Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3137322e302f32332d3234203d3e203437353833.roa
File: 3139332e3230332e3137322e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: Mn073+Zx6DOWpe4u0I+7tBpY86PO67a5Egnd/VKKx94=
Subject key identifier: 19:95:2F:6D:C8:14:34:F8:D5:0A:0A:3F:B4:16:FA:6B:26:2A:9F:C9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 28D8C6037EADFC951B1873684C84D09C996FDD4E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3137322e302f32332d3234203d3e203437353833.roa
Signing time: Fri 02 Aug 2024 11:04:33 +0000
ROA not before: Fri 02 Aug 2024 10:59:33 +0000
ROA not after: Fri 01 Aug 2025 11:04:33 +0000
asID: 47583
IP address blocks: 193.203.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:d8:c6:03:7e:ad:fc:95:1b:18:73:68:4c:84:d0:9c:99:6f:dd:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 2 10:59:33 2024 GMT
Not After : Aug 1 11:04:33 2025 GMT
Subject: CN=19952F6DC81434F8D50A0A3FB416FA6B262A9FC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:3b:bc:aa:e5:63:f5:86:b4:64:e1:dc:9d:
75:8d:8b:f9:2e:d5:b6:9f:51:d8:ce:3d:a7:0d:4a:
4a:c3:00:c1:54:ae:92:11:df:46:a5:41:dd:b2:37:
4e:2e:31:97:18:7a:51:53:ad:4e:40:d6:a2:c5:b6:
e2:6d:fd:63:5a:98:13:02:c4:cc:97:11:df:28:bd:
74:e6:c9:5b:4b:14:e3:0c:ff:28:62:6c:c0:29:b3:
0b:72:a0:c7:e3:d9:81:50:70:ac:23:8b:02:40:ae:
82:00:10:87:da:3f:b6:66:23:28:ae:b4:d0:a3:d2:
86:59:eb:f5:04:19:5c:1e:7e:c4:ba:2c:c8:58:c2:
16:37:e0:16:3f:9d:3b:66:6f:5d:ac:50:fd:02:41:
34:6e:d9:52:92:ef:e9:5b:9e:9c:b9:21:e7:9f:35:
2f:5c:85:76:10:66:6d:b3:71:b8:59:a5:05:c4:f1:
00:28:b5:b6:17:86:39:17:27:67:a7:23:8e:44:87:
ec:1a:81:5a:51:8c:82:67:46:8d:8e:eb:88:04:84:
ab:e2:9a:29:3a:5a:f5:cf:84:90:ff:bd:1a:98:e2:
3f:36:05:79:3e:c1:36:8f:1a:79:63:15:49:2f:ef:
e7:71:01:bd:ed:44:b6:7f:36:ff:6a:43:bd:de:8d:
56:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:95:2F:6D:C8:14:34:F8:D5:0A:0A:3F:B4:16:FA:6B:26:2A:9F:C9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3137322e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.172.0/23
Signature Algorithm: sha256WithRSAEncryption
66:4c:41:90:cb:7e:42:87:1f:23:10:46:c9:e8:8b:cd:2c:79:
77:c8:86:2e:ae:3c:6f:65:3e:22:71:5d:a7:c8:55:c2:70:1e:
d7:ef:ba:23:a0:e4:ed:e5:05:b7:45:aa:56:e0:9b:50:27:8d:
bc:a8:cd:62:4a:76:02:eb:b9:24:ad:bc:b5:eb:f9:1f:49:9b:
13:76:e3:e1:1c:00:fb:5d:aa:5e:e1:98:2a:62:65:9c:5f:89:
33:7c:93:4d:fc:86:24:e4:79:bd:2c:a6:6f:aa:9d:e7:d5:24:
9e:ca:fa:fa:c2:9a:18:c8:d4:8e:62:d9:bb:d4:aa:e2:75:c3:
bc:ad:83:29:e4:97:3f:43:df:b9:5c:09:bd:a5:87:d3:ca:3a:
90:a8:51:15:6a:20:77:49:ee:50:be:d7:6e:74:72:01:9e:b7:
76:e5:91:af:d4:da:c4:c0:3b:6a:47:81:3d:9e:b2:35:50:df:
03:7c:31:93:53:4e:46:4d:cf:3e:d3:19:39:b3:a9:96:b4:c1:
78:01:02:fe:46:34:a7:49:e9:80:f2:3c:ae:e4:73:be:4f:69:
27:5b:4c:4f:03:de:0d:c7:b0:17:e0:fb:78:b4:7e:3e:85:6c:
62:f7:d0:df:c9:32:07:fc:09:2b:45:67:7d:2c:57:04:96:b6:
6b:94:d8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:25 2024 by rpki-client on console-ams.rpki-client.org