Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231362e37342e302f32342d3332203d3e20313336373837.roa
File: 3138352e3231362e37342e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: 6ttQbU1uUr7t7NoYTVYbENI7+NnD8/77ysjvpNe/8zI=
Subject key identifier: 3E:2F:D7:CF:7D:40:46:2F:60:8E:EC:E3:E2:AE:F1:67:D9:0A:8D:4E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 310A7197ADBDFBC46C3D989813A058D5D33AA3F9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231362e37342e302f32342d3332203d3e20313336373837.roa
Signing time: Fri 20 Oct 2023 13:41:47 +0000
ROA not before: Fri 20 Oct 2023 13:36:47 +0000
ROA not after: Fri 18 Oct 2024 13:41:47 +0000
asID: 136787
IP address blocks: 185.216.74.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:0a:71:97:ad:bd:fb:c4:6c:3d:98:98:13:a0:58:d5:d3:3a:a3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:47 2023 GMT
Not After : Oct 18 13:41:47 2024 GMT
Subject: CN=3E2FD7CF7D40462F608EECE3E2AEF167D90A8D4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:f7:15:4e:ff:81:38:b5:6a:8d:e7:8b:1a:
73:cd:b8:19:a4:0c:64:55:52:c1:ed:7d:2c:d5:b2:
0e:41:c8:08:cf:a3:ba:60:0a:95:09:5f:3d:0f:05:
cd:c9:b1:0c:ea:fa:a3:15:80:ea:03:c9:cd:22:a7:
f6:57:53:6e:59:84:a3:01:64:19:e4:5e:96:54:53:
ed:9f:20:4d:1e:34:fb:6d:9e:14:fa:7a:9f:20:f4:
09:0b:28:ea:e9:0e:33:a1:2f:ed:02:48:86:15:d0:
b9:a9:7e:c5:ee:b1:2f:a8:cd:cd:58:82:fd:50:ce:
45:09:ea:e7:1d:6c:4f:6c:4f:fe:f0:e1:10:f9:db:
62:81:94:6a:0b:6b:28:39:a8:f3:38:18:fc:97:45:
16:d9:c3:bc:09:ae:ef:f9:20:3a:46:bf:c8:74:8f:
85:bf:ce:e1:93:b2:b3:5a:4f:19:e2:da:85:f2:b6:
b5:1b:4c:9b:29:3a:e9:6f:c1:59:6b:0c:3c:1a:94:
f2:5b:f6:70:66:43:54:e3:80:95:b4:c3:27:aa:e8:
7f:21:30:01:f7:a7:f7:71:29:92:4e:29:82:13:c7:
df:53:90:6a:e9:15:f7:e7:67:41:54:9e:93:a2:23:
54:cb:f1:08:a7:9a:7c:0a:aa:b2:01:45:ee:29:d8:
b5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2F:D7:CF:7D:40:46:2F:60:8E:EC:E3:E2:AE:F1:67:D9:0A:8D:4E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231362e37342e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.74.0/24
Signature Algorithm: sha256WithRSAEncryption
09:9d:fd:26:df:ea:ff:12:46:7e:84:80:86:2d:3b:68:0a:2e:
03:16:1c:98:d8:e6:f1:58:32:20:5c:90:5e:7c:73:b8:c4:61:
e2:2d:f4:9d:a6:0a:6c:c8:d2:17:da:0b:5b:dc:b2:49:d7:96:
a7:62:72:93:f6:16:fb:c2:1d:56:43:94:75:43:85:40:36:b7:
46:7e:38:29:94:05:40:15:c2:da:f8:7f:e5:c2:95:30:ec:a5:
02:1e:02:51:b0:d4:85:8e:04:8a:f1:c0:0d:52:94:97:b4:2f:
06:fe:4e:7c:1d:10:fd:cb:c7:7e:80:65:83:ce:30:c7:29:3b:
30:7b:28:73:99:a5:d6:d6:aa:03:d6:f1:ea:e7:b7:02:e6:9a:
c7:24:39:a8:3c:7a:14:41:80:ad:2b:6f:3e:ed:05:31:7b:28:
b1:a9:96:15:c3:bb:68:54:f5:cc:f8:6e:6d:3f:b7:38:59:12:
58:73:06:6a:de:2c:13:b9:d2:64:cb:b9:aa:7b:b7:a3:91:ff:
cf:50:f8:ec:6e:f7:17:73:9a:7c:5f:c0:dc:26:14:72:db:5e:
b2:1e:53:a1:51:4b:fe:67:31:cb:6b:38:13:38:91:da:27:06:
77:d2:21:b9:db:39:4a:02:50:9d:98:bd:cd:df:dd:fb:fb:f5:
87:e9:fd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:21:25 2024 by rpki-client on console-fra.rpki-client.org