Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232372e3133342e302f32332d3332203d3e20313431393935.roa
File: 3138352e3232372e3133342e302f32332d3332203d3e20313431393935.roa (raw, json)
Hash identifier: GZqGj4IozWj6+PIiqeR159W+4rab+4T5PRGvf9aCBww=
Subject key identifier: 54:B3:E7:D4:13:E6:EF:6D:B6:5C:7D:A7:2C:C5:D9:86:C6:E1:6A:A1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2C96C81CD2576A395204EE226ECD70C2C54E40AC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232372e3133342e302f32332d3332203d3e20313431393935.roa
Signing time: Fri 20 Oct 2023 13:41:50 +0000
ROA not before: Fri 20 Oct 2023 13:36:50 +0000
ROA not after: Fri 18 Oct 2024 13:41:50 +0000
asID: 141995
IP address blocks: 185.227.134.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:96:c8:1c:d2:57:6a:39:52:04:ee:22:6e:cd:70:c2:c5:4e:40:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:50 2023 GMT
Not After : Oct 18 13:41:50 2024 GMT
Subject: CN=54B3E7D413E6EF6DB65C7DA72CC5D986C6E16AA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8b:2c:0f:12:71:0f:ca:b5:fd:24:de:9e:3e:
5a:f7:79:2c:7c:1f:60:1a:7c:f7:b3:d7:4e:65:9b:
f2:d4:e7:24:44:76:1d:97:7e:c9:d8:4a:e3:8d:a7:
dc:8f:bb:be:2d:35:88:aa:3d:ee:11:9b:44:53:e7:
67:66:ea:ae:49:a4:ff:1a:5a:90:e2:2b:c2:85:8f:
5c:36:4b:3f:2e:9f:cf:f4:0f:32:7e:45:9a:07:5a:
3d:27:9a:75:2c:ee:a1:ad:ef:5d:29:5b:ac:76:30:
86:93:ce:1c:33:32:52:9c:16:d3:01:cd:24:03:40:
57:5b:b9:36:39:c6:49:63:1f:d0:4c:b0:2e:a1:2f:
9d:28:1a:a3:01:83:aa:db:84:07:34:a7:19:7d:40:
8a:78:9d:ba:bf:79:65:d9:75:4f:0b:36:b4:74:1d:
09:c8:36:91:a5:db:37:04:d2:66:07:6a:16:37:fd:
fb:c7:14:82:b0:46:cd:39:3f:8f:84:82:bb:50:b8:
49:13:56:de:52:52:fe:b3:f4:cd:0b:f4:30:26:cd:
5f:c2:7e:e0:ee:3f:8d:3d:51:cb:92:1f:55:cc:37:
89:c2:81:26:31:ae:de:62:91:44:ef:39:bc:1b:82:
d3:19:73:c1:44:2c:4f:7a:49:40:93:6b:99:43:cd:
e2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B3:E7:D4:13:E6:EF:6D:B6:5C:7D:A7:2C:C5:D9:86:C6:E1:6A:A1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232372e3133342e302f32332d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.134.0/23
Signature Algorithm: sha256WithRSAEncryption
03:b2:f9:76:3b:11:7f:6c:14:89:b5:c9:99:64:51:be:b5:ef:
ef:e1:8b:13:5d:21:e5:57:56:08:27:83:2a:3e:01:90:5c:4d:
9c:a0:c5:ef:09:1d:9c:65:a5:27:b9:0a:7d:0f:a9:fa:5b:ec:
a3:3f:a5:57:6c:08:6b:d2:01:5b:71:8c:60:6b:0c:b1:6a:7d:
7e:39:44:d5:6d:48:49:a3:b0:62:7b:ff:f8:27:6a:09:e2:6c:
44:c5:cb:b8:97:5d:da:c4:42:2f:48:58:48:8f:ae:61:ef:99:
55:60:7d:d4:53:1a:20:9e:f6:10:6e:2e:4e:03:6e:6f:4b:bb:
6f:9a:3a:23:72:bd:b9:5b:cf:a6:d3:d1:7f:15:98:b6:a0:83:
aa:ee:97:cb:4a:84:a1:f1:78:d8:8a:52:60:99:6a:5f:b4:1a:
f6:94:d9:c1:66:fb:7f:c0:c0:e4:15:ac:6f:81:44:ce:90:3c:
dc:65:2d:57:9b:89:8b:22:4c:68:97:c8:55:58:f5:0a:24:73:
24:9e:61:35:4f:cb:a2:ee:22:db:34:ab:08:59:5c:cf:fc:7b:
11:34:d0:d4:ea:16:31:04:77:1e:67:10:0d:b6:d6:5d:db:56:
b3:b1:88:5a:25:c0:ef:ea:51:16:ba:5e:5b:8e:5a:12:86:da:
53:04:53:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:12:36 2024 by rpki-client on console-fra.rpki-client.org