Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e35392e302f32342d3234203d3e20313437303439.roa
File: 3138352e3232392e35392e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: fHvoIp+Wm+MEgrHqSXCnDW+Y0kGi0uXcNDarR1xfYDc=
Subject key identifier: C9:1D:9E:07:36:13:05:1A:C7:63:51:64:90:BC:D0:C4:35:77:8C:89
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5D69F676B76B1AA3E3A46A7ED3B8E4B622ECDD44
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e35392e302f32342d3234203d3e20313437303439.roa
Signing time: Mon 26 Feb 2024 08:53:03 +0000
ROA not before: Mon 26 Feb 2024 08:48:03 +0000
ROA not after: Mon 24 Feb 2025 08:53:03 +0000
asID: 147049
IP address blocks: 185.229.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:69:f6:76:b7:6b:1a:a3:e3:a4:6a:7e:d3:b8:e4:b6:22:ec:dd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:03 2024 GMT
Not After : Feb 24 08:53:03 2025 GMT
Subject: CN=C91D9E073613051AC763516490BCD0C435778C89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:f1:ea:80:05:a7:6d:0b:50:0c:f7:e3:69:
9d:26:ae:1f:91:24:c3:ad:3d:96:3b:3b:13:be:8b:
14:10:90:95:e7:b4:1f:2b:cc:ef:58:a5:e1:3c:f4:
6e:b4:e6:5f:fe:e6:4f:d6:4e:ca:4d:2a:84:7b:d5:
17:4f:7d:86:8e:bb:b9:a7:a1:8f:05:37:e1:12:54:
49:97:7d:d5:15:17:30:b3:68:29:4a:3e:11:44:45:
10:1b:7f:77:f6:47:7c:b6:c9:ff:35:1d:f1:b6:02:
d0:a7:96:7b:ba:88:4b:cf:5a:17:7d:1e:c7:d3:60:
dd:b0:b2:f2:bf:bc:ac:51:d2:ad:93:15:5a:f7:18:
6d:61:db:7d:88:34:8a:54:4f:3a:15:9e:d6:27:8a:
4e:e7:31:fc:7b:93:08:4a:84:60:0b:10:bb:7d:7e:
df:d6:93:6f:05:9e:21:b1:03:40:3b:a8:5d:82:31:
7f:d2:50:08:ee:fc:83:4b:77:9e:be:60:b4:31:b6:
af:dc:5c:48:9f:d8:2a:d9:1f:2c:46:0e:b8:91:30:
11:07:bc:ef:a8:04:50:fe:00:af:b3:a7:dd:90:7c:
05:fe:5a:ca:cd:9c:02:f7:f7:43:0b:98:7e:b5:26:
37:05:d8:85:e4:b6:6f:e7:13:c7:f5:a8:4e:d5:39:
a4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1D:9E:07:36:13:05:1A:C7:63:51:64:90:BC:D0:C4:35:77:8C:89
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e35392e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.59.0/24
Signature Algorithm: sha256WithRSAEncryption
85:c4:c2:cb:78:64:f7:44:04:48:49:39:94:8d:52:15:d5:76:
b7:8a:d3:12:73:37:6d:c2:72:6c:c5:ad:01:c0:50:7e:f0:2d:
01:c1:fd:97:78:fe:c0:b6:ca:c4:26:3c:ee:2d:07:f0:9f:25:
1b:04:9e:88:5b:ce:e0:f9:84:c2:77:af:56:b2:01:a6:0f:68:
25:d2:4d:49:42:1f:85:27:c0:ea:b8:5d:cd:f7:d9:41:a6:44:
a8:6b:66:4a:35:2e:ce:59:a3:96:00:03:21:55:f0:51:82:94:
21:7a:c8:c4:7e:3b:0e:28:d1:df:29:20:fa:29:4c:7c:45:01:
44:b3:85:84:d9:ec:82:0a:55:c0:57:34:a2:c5:b9:2e:5f:09:
f9:e0:0c:89:58:a0:02:e5:75:b4:84:ae:73:32:03:69:64:39:
56:ef:db:85:91:96:2c:95:b1:a6:d8:b9:b7:77:cd:8c:25:e1:
2a:04:32:a5:84:17:88:e9:95:de:47:67:d0:ec:02:78:16:58:
53:bf:7b:ef:52:f6:37:df:75:37:1a:3f:a0:bd:ec:9a:3d:d8:
54:1b:ee:1a:fe:ea:90:14:6f:91:fe:4a:f9:5c:f2:53:85:15:
b2:8b:65:04:ca:61:20:3a:68:36:cd:80:8f:1a:b4:89:33:3c:
fc:fe:04:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:12:36 2024 by rpki-client on console-fra.rpki-client.org