Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e35362e302f32342d3234203d3e20313336373837.roa
File: 3138352e3232392e35362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Rp0426STUFDlVX+3oRG3qRl36LEkTXJL+A4R8xrmglc=
Subject key identifier: A4:76:56:03:06:47:89:55:43:39:5A:3F:AF:AA:C5:18:8A:DF:64:70
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 084FE519534AD488F311AEC6B400BB5C1EE63D64
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e35362e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 26 Nov 2023 19:50:21 +0000
ROA not before: Sun 26 Nov 2023 19:45:21 +0000
ROA not after: Sun 24 Nov 2024 19:50:21 +0000
asID: 136787
IP address blocks: 185.229.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:4f:e5:19:53:4a:d4:88:f3:11:ae:c6:b4:00:bb:5c:1e:e6:3d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 26 19:45:21 2023 GMT
Not After : Nov 24 19:50:21 2024 GMT
Subject: CN=A47656030647895543395A3FAFAAC5188ADF6470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:36:3c:73:93:59:fd:fd:fd:81:87:c6:72:
55:c4:2b:ca:31:f2:e1:d6:57:5e:c7:d6:48:0b:a2:
4b:fa:8d:19:58:dc:3e:0c:54:51:b7:dd:b3:ea:32:
8f:4d:72:43:57:ca:23:9a:6e:d8:5c:9c:e7:42:77:
04:69:61:f5:fa:db:b2:71:cf:25:0a:52:7e:b2:00:
bb:ec:d4:19:89:fc:9b:f4:5c:f6:76:87:d8:5e:7e:
cf:6f:69:54:19:9b:a0:9a:7c:28:74:d3:a8:8a:a3:
d6:7a:04:81:29:35:32:4e:eb:40:b5:a0:85:0b:00:
b2:a3:73:12:17:8d:69:53:80:48:e7:bb:0d:fe:d6:
dd:de:8f:0a:f1:1c:87:23:37:f1:63:15:c0:bd:fa:
4c:01:8e:6d:5e:59:93:e6:b3:41:47:49:7d:10:40:
70:83:22:b1:1d:46:31:e5:9f:7e:06:2f:21:42:bb:
7e:44:22:34:bf:37:98:e9:83:47:14:b4:4e:f5:57:
0d:27:e5:64:ac:1c:46:e6:5c:2b:af:cc:03:97:4b:
6e:ec:eb:ec:44:31:87:94:c9:5a:98:5b:d5:93:8f:
87:18:1b:ae:17:95:e0:bf:bf:d7:48:0e:5a:1b:42:
4a:f4:eb:3f:56:df:b8:36:61:36:06:ed:b4:aa:c4:
70:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:76:56:03:06:47:89:55:43:39:5A:3F:AF:AA:C5:18:8A:DF:64:70
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e35362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.56.0/24
Signature Algorithm: sha256WithRSAEncryption
74:63:7a:0b:8d:20:b4:11:54:0a:72:67:51:c2:4b:d5:50:1d:
8d:da:d8:91:cc:d3:09:5b:54:64:03:5f:6a:49:a1:8c:76:77:
e0:64:6e:0c:85:32:3d:02:22:d2:bb:8d:42:8b:4e:da:44:35:
f7:a3:e3:7b:8e:c8:41:46:a3:fd:a1:f0:66:d9:be:88:0b:e6:
3e:d3:81:9a:2e:75:c9:db:14:eb:ec:ea:31:2d:fe:1e:c4:da:
1f:e9:21:43:b1:c2:88:d3:9f:c4:64:d6:88:55:02:e3:f3:ba:
47:42:fd:ad:48:e2:8f:f7:52:c3:1c:2c:99:75:08:a0:0d:a1:
d9:d7:79:e2:a1:45:fd:af:7e:7a:09:70:b8:0f:fb:a4:68:28:
b5:05:dc:db:9f:d4:c2:89:97:16:68:1f:f5:50:fe:9a:38:0c:
fb:d4:b1:aa:8d:e5:82:e8:27:8c:d0:3c:8a:71:cd:c7:68:a2:
1e:1e:7a:a9:0b:5f:ca:b4:66:23:e4:0d:66:6c:a1:c4:6e:d7:
82:56:cc:7c:76:89:12:a6:06:10:fd:aa:fa:54:54:71:5d:c4:
5e:53:77:7c:d0:4b:de:cd:44:09:0a:2f:b2:10:8f:2b:9f:7d:
44:73:b2:6f:8e:4d:16:a5:2f:0e:7a:ff:f1:5d:c3:9a:47:4c:
8a:1a:a6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:21:25 2024 by rpki-client on console-fra.rpki-client.org