Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232322e3234302e302f32342d3234203d3e20313336373837.roa
File: 3138352e3232322e3234302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: VcyiBeKPQr0SFO6ymBJuPcyX3Ger1MxWjdz917gXU9o=
Subject key identifier: 30:97:8D:C9:B5:16:9C:1E:3B:27:2E:A6:39:8F:DF:E0:62:A9:FB:6A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 78A79A5B310EAE75405D7B0E5ED951947270FFF9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232322e3234302e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 26 Jan 2024 19:02:56 +0000
ROA not before: Fri 26 Jan 2024 18:57:56 +0000
ROA not after: Fri 24 Jan 2025 19:02:56 +0000
asID: 136787
IP address blocks: 185.222.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:a7:9a:5b:31:0e:ae:75:40:5d:7b:0e:5e:d9:51:94:72:70:ff:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 26 18:57:56 2024 GMT
Not After : Jan 24 19:02:56 2025 GMT
Subject: CN=30978DC9B5169C1E3B272EA6398FDFE062A9FB6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7c:97:18:6b:e2:54:d7:03:be:db:f9:0e:ca:
83:a6:ec:7e:42:ee:80:a6:f4:17:89:49:f4:cd:a1:
3b:be:d0:9e:f5:16:bf:07:19:d9:db:d4:1c:4c:28:
32:d4:56:ac:f6:da:35:8d:52:c7:5d:d0:d9:d1:8b:
18:13:a9:00:b7:23:b3:60:e3:70:13:fd:66:de:8a:
77:3d:73:7f:dc:22:34:1e:43:44:cd:36:a8:3c:95:
d8:4c:97:19:c1:d6:32:36:a1:53:83:2c:b8:4d:5c:
0f:c8:46:f6:7f:fb:3c:3e:cb:12:a9:92:51:85:52:
90:31:b0:29:cc:07:4a:89:d2:c2:7b:ee:ab:75:b1:
78:2f:93:93:3e:f9:a8:b2:da:71:a7:e3:c1:28:a1:
47:f1:d6:be:c3:fb:1e:c3:f3:da:89:25:29:9f:7b:
64:dd:9b:d7:cc:5b:c3:a0:3b:66:a0:55:cc:85:c7:
7f:89:9c:39:df:56:94:a8:b3:97:4b:fa:aa:ed:fe:
db:64:2e:d3:4f:63:73:ca:7e:86:5b:b9:5b:ef:f0:
66:e8:bb:1b:9f:1e:87:c6:93:a9:e9:fe:c5:d2:e5:
d3:24:1b:db:5f:52:05:28:14:3a:15:00:f4:b2:9e:
c9:8f:c0:4b:09:41:8d:b8:aa:50:bc:59:84:ac:a6:
dc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:97:8D:C9:B5:16:9C:1E:3B:27:2E:A6:39:8F:DF:E0:62:A9:FB:6A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232322e3234302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.240.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:b9:9e:9a:0f:80:d6:cb:a0:5b:36:a1:4e:1c:1d:ea:9a:ae:
6f:53:9a:d5:0d:7e:39:0f:fc:c9:f4:e3:c7:43:c2:19:a3:30:
7a:dc:bd:4a:29:dd:73:65:c5:6d:c0:1c:22:ea:1d:ba:f1:f4:
7b:41:58:6f:4c:c0:74:cc:6e:b4:8e:0f:f6:cc:74:fe:75:ff:
e2:f0:00:b6:89:a4:05:e4:42:53:2b:05:87:7d:f2:8b:87:c8:
b8:46:3d:ff:49:3c:25:1f:b0:2a:79:42:1a:f8:93:4b:75:d7:
cb:97:b2:9c:67:5d:68:3b:00:30:c7:78:4f:92:88:13:e1:fd:
fd:3d:3e:f2:56:4c:be:b1:00:84:53:83:c0:e5:ad:2a:6b:24:
37:17:9a:a5:8c:4c:03:8c:91:9d:73:c5:ae:0e:06:96:f9:01:
60:94:90:83:88:89:5b:65:86:ab:fe:69:6f:9f:86:8b:7c:49:
bd:e0:e4:a9:ea:f3:25:0c:b7:17:0f:08:16:df:a8:59:bf:d2:
5f:67:24:f8:5e:17:c1:32:17:67:28:5a:04:3b:96:4c:ad:c2:
60:24:87:15:fd:df:3d:80:6f:88:fa:af:4a:94:0e:04:9f:35:
ce:d5:0a:ca:91:40:d7:f1:b8:8e:b5:11:a3:ad:fe:8d:ce:4c:
bd:a2:3e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:21:53 2024 by rpki-client on console-ams.rpki-client.org