Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38302e302f32342d3234203d3e20313336373837.roa
File: 3139322e3134352e38302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: z8s4li8d+eRbAO0PFW+NKelf90IzyrIpIiDK8jR08Qg=
Subject key identifier: B7:DA:A9:71:C4:68:41:69:B4:43:20:2F:C1:9D:C6:12:B4:7A:61:D8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 28A7F463BFE033B7D3AB1A2099EEF761F5282E94
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38302e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Oct 2023 13:41:51 +0000
ROA not before: Fri 20 Oct 2023 13:36:51 +0000
ROA not after: Fri 18 Oct 2024 13:41:51 +0000
asID: 136787
IP address blocks: 192.145.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a7:f4:63:bf:e0:33:b7:d3:ab:1a:20:99:ee:f7:61:f5:28:2e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:51 2023 GMT
Not After : Oct 18 13:41:51 2024 GMT
Subject: CN=B7DAA971C4684169B443202FC19DC612B47A61D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:40:89:3f:47:40:3e:b1:e1:03:b7:97:57:e5:
a8:7e:99:59:69:36:9b:29:db:b1:f0:9d:b3:54:ef:
a4:91:28:07:2a:f2:47:1a:79:59:28:d4:e4:d2:94:
0c:f8:2e:6f:b3:67:dd:2a:9e:6e:07:ee:76:80:2e:
b6:99:ab:8b:25:2c:64:cc:d5:70:f6:50:56:62:92:
5e:56:64:59:6f:30:2b:20:10:3c:11:e8:08:bc:5e:
20:85:13:c1:38:5b:f8:11:71:0d:28:d9:66:af:1d:
17:ee:17:9b:f2:d9:22:14:22:bc:1e:1d:e5:b7:95:
72:b9:04:ce:9d:07:1f:29:33:6d:17:d2:b2:4f:b1:
c8:5a:33:5c:69:29:e7:28:a8:f9:f1:13:6b:c2:8c:
df:da:e7:ae:a6:b6:ab:3a:c9:91:30:52:57:10:27:
1f:c3:bc:a0:00:bb:b5:56:ac:69:e8:28:36:ea:3b:
3a:3c:2b:1f:54:46:f1:52:7b:03:05:8c:b5:f3:6d:
a4:08:b2:e6:9e:53:62:db:a8:2c:c2:2e:0d:d8:1c:
76:e8:2c:91:59:47:fd:80:5d:4e:1a:6f:d2:4d:ed:
92:c5:7d:6e:10:a0:0a:27:11:a1:6d:85:78:44:5a:
e3:24:c4:53:02:34:ea:f9:b1:c6:e2:5a:b9:75:48:
44:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DA:A9:71:C4:68:41:69:B4:43:20:2F:C1:9D:C6:12:B4:7A:61:D8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.80.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c4:f6:93:87:9f:5e:1a:d7:89:b7:38:8d:3d:de:d2:97:9d:
97:43:66:a1:5f:e0:b6:de:fb:ea:3f:de:cf:54:cf:5b:17:ae:
1f:40:73:43:6e:d4:04:30:08:b9:8d:86:af:c2:27:3e:05:90:
f2:c3:bf:16:c0:92:24:33:6d:52:f1:dc:82:b7:fa:64:7c:15:
97:2d:29:70:2a:68:bc:5b:89:a2:fd:11:8c:53:f7:d8:a6:9c:
53:20:48:28:e1:26:40:80:07:9a:47:27:6a:5f:e6:e9:1c:1d:
4f:00:15:fb:56:a1:24:fc:15:89:3a:28:8a:d6:23:41:a9:14:
a1:de:75:8c:34:95:cb:af:23:48:17:a5:c8:0a:7f:cb:77:01:
24:fc:c8:5f:20:3b:61:a0:12:2c:08:e3:e6:8d:82:3f:89:f7:
2e:ed:96:43:d4:00:84:3d:b0:68:3a:e6:13:67:41:48:d0:e5:
24:b4:9e:0a:14:e3:9f:64:54:4a:b4:5e:8f:9f:35:f3:7e:0e:
80:3e:8e:c2:88:e2:10:60:09:85:7f:7f:ce:47:81:24:15:06:
db:73:cf:ed:53:2d:a9:59:90:92:8c:6b:c2:6f:ca:59:55:23:
26:b7:b7:b4:ec:36:fc:5b:79:d6:d1:6d:12:3c:20:dc:c0:90:
55:55:db:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:54:23 2024 by rpki-client on console-fra.rpki-client.org