Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38332e302f32342d3234203d3e203631333137.roa
File: 3139322e3134352e38332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: VqbZB156Qc3p6ilIlMMWj0KlrCo6OeFOxLIF+Pz40N4=
Subject key identifier: C7:D0:FF:9B:AD:F7:65:C0:D7:44:9C:19:3E:E2:F6:2E:6F:20:38:29
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1B10EE1E1C7FFB22453AD66E20EEB1F1FC39EFD1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38332e302f32342d3234203d3e203631333137.roa
Signing time: Fri 20 Sep 2024 14:04:58 +0000
ROA not before: Fri 20 Sep 2024 13:59:58 +0000
ROA not after: Fri 19 Sep 2025 14:04:58 +0000
asID: 61317
IP address blocks: 192.145.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 05:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:10:ee:1e:1c:7f:fb:22:45:3a:d6:6e:20:ee:b1:f1:fc:39:ef:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:58 2024 GMT
Not After : Sep 19 14:04:58 2025 GMT
Subject: CN=C7D0FF9BADF765C0D7449C193EE2F62E6F203829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b6:3d:0b:ed:d3:43:8d:8b:9c:74:15:a2:33:
d9:26:e4:4b:de:2a:8b:0c:10:ce:3d:0a:f8:84:9e:
2e:d3:4e:30:34:da:e9:a5:22:dd:c1:60:1d:27:66:
a9:16:81:3d:c8:73:e8:e4:16:b5:38:7a:73:93:f8:
19:3d:69:ae:1f:1a:1f:ed:73:a2:d5:9d:3d:27:bb:
9e:9e:28:44:9c:b4:ea:6f:fa:53:ab:7e:a0:43:0a:
70:99:0e:37:d3:30:1d:67:f1:c0:fc:3b:18:ae:66:
59:2b:9f:3c:f8:7f:08:08:f2:b8:eb:47:3b:77:76:
0a:be:c4:97:6d:9d:01:00:43:69:24:5c:bb:1b:08:
22:17:9c:40:7f:05:8c:fd:a2:b9:a1:ef:50:58:6d:
20:1c:ea:f0:14:57:96:71:48:d4:9a:3d:36:80:9c:
a4:cb:6b:ef:b9:0d:97:b2:67:fc:e4:44:4b:56:b9:
9d:3b:2e:a1:21:52:04:d0:ee:f8:7c:4f:bf:76:65:
6f:4f:2f:df:e1:dc:69:8d:cb:48:23:bc:ab:1a:9a:
ce:41:af:5d:82:19:0d:bb:2e:86:8d:cf:94:20:c2:
a7:63:5b:3f:ca:11:ce:ea:11:05:26:aa:ec:cb:dd:
ed:34:16:bb:fd:c2:ff:aa:74:5d:f1:a4:af:14:36:
59:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D0:FF:9B:AD:F7:65:C0:D7:44:9C:19:3E:E2:F6:2E:6F:20:38:29
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38332e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.83.0/24
Signature Algorithm: sha256WithRSAEncryption
30:15:42:46:8c:ea:ff:dc:a7:89:e0:a4:b6:60:47:38:25:a9:
03:f6:5d:a6:cc:3a:41:3c:7e:c9:53:59:7d:86:0f:e8:48:8a:
b1:62:83:5d:20:1b:06:9b:03:04:c1:91:57:71:26:ac:cf:b9:
ec:29:5e:1b:9f:b1:98:56:ec:78:37:b3:bf:7f:12:5f:ce:b3:
95:8e:0a:d4:1c:da:1f:f4:25:95:1e:32:f6:96:32:62:93:6c:
77:8b:93:2d:9a:14:43:a9:1d:b6:44:1a:7a:94:ef:05:77:3f:
fc:e9:2d:4b:71:38:f8:3f:37:64:70:10:8e:86:fc:a3:21:39:
c7:a7:b1:75:66:c8:9c:1e:9d:ec:3a:17:e8:85:24:da:eb:9a:
8b:2b:37:8b:2a:71:77:c0:bf:f2:d7:68:ea:ac:38:95:dd:d4:
30:3e:97:1f:c6:73:ab:15:8b:93:dc:ef:4c:f0:d0:71:89:74:
16:de:39:b2:dc:6a:c0:e8:9e:31:47:3b:8d:94:4e:c9:d9:cd:
48:d8:4b:68:3c:c8:93:f1:1f:a0:6b:48:6f:a1:89:1d:07:bc:
c1:e4:e1:98:ee:2a:51:90:c0:67:fe:85:8f:1f:59:cc:e9:7b:
84:50:1a:28:ad:3c:fa:c9:5f:81:01:eb:cf:de:a4:b8:48:0b:
da:4e:04:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:21:15 2025 by rpki-client