Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3137362e3132362e302f32342d3234203d3e20313336373837.roa
File: 3139332e3137362e3132362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: j3QS0UEpDgjT4x4lPmAmLRzhAReGX+RX/dnfNzCKESc=
Subject key identifier: AA:68:A4:FC:91:70:A6:D6:F0:78:1A:5C:66:F6:AA:A2:BD:F2:AF:0E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 76C2FD89CEC247DF3FF5B876E83241F67331E124
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3137362e3132362e302f32342d3234203d3e20313336373837.roa
Signing time: Tue 13 Aug 2024 19:41:26 +0000
ROA not before: Tue 13 Aug 2024 19:36:26 +0000
ROA not after: Tue 12 Aug 2025 19:41:26 +0000
asID: 136787
IP address blocks: 193.176.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:c2:fd:89:ce:c2:47:df:3f:f5:b8:76:e8:32:41:f6:73:31:e1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 13 19:36:26 2024 GMT
Not After : Aug 12 19:41:26 2025 GMT
Subject: CN=AA68A4FC9170A6D6F0781A5C66F6AAA2BDF2AF0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:60:57:b0:c8:93:f1:7e:87:d5:1e:22:1a:d8:
15:2a:d9:59:30:0f:d5:57:be:28:e5:a3:8e:f6:b7:
68:d5:76:3b:a5:dc:df:80:a3:21:6c:3f:9a:4f:20:
55:92:5a:fd:04:66:99:56:65:86:0b:a4:88:4c:49:
a3:7b:ba:41:56:b6:5f:7d:27:ed:29:87:c9:81:88:
c7:ff:32:3e:63:ff:39:c6:ef:36:49:fb:13:04:d0:
39:ab:36:e3:ea:93:d5:60:d8:88:ff:fb:85:51:d8:
84:57:c9:ad:e3:75:0f:3a:04:c3:dc:b3:bb:6c:00:
64:f6:c4:1c:dc:9a:2d:2a:65:cd:80:c8:6c:12:66:
bd:03:b7:06:2b:b8:2d:ed:e4:8a:03:c3:7a:09:dc:
10:76:4c:3c:b5:eb:55:9c:4c:2b:f1:41:81:97:3f:
da:7e:2d:10:2b:a7:7c:84:23:2c:30:51:08:fa:35:
a8:f1:a1:59:ae:ca:9e:5d:ea:37:df:cc:6e:bc:12:
b0:95:68:f8:35:9a:f3:e8:cc:0a:61:fa:90:df:c7:
a1:2d:35:d8:e7:b9:49:bc:5c:6b:16:96:f9:4f:7b:
e4:10:d1:54:69:2a:19:e9:c0:43:62:a3:f6:85:e1:
ab:c7:f9:40:b8:9a:33:30:fb:9a:be:89:ca:e1:a1:
97:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:68:A4:FC:91:70:A6:D6:F0:78:1A:5C:66:F6:AA:A2:BD:F2:AF:0E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3137362e3132362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.126.0/24
Signature Algorithm: sha256WithRSAEncryption
26:3a:70:a0:db:70:97:82:64:d9:0d:0e:95:4f:21:39:cc:cc:
11:ac:42:f1:a3:50:1c:4c:3e:f7:99:4a:a3:71:58:d0:7d:6b:
7c:ff:4e:1b:e1:92:e0:8e:04:5d:99:e7:f5:b0:90:b7:8a:3c:
38:0f:2c:b9:26:34:ee:bd:7e:08:05:54:73:15:94:e8:f8:86:
24:2d:35:26:c3:e8:ce:c1:04:1d:6d:1e:81:c2:d8:9e:3f:40:
1e:dd:48:0a:68:25:67:76:f2:07:84:3c:35:8a:2d:97:ab:8a:
d1:8b:ef:4b:a0:c1:0a:42:5e:ed:ec:e6:2f:69:e7:21:8a:99:
0d:03:c3:46:46:11:e7:ef:b4:bf:74:20:b3:a8:4a:db:df:12:
fe:9f:0e:44:75:e4:64:10:db:14:51:59:60:40:dd:01:e1:1c:
60:fd:72:62:9d:7a:7f:41:ec:7f:4b:a5:19:ef:4b:e5:e8:09:
e4:1c:86:cd:18:f8:64:d7:05:73:ac:14:92:72:35:a8:99:03:
cd:bd:0f:14:9a:ba:df:02:cf:e3:86:f6:dc:17:90:aa:40:ed:
f5:5f:39:99:d2:1f:65:71:a3:92:1f:b4:ac:2b:32:e4:c6:69:
0b:ba:ff:cc:29:1e:c5:1d:9b:49:06:90:db:4a:3d:86:c9:a5:
7a:f5:61:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:48 2024 by rpki-client on console-ams.rpki-client.org