Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232312e3133332e302f32342d3234203d3e2036353937.roa
File: 3138352e3232312e3133332e302f32342d3234203d3e2036353937.roa (raw, json)
Hash identifier: lzQ+vFsapJU4WUOABmutUhwqTXQ6ABwjvB4idWDQOtA=
Subject key identifier: A6:20:F5:35:CF:79:11:E2:93:57:81:5C:11:BF:87:ED:8E:07:90:84
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 32D374C0DA6CDC98D5EED6D7CB3D6D55DA11E4AF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232312e3133332e302f32342d3234203d3e2036353937.roa
Signing time: Fri 20 Sep 2024 14:05:00 +0000
ROA not before: Fri 20 Sep 2024 14:00:00 +0000
ROA not after: Fri 19 Sep 2025 14:05:00 +0000
asID: 6597
IP address blocks: 185.221.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:d3:74:c0:da:6c:dc:98:d5:ee:d6:d7:cb:3d:6d:55:da:11:e4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 14:00:00 2024 GMT
Not After : Sep 19 14:05:00 2025 GMT
Subject: CN=A620F535CF7911E29357815C11BF87ED8E079084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:e1:e4:a6:34:81:9c:0a:1d:90:62:22:1e:
38:d8:fa:8e:c9:38:6d:b0:ce:74:6a:2a:68:3a:27:
31:ce:b4:1f:90:84:40:51:e3:77:fa:c2:98:05:fa:
22:b1:72:8c:9a:95:3d:6f:16:98:64:c7:f0:6d:5a:
b3:c9:02:33:20:06:5f:a1:2a:2e:64:dd:e1:71:88:
d2:19:38:89:0e:2b:4a:3c:db:14:ba:66:a0:f3:dc:
04:f1:e1:74:bf:f0:54:5c:62:8f:c2:26:31:16:03:
69:ed:78:15:44:1e:52:f3:01:ef:d6:d9:b8:81:a4:
b9:00:2b:5e:e6:4e:95:79:5e:61:f2:26:c2:71:aa:
a6:7b:c9:41:36:bf:76:34:09:55:5b:b7:69:65:ac:
f2:41:87:a2:7b:1f:fb:a7:82:72:7a:ec:a7:35:2e:
37:03:57:09:9b:ed:f7:c5:32:53:e4:18:55:72:e9:
a6:e7:70:ca:03:b1:9f:45:44:ce:df:f0:d8:e4:f4:
d8:d0:07:c6:d7:72:54:20:23:0f:32:16:4d:62:a5:
75:5d:46:51:4c:c5:03:36:5f:b2:b8:c2:73:75:7b:
36:c3:f8:35:5e:6e:72:f5:4d:16:c4:d0:62:ff:57:
e1:51:00:fd:cb:04:28:2d:d9:88:63:af:cd:ea:3f:
0f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:20:F5:35:CF:79:11:E2:93:57:81:5C:11:BF:87:ED:8E:07:90:84
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232312e3133332e302f32342d3234203d3e2036353937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.133.0/24
Signature Algorithm: sha256WithRSAEncryption
33:b5:1b:a5:cb:20:8f:87:a7:50:06:26:72:0b:e0:04:de:49:
b5:bd:58:bb:65:47:2d:ca:d5:53:4d:d6:c0:86:43:2c:b2:84:
a8:28:84:42:2b:f2:79:1b:6c:4b:b4:8a:1f:e1:a3:ba:59:ad:
6c:07:29:89:55:c3:de:2c:61:ca:58:ae:ca:3f:27:60:26:1d:
59:9a:49:fc:38:c7:9d:bf:8c:68:15:b3:b4:0c:f4:e9:36:41:
02:d3:09:cd:84:e9:a1:bf:8b:75:44:ea:0a:90:5f:02:14:9d:
a0:27:aa:9d:e0:90:75:38:66:ce:c7:f5:fc:5e:8b:c7:e1:5f:
9b:f5:8a:63:4a:e3:c6:81:e9:e1:9d:0e:f9:76:51:f3:19:2a:
ee:e3:19:04:30:72:f5:7e:46:3e:c3:81:8b:e7:59:c4:00:e2:
fe:b6:ef:28:fe:49:6d:ed:58:1f:99:11:ab:68:70:49:73:6a:
a1:1f:29:de:cf:c6:81:c5:90:5b:ec:33:cd:6b:78:24:24:8b:
71:81:58:10:3e:e3:4c:83:90:0c:99:f9:08:07:57:8f:ba:15:
fc:9a:3a:e5:3d:20:c7:79:3d:24:b0:a6:15:ee:d5:43:b0:aa:
24:ab:7d:e5:b6:fc:b0:5d:e0:21:4d:a3:2f:c1:5e:55:2a:d5:
71:7d:cf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:42:56 2024 by rpki-client on console-fra.rpki-client.org