Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231392e3134332e302f32342d3234203d3e20313336373837.roa
File: 3138352e3231392e3134332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 3x5DhwRDRInf/pgfmq+Z9Hg4vIswjkBvzJ8GOhy1PJk=
Subject key identifier: 2A:7E:6B:0E:5F:2C:BD:E9:D8:2D:8A:7A:31:8B:19:95:D1:71:5F:2D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5A689DB85223BAECE72847B85AEB7F8BC4DE7865
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231392e3134332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 26 Jan 2024 19:02:59 +0000
ROA not before: Fri 26 Jan 2024 18:57:59 +0000
ROA not after: Fri 24 Jan 2025 19:02:59 +0000
asID: 136787
IP address blocks: 185.219.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:68:9d:b8:52:23:ba:ec:e7:28:47:b8:5a:eb:7f:8b:c4:de:78:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 26 18:57:59 2024 GMT
Not After : Jan 24 19:02:59 2025 GMT
Subject: CN=2A7E6B0E5F2CBDE9D82D8A7A318B1995D1715F2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1a:92:cc:07:da:c6:4a:af:23:bc:7e:fc:5e:
6b:71:fb:f1:b6:31:e6:c2:9e:10:f1:29:39:a0:87:
f8:52:6a:4a:38:90:22:86:d1:02:44:6e:a1:ed:33:
6f:1d:f4:a2:6f:f5:e6:c7:fb:ad:b0:45:07:21:8b:
5d:26:21:0a:c8:a4:b4:e7:c5:45:79:e3:d5:90:d1:
b9:df:97:0b:3f:49:95:f1:ce:c0:b2:aa:05:7e:05:
0f:99:8c:e5:96:58:d6:02:9a:d3:ca:4f:e3:fb:4b:
47:56:0e:0c:65:50:e2:6a:f1:62:2c:07:f6:fe:86:
30:f1:bd:59:c8:7d:8e:f8:d2:cd:42:6a:80:87:e9:
2e:a3:30:78:80:48:ee:d2:16:60:7d:00:f0:5f:4d:
f6:9a:9d:f4:45:e1:bf:78:9d:ec:34:56:6d:1f:2b:
4b:53:a8:60:3e:1d:27:04:a4:d3:b4:c4:ff:8d:70:
99:8e:bc:ac:85:70:2a:a2:ee:3a:42:cd:d0:f1:9f:
3e:b9:c8:de:a5:b6:1b:74:a0:38:8d:ca:24:4f:b6:
b2:6f:e4:82:7c:8b:ca:09:77:65:96:4b:fa:85:b8:
7a:6c:65:ae:d6:7c:30:ac:e7:0d:ad:05:dd:40:bc:
1e:8a:e8:a6:e9:92:ca:21:67:20:09:f6:83:1d:24:
54:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7E:6B:0E:5F:2C:BD:E9:D8:2D:8A:7A:31:8B:19:95:D1:71:5F:2D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231392e3134332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.143.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:b3:dc:80:dc:8f:50:4a:7c:85:25:96:2d:77:bf:ad:33:44:
f4:be:b6:d2:cf:9d:65:71:1c:e0:df:64:45:01:6d:2f:12:ca:
39:aa:dc:a4:4f:a5:75:07:d3:ab:a0:e5:35:92:86:b6:57:e2:
27:3d:20:6f:19:bb:a8:6f:4c:91:4a:e4:f6:5e:f8:9c:4c:ef:
33:cb:1a:53:7e:2d:c2:8a:9f:7d:f8:5b:0e:5d:3c:2d:f7:51:
17:fb:75:b5:09:d6:00:b2:66:e1:0c:53:5f:65:ad:9a:43:cd:
fb:f9:f0:3b:05:d7:0a:d8:ea:c8:b5:4a:1e:c2:13:be:a7:a6:
da:62:03:f9:82:01:cf:66:4e:c5:a7:3c:8c:de:77:d1:02:28:
c8:35:33:a5:23:aa:37:3c:a3:da:f9:db:cd:88:19:3c:70:8f:
be:16:33:f4:4f:21:fa:5a:35:e6:7a:6d:d1:e0:3a:f0:39:e3:
7c:78:c0:70:c0:0b:9f:78:ee:ce:22:96:18:e1:68:92:bc:a2:
d6:94:f9:09:f7:7e:03:c1:ad:b2:2d:84:47:c5:27:56:d1:3a:
9b:4e:7c:f9:2d:ac:48:ea:16:82:d9:ac:77:03:c3:dd:04:77:
76:74:47:14:1d:62:b6:73:7c:64:6d:ec:f5:e0:40:fa:57:27:
3c:17:91:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:21:53 2024 by rpki-client on console-ams.rpki-client.org