:7f:8c:7e:e3:2a:5e:05:40:fc:b9:c8:11:
7f:de:1c:8b:07:e6:7c:4c:d0:a6:67:40:bb:2f:13:f0:e8:29:
f5:d1:e4:da:b6:f1:5f:18:07:d7:a3:bc:60:ce:f5:51:19:f6:
f3:23:6f:59:9e:bb:3b:15:1e:24:89:d8:23:f7:ed:1d:93:33:
fb:8c:ac:c1:78:d9:43:79:5e:12:1d:bd:ac:82:b7:74:ff:3c:
5c:b7:ba:b0:44:12:10:6a:40:8d:cd:cc:32:5a:17:52:fd:40:
dd:08:72:20:d4:af:73:fe:9b:0a:24:be:38:c4:9b:d0:05:4f:
e3:11:e8:a3:7c:3f:9b:51:d1:07:84:0c:54:22:7c:c1:10:a5:
c2:77:ce:b3:1f:8c:0e:4b:9a:67:cb:a4:38:0d:b8:f9:92:90:
ec:e9:31:02:18:7a:22:b4:83:b2:7a:49:70:73:3b:cf:49:4d:
a8:df:b9:75:0c:e0:d9:df:ea:b0:5a:94:7b:5e:b8:fa:76:ce:
cb:88:1f:e8:64:65:a8:73:b5:5d:bd:b9:88:8a:2a:1c:8d:f9:
69:73:46:7e:0f:53:37:ed:11:8d:08:02:08:20:ed:48:17:6d:
93:8e:bc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 08:01:44 2024 by rpki-client on console-fra.rpki-client.org