Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138312e302f32342d3234203d3e20383334.roa
File: 3138352e3234352e3138312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: W9CwLDvGr30gUBmeMG84EFHgwb8j3/letnxS/QT76XE=
Subject key identifier: 92:CC:B7:ED:7A:CC:09:E3:D0:D5:95:2B:01:FF:3E:36:AB:5A:C8:73
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3F2EBDAC5B3A929F17B697D6BB984663632103C2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138312e302f32342d3234203d3e20383334.roa
Signing time: Fri 01 Mar 2024 16:42:13 +0000
ROA not before: Fri 01 Mar 2024 16:37:13 +0000
ROA not after: Fri 28 Feb 2025 16:42:13 +0000
asID: 834
IP address blocks: 185.245.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:2e:bd:ac:5b:3a:92:9f:17:b6:97:d6:bb:98:46:63:63:21:03:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 1 16:37:13 2024 GMT
Not After : Feb 28 16:42:13 2025 GMT
Subject: CN=92CCB7ED7ACC09E3D0D5952B01FF3E36AB5AC873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:59:b4:4b:26:98:6b:4c:80:b6:a7:de:d9:
76:70:76:d2:c4:bf:b7:36:5e:b3:ea:63:21:47:22:
34:b3:98:f0:9f:7d:16:40:67:0c:bb:4e:ca:ea:e3:
48:c2:74:5e:3e:e8:61:35:6e:ba:b9:2f:9e:b7:51:
fa:7a:40:ca:bf:01:e7:81:a1:87:01:da:77:df:a8:
ba:78:86:bf:28:bd:ce:f5:b3:3a:8f:d5:29:95:55:
99:7d:34:6f:73:11:fd:05:4c:02:20:08:df:67:75:
b2:0d:e4:7a:c4:9d:f3:62:dc:25:10:d4:27:52:7c:
83:3a:9e:79:ed:74:60:14:1c:47:3d:84:28:58:75:
91:9f:40:74:ca:98:d3:32:5d:da:f9:8e:5d:83:9e:
c4:b3:4b:65:fc:de:cc:36:c7:33:a9:e3:aa:29:33:
05:ff:06:63:9c:ae:7f:c1:61:c6:cb:a1:2c:63:f8:
12:85:62:5b:52:37:11:93:00:b2:1f:34:47:08:a9:
46:fb:eb:2a:3b:36:2c:90:7f:78:f3:81:04:56:3d:
79:10:f1:f8:74:89:85:41:d1:2b:66:19:f1:7b:54:
5f:59:35:ee:c7:4d:5d:42:3d:99:00:81:61:0b:2f:
a1:aa:fb:6c:a4:7e:f0:51:81:2f:92:82:0d:f0:f2:
b7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CC:B7:ED:7A:CC:09:E3:D0:D5:95:2B:01:FF:3E:36:AB:5A:C8:73
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.181.0/24
Signature Algorithm: sha256WithRSAEncryption
36:a4:4c:05:e5:34:be:bb:2b:80:13:81:b9:38:db:dd:b7:6f:
81:28:24:76:14:dd:c3:37:81:49:c7:2a:6e:e7:57:b8:22:3d:
bb:ab:00:84:bb:63:99:63:10:9b:f3:1d:27:51:f4:92:58:ee:
77:39:0b:44:95:a3:75:74:1e:de:e5:0d:ad:e1:91:74:25:23:
88:ad:ab:3e:94:dd:28:db:e6:e5:1c:c2:47:90:de:51:e6:bc:
d7:00:57:02:0f:72:de:30:7c:0e:0b:61:06:84:b8:76:0f:bd:
13:72:31:d2:f2:b3:39:a5:b4:fc:a2:f7:02:24:0a:1e:9e:44:
29:e2:27:65:9e:f3:f8:e0:1b:ef:89:9c:db:b3:46:c5:cc:5b:
cf:cf:d8:f8:ee:f6:57:c2:32:b9:29:4b:d9:13:29:58:17:46:
c9:fc:fd:81:72:1e:28:88:48:3b:94:f3:12:3a:ab:6b:09:16:
a6:15:e2:e8:81:51:e3:69:80:6f:6f:86:6e:41:1c:58:b2:ac:
56:c8:15:5e:2a:30:ae:06:3e:a9:dd:f5:71:94:e9:70:3f:4b:
96:9d:e1:72:21:ae:8a:ba:57:bc:1b:d6:20:24:fe:90:2f:3b:
c0:6e:bb:f4:7d:9c:7a:16:af:6c:07:4a:9c:58:9a:eb:99:34:
a7:ac:c3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:35:07 2024 by rpki-client on console-fra.rpki-client.org