Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34332e3133352e302f32342d3234203d3e20313431303339.roa
File: 3139332e34332e3133352e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: iHOKD6s2QEGi0F3lEjg73Hdk8gnAEKz4JPZoVosnU9c=
Subject key identifier: 5F:7F:FE:9D:6D:03:AC:FF:DB:A9:9B:22:30:63:34:63:84:8F:4F:32
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 28A25597A1A81EBB277390993A7ED5303EFC6774
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34332e3133352e302f32342d3234203d3e20313431303339.roa
Signing time: Mon 26 Feb 2024 08:53:27 +0000
ROA not before: Mon 26 Feb 2024 08:48:27 +0000
ROA not after: Mon 24 Feb 2025 08:53:27 +0000
asID: 141039
IP address blocks: 193.43.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a2:55:97:a1:a8:1e:bb:27:73:90:99:3a:7e:d5:30:3e:fc:67:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:27 2024 GMT
Not After : Feb 24 08:53:27 2025 GMT
Subject: CN=5F7FFE9D6D03ACFFDBA99B2230633463848F4F32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:63:a9:18:de:e6:aa:87:2a:72:43:d7:2d:
ec:a0:62:20:29:b2:42:8e:a3:05:d5:b9:a0:09:b4:
24:4f:2a:c0:e3:4a:2d:2f:a7:81:86:1f:19:8e:e9:
f0:5c:e0:17:6d:13:72:0c:97:0b:50:68:4b:fe:e5:
5c:36:83:92:bc:d6:65:14:de:5f:55:e6:91:5e:0b:
46:8c:f3:99:de:08:4d:7a:c6:dd:9b:ef:40:fc:ed:
24:ef:c3:4a:22:14:78:32:27:81:e1:2a:50:28:30:
70:f2:9d:c2:fc:3b:d1:36:4c:46:d4:83:26:b5:2b:
c5:6c:c4:79:56:77:a9:68:22:13:42:48:d8:de:0f:
aa:69:a4:24:2a:74:64:55:b9:b0:e4:e7:a9:63:91:
f5:a6:a2:57:ff:9c:ca:94:eb:2e:25:3f:29:77:42:
bd:c8:b8:cd:86:58:18:d1:db:ee:e3:0d:82:06:6e:
bb:04:ad:55:6f:65:d1:1b:a1:bd:e6:82:f0:02:42:
dd:3d:d4:79:49:bd:77:7d:79:8d:1a:b9:51:a0:c1:
17:5d:dd:7e:df:6c:2e:06:3c:19:b0:6c:6b:76:d5:
03:d6:c8:1e:be:ad:a5:90:c6:32:45:7a:13:47:d8:
b2:3d:a3:be:99:2f:f4:47:3e:3c:2f:95:5a:ff:f7:
72:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7F:FE:9D:6D:03:AC:FF:DB:A9:9B:22:30:63:34:63:84:8F:4F:32
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34332e3133352e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.135.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:23:d6:ba:5f:d0:00:db:1a:ad:aa:cf:9b:db:97:46:2f:5f:
de:9a:88:db:62:22:e6:3e:2e:ea:70:23:8c:a8:da:38:b7:09:
96:d3:72:7b:76:6a:6e:b6:40:e3:d3:6e:1e:b6:49:28:32:90:
d5:5a:95:c9:5f:db:82:9c:3f:00:a6:2e:e5:53:5e:32:f8:b9:
6b:6b:68:92:1b:af:07:9d:f6:dc:45:4e:f0:4d:45:af:48:a7:
d1:29:24:f7:5b:4b:a4:f2:8c:8a:0e:bc:cd:88:3a:8c:7d:46:
52:69:24:bd:7d:7a:30:45:8d:47:a0:bb:ae:63:dd:e4:96:3b:
d0:5e:17:b5:6d:81:f3:f2:df:54:72:24:34:e9:d6:e1:0f:3f:
c8:65:35:c7:99:ec:ba:f7:e0:0e:71:0c:05:e6:4d:68:93:c3:
04:e2:5f:67:bd:78:f4:70:50:06:c1:ca:79:e7:a1:dc:a4:3e:
2d:3f:81:4b:cf:d0:9b:37:cb:13:5c:d2:1c:80:4a:19:58:ec:
08:07:32:d3:74:6c:3e:cb:a2:fa:a1:4c:45:ad:b6:78:40:ae:
32:40:30:ab:6a:75:76:08:31:c2:fc:f0:68:0c:fe:57:44:6a:
02:d9:8f:a8:60:44:d0:53:e3:f6:73:6f:cb:4f:5c:55:79:6f:
0d:fc:f0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 08:01:45 2024 by rpki-client on console-fra.rpki-client.org