Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e3131382e302f32342d3234203d3e203437353833.roa
File: 3138352e3232392e3131382e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: dnol3wjrqi+zYgHJSJJv2n8+jNSCTU87YpSFoNBeCQI=
Subject key identifier: E4:82:E6:77:00:08:6A:C3:14:F6:5F:66:99:BC:19:7B:AE:D6:8F:EB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 46F55B49E6982C416826FFADC64B3A4ED1E1B9BA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e3131382e302f32342d3234203d3e203437353833.roa
Signing time: Fri 20 Sep 2024 14:04:58 +0000
ROA not before: Fri 20 Sep 2024 13:59:58 +0000
ROA not after: Fri 19 Sep 2025 14:04:58 +0000
asID: 47583
IP address blocks: 185.229.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:f5:5b:49:e6:98:2c:41:68:26:ff:ad:c6:4b:3a:4e:d1:e1:b9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:58 2024 GMT
Not After : Sep 19 14:04:58 2025 GMT
Subject: CN=E482E67700086AC314F65F6699BC197BAED68FEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:3c:d8:c9:6d:a0:27:f6:0e:c7:62:6b:e4:
34:49:c8:76:b1:08:f8:0f:cf:c3:19:39:eb:54:49:
5a:77:94:fc:c4:ee:12:1e:a7:d9:96:68:ec:48:41:
b9:35:0d:e8:6a:ff:d8:c4:8f:01:4c:2b:c1:27:eb:
e9:11:30:cb:09:e3:36:45:53:06:0c:4c:c3:62:bf:
8a:9d:a6:b3:3c:61:f9:45:5d:c0:46:5a:a0:ef:1c:
34:94:04:fa:1b:cc:fb:c0:7e:7a:df:c6:71:97:50:
d5:a8:78:ee:96:8b:36:50:02:d1:67:59:5d:b8:da:
ff:d7:e2:54:5a:75:5f:c2:df:fa:8f:99:fa:9a:24:
ac:fd:4e:61:f3:80:b6:03:2e:a0:cf:45:7c:43:fe:
7c:d1:87:83:7a:21:20:86:1a:84:16:f7:53:36:46:
20:4c:5f:7f:8a:ac:e6:76:28:a8:90:b3:bd:0e:32:
1d:8e:0e:96:51:5b:1a:7d:c5:8c:05:37:c3:5b:41:
15:74:9a:60:42:2a:b5:3e:bb:cc:e6:b1:40:3f:6c:
43:e0:6a:c4:b6:62:ff:e1:17:08:64:63:a4:53:e1:
7b:f6:90:97:44:0a:28:33:a2:b7:d6:be:7e:ff:4a:
89:49:b2:a4:24:c1:c9:27:ff:c1:da:f3:16:4c:ec:
79:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:82:E6:77:00:08:6A:C3:14:F6:5F:66:99:BC:19:7B:AE:D6:8F:EB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e3131382e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.118.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:0e:ca:aa:2a:ff:dd:1d:c7:e6:b1:20:4d:67:36:93:24:18:
c2:09:b5:8e:a8:fa:82:e4:8a:d1:52:3b:26:6b:e8:6f:cf:dc:
29:5f:d3:2c:fe:06:12:5d:26:01:b4:7a:ca:18:a1:d4:1a:3a:
6b:2d:f2:11:8a:68:b3:25:c1:d8:68:34:7a:80:b0:18:6f:f2:
f4:78:c4:e8:d8:6d:7e:39:55:a9:ec:6f:89:6e:5b:39:d4:95:
2c:92:fe:29:75:c4:4d:65:44:0e:a3:76:69:11:18:2e:54:b1:
39:80:a9:14:2d:b8:b5:d5:eb:ac:c7:64:49:b4:5a:13:1d:c5:
01:95:de:19:93:26:67:fd:8f:16:f2:43:d9:32:13:39:51:51:
f7:0e:fa:12:b1:2e:e8:0a:25:47:36:b3:f7:7f:43:5d:e9:1c:
e9:46:3e:8c:6e:77:78:25:b6:87:3c:cc:07:3a:96:d9:dc:8e:
1e:4b:eb:22:1c:3e:91:8b:01:61:30:2e:fc:0a:ff:84:28:4a:
81:90:91:93:53:47:72:af:d7:68:20:84:97:c0:ba:ca:7b:ef:
0f:ec:d8:68:d9:11:4a:26:f6:33:70:41:36:aa:22:16:03:57:
30:54:c1:20:0e:f5:79:f3:cb:ff:64:e6:9a:1b:e5:18:f0:6c:
ad:7a:96:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:06:15 2024 by rpki-client on console-fra.rpki-client.org