Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34332e3131382e302f32342d3234203d3e20383334.roa
File: 3139332e34332e3131382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: yov4bwDf4D+GKgPoPPWZ2HaZ6wKpw05iMMhCstb4+BQ=
Subject key identifier: CB:06:24:CD:16:F5:0F:6D:D0:26:42:D2:B8:EC:35:6C:F8:52:5B:B3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 26BD384EF370CDC47C6C366BF5A018A9BC679CAE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34332e3131382e302f32342d3234203d3e20383334.roa
Signing time: Fri 10 May 2024 13:28:09 +0000
ROA not before: Fri 10 May 2024 13:23:09 +0000
ROA not after: Fri 09 May 2025 13:28:09 +0000
asID: 834
IP address blocks: 193.43.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 05:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:bd:38:4e:f3:70:cd:c4:7c:6c:36:6b:f5:a0:18:a9:bc:67:9c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 10 13:23:09 2024 GMT
Not After : May 9 13:28:09 2025 GMT
Subject: CN=CB0624CD16F50F6DD02642D2B8EC356CF8525BB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c4:fc:16:18:d3:5c:a6:aa:19:a7:c2:70:c9:
5a:b2:03:e3:50:d0:2e:46:f9:7f:68:dd:20:ef:1a:
63:c3:0f:76:fa:3a:8b:64:c0:a7:3b:b2:95:32:96:
a7:1a:cd:82:7b:7e:fc:eb:3c:ea:f4:fe:cd:5a:c6:
bd:b1:90:90:e6:72:cd:9a:1a:4d:da:36:a2:12:60:
39:15:4f:cc:2b:3f:a2:e8:27:dc:79:b4:59:da:e1:
49:aa:50:2c:cd:da:54:a6:b1:47:61:e3:90:ff:51:
50:45:dd:e2:f9:4e:ef:da:6a:1e:b3:34:34:25:71:
1f:a4:16:b9:58:94:d9:9b:21:6e:e2:9e:0f:9e:67:
4d:12:00:01:f9:cd:0f:5e:ea:0f:7e:ff:dd:5c:53:
91:e8:75:e8:8a:e7:ba:f8:c1:97:21:8e:4c:3f:30:
61:a6:53:60:b6:fb:01:c4:89:9c:45:19:13:76:5d:
f4:21:0d:54:49:31:5e:39:16:3a:c0:94:1b:b6:03:
21:2b:f5:6a:f6:fa:f6:0c:38:c7:60:3e:f6:0c:9f:
47:df:dc:3a:df:d9:1f:14:54:2e:ac:79:70:be:03:
15:31:a6:4b:31:37:33:e1:6a:8f:c6:4d:86:d1:8a:
a5:36:f3:96:46:2b:e7:46:b4:af:aa:51:99:62:3c:
1a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:06:24:CD:16:F5:0F:6D:D0:26:42:D2:B8:EC:35:6C:F8:52:5B:B3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34332e3131382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.118.0/24
Signature Algorithm: sha256WithRSAEncryption
95:97:6e:9b:15:16:72:8f:e9:20:39:9e:b2:c8:d0:cd:cc:0e:
d0:12:d3:2f:23:ed:2c:38:1a:fa:60:d8:c6:10:87:01:56:c9:
c7:a3:db:72:03:20:7e:c5:2a:30:66:3c:a2:5c:ad:08:11:d6:
31:96:2b:b4:e4:a5:10:28:ca:ce:72:55:6b:82:7d:5e:b5:2c:
e5:8a:ce:cd:6b:65:f2:e8:53:e5:b9:30:2d:0d:b2:c0:fb:33:
85:f3:30:03:63:5e:26:17:04:37:5a:46:8d:3f:a4:4c:f9:29:
fb:d3:33:ea:39:63:bf:bb:5e:a6:7b:76:ac:5b:e7:ab:6b:20:
b7:69:e0:f3:3f:a4:78:05:6b:ae:f3:57:67:f2:e0:62:be:9b:
8b:67:bc:fc:be:4d:03:e2:da:0d:f1:c4:2a:ec:98:33:07:7c:
d6:a0:07:44:12:f3:94:9a:db:30:72:d5:4e:02:e0:64:22:d2:
73:8d:ef:26:af:0e:7e:32:89:19:1e:6d:a7:02:0f:3b:b1:d5:
2b:c7:05:e8:cb:96:24:b9:72:18:68:0b:37:04:83:bf:b2:e2:
ca:14:10:da:2f:cb:73:9c:3f:ec:19:18:f5:a7:4e:81:63:79:
01:b7:9d:1c:d8:2b:04:f5:04:93:19:82:09:ac:9c:52:45:10:
92:31:7b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:29 2025 by rpki-client