Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231382e3132372e302f32342d3332203d3e20313336373837.roa
File: 3138352e3231382e3132372e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: E06NcEsN4CKSvhB/9S6n2TZCxBN3MvtO845psaFQfNg=
Subject key identifier: 75:3C:76:9B:78:DA:E8:45:46:1F:1D:53:76:78:55:D3:F7:41:F4:FD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4E59CEC6AB88A138CDF528A56BCB99C997D2DE0D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231382e3132372e302f32342d3332203d3e20313336373837.roa
Signing time: Fri 20 Sep 2024 14:04:52 +0000
ROA not before: Fri 20 Sep 2024 13:59:52 +0000
ROA not after: Fri 19 Sep 2025 14:04:52 +0000
asID: 136787
IP address blocks: 185.218.127.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:59:ce:c6:ab:88:a1:38:cd:f5:28:a5:6b:cb:99:c9:97:d2:de:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:52 2024 GMT
Not After : Sep 19 14:04:52 2025 GMT
Subject: CN=753C769B78DAE845461F1D53767855D3F741F4FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:4c:11:41:05:ff:ff:26:5f:02:ef:49:2a:
d9:61:f2:b4:ac:86:40:d7:0a:11:e2:08:5a:60:62:
c8:8e:84:a1:36:0f:c3:ca:b0:1c:c3:05:c3:d4:4a:
cd:b7:45:28:7e:e5:e8:5c:e9:a6:7c:2c:96:2a:26:
83:16:95:7a:6e:b0:9a:10:99:4c:dd:98:b4:26:fa:
fa:7b:7d:28:a6:c2:7c:cb:de:d3:d9:7f:bb:83:c6:
2d:1e:f2:2a:3d:5f:9c:26:04:1a:52:7a:37:e4:c4:
58:9a:71:81:ac:d4:9e:63:82:92:5e:76:d1:f6:5e:
2b:48:69:8c:c7:22:60:e5:f3:af:62:eb:ee:09:2f:
da:4d:31:b4:80:0e:52:20:a7:3e:49:f6:9a:a0:7e:
64:32:c2:e3:3d:60:14:0e:7a:11:59:43:9b:85:ce:
e1:94:80:ea:45:39:fa:61:bc:98:9e:cc:0a:a7:fb:
3d:04:88:6f:69:d4:91:c3:50:0e:fc:67:ee:d9:f9:
70:3c:05:f8:51:42:06:6a:87:a1:47:37:0b:2c:e7:
b8:47:1d:5d:0f:ed:19:4e:88:74:17:71:d3:55:94:
32:ef:fc:c2:ef:ae:b4:7f:65:56:7a:62:32:b3:56:
b7:99:06:50:f8:64:9b:20:41:76:16:da:a4:a4:62:
ae:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3C:76:9B:78:DA:E8:45:46:1F:1D:53:76:78:55:D3:F7:41:F4:FD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231382e3132372e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.127.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:89:49:1f:c6:b4:7f:cd:05:83:52:f0:c4:70:67:db:5f:d5:
90:bd:89:29:7d:be:17:08:be:d8:65:b9:ab:7e:c7:1a:de:50:
1d:c6:5b:c6:72:78:fa:02:b0:3c:81:79:be:2c:0a:46:61:3c:
b6:8c:00:72:61:c4:08:23:3a:c6:ce:24:41:db:c8:8c:4b:c0:
98:ac:52:df:38:9b:ee:c2:e1:95:27:ff:3a:5a:6a:0d:07:10:
4d:bb:d5:33:27:db:9b:fa:63:7a:4a:a6:7c:a8:3f:2d:68:42:
ce:41:d0:d7:90:b8:3e:52:91:54:58:39:f6:5e:94:9d:d4:90:
d8:d9:ee:c9:6b:e9:e6:b4:2c:a5:57:70:0d:78:83:6f:6b:78:
0e:71:e1:9c:00:a6:88:e6:e7:80:10:f9:aa:bd:f8:58:45:7b:
f7:82:6c:1d:c7:3d:73:61:73:3a:50:aa:a8:b0:f5:73:0a:95:
08:93:57:f3:01:fc:84:c1:0d:0c:a7:a3:93:0d:6c:11:4c:3e:
20:b8:fb:ff:f1:b2:a8:e2:24:f5:aa:68:15:a4:1f:51:7a:02:
50:7a:5c:8d:50:bd:f1:df:14:4a:50:05:bc:de:a5:44:f4:ab:
f6:79:61:38:c2:8c:32:9c:af:3b:44:43:8c:66:ef:fd:2b:52:
24:dd:49:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:03 2024 by rpki-client on console-fra.rpki-client.org