Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233392e3231312e302f32342d3332203d3e203531313637.roa
File: 3138352e3233392e3231312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: DHgX2bj8w62h9M3kD0RxP0FvVBv6kEO8Ds63GUzfn8I=
Subject key identifier: 5E:82:B8:54:01:22:35:15:F2:EE:C3:DE:4E:C8:71:28:91:65:18:7C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2CA80F39D95FB60064B1F1E87EFC57417602728B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233392e3231312e302f32342d3332203d3e203531313637.roa
Signing time: Fri 20 Sep 2024 14:04:52 +0000
ROA not before: Fri 20 Sep 2024 13:59:52 +0000
ROA not after: Fri 19 Sep 2025 14:04:52 +0000
asID: 51167
IP address blocks: 185.239.211.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:a8:0f:39:d9:5f:b6:00:64:b1:f1:e8:7e:fc:57:41:76:02:72:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:52 2024 GMT
Not After : Sep 19 14:04:52 2025 GMT
Subject: CN=5E82B85401223515F2EEC3DE4EC871289165187C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ee:5b:98:60:8e:fd:e0:b8:85:e8:ab:d9:15:
76:bf:f6:0f:7a:8b:3a:be:30:af:8c:49:1a:c7:01:
cb:81:3e:54:33:c3:48:21:f6:b1:44:d7:71:34:c1:
87:86:cc:b9:66:a1:8f:81:11:1f:73:7f:b8:5d:6c:
60:63:d4:07:a0:9a:20:9a:5e:5f:ca:68:e2:a4:75:
4e:db:30:19:2f:de:4f:42:ee:e0:4d:2d:88:b2:6a:
48:28:68:cb:15:64:b7:ea:20:b0:96:f4:5b:33:3c:
be:d3:3c:8c:1e:01:0d:36:59:0f:fe:2c:2c:b1:64:
9c:f8:d5:43:3a:45:c6:56:74:ff:7a:22:c8:1a:4b:
35:20:11:60:c3:54:11:a4:9e:80:63:f2:a0:c6:cf:
09:73:0a:a5:6e:b7:fc:45:9f:bf:9e:d6:50:83:8b:
18:77:a5:c9:fa:f7:e7:c9:a4:cc:6d:f4:20:c7:b1:
9f:22:74:d3:d2:cd:44:95:b7:48:c5:78:2c:a4:bc:
85:0f:cc:79:d4:4c:c5:75:06:ba:65:4a:95:d9:25:
11:84:da:c8:31:f1:af:6a:8e:46:77:1c:a9:4c:f4:
d5:11:0f:55:83:6a:2d:de:66:38:fa:f9:87:31:9b:
1d:f6:00:13:3c:fb:e8:80:61:ea:68:06:f3:52:cd:
2b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:82:B8:54:01:22:35:15:F2:EE:C3:DE:4E:C8:71:28:91:65:18:7C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233392e3231312e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.211.0/24
Signature Algorithm: sha256WithRSAEncryption
50:f5:88:4a:9e:a6:03:9e:3f:12:95:1c:74:22:6d:52:94:83:
bc:3a:7e:b0:dd:25:62:c4:1b:dd:00:68:32:90:ed:14:93:c4:
02:db:21:d3:3d:ec:54:60:fb:93:3c:0e:88:22:ec:51:1c:92:
00:de:19:a6:0e:da:e3:a6:fe:2c:d5:2c:4a:74:61:b1:8b:c7:
35:a9:3b:17:1b:46:38:9e:84:21:d2:b8:c6:4f:fc:35:94:a6:
65:fc:3b:29:b3:d6:8a:c7:e2:3c:78:b4:71:7e:13:73:87:71:
cc:0c:59:1b:ce:be:8c:60:6f:9b:e9:d6:70:dd:f6:f8:2a:76:
91:ce:5d:94:7c:b2:6d:eb:29:25:7f:4c:2b:e8:6d:22:37:1c:
8f:ab:f6:26:7b:e1:a1:10:8d:3e:ac:7e:54:8e:0c:b2:7b:49:
c6:8c:b2:d7:fa:59:da:bb:96:9d:f7:a3:11:26:30:15:77:53:
41:ae:d7:44:1e:85:26:31:44:24:1e:fb:1f:7e:f5:ce:54:4c:
8e:8f:83:36:3e:9f:90:e9:f9:56:28:a5:1f:e4:a4:c1:aa:5c:
76:9e:24:34:24:ce:cd:38:69:be:57:a6:63:26:ef:05:56:60:
aa:ec:df:42:0a:70:97:bb:7b:07:a9:79:e0:17:48:b1:af:09:
11:de:97:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:29:13 2024 by rpki-client on console-ams.rpki-client.org