Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3130372e3136332e302f32342d3234203d3e20323033333830.roa
File: 3139342e3130372e3136332e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: dYpxJ3QA81dhRESC5FIO/jk0+9AXKgpWlHQ9+RQdVWU=
Subject key identifier: 56:13:6E:B3:BE:5C:D9:C7:C4:BF:F0:89:24:36:D7:82:E3:CE:6F:D7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 57C75C4279A4A4925B5DFDA63C1ECC8EDC4B757E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3130372e3136332e302f32342d3234203d3e20323033333830.roa
Signing time: Fri 22 Nov 2024 13:25:26 +0000
ROA not before: Fri 22 Nov 2024 13:20:26 +0000
ROA not after: Fri 21 Nov 2025 13:25:26 +0000
asID: 203380
IP address blocks: 194.107.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:c7:5c:42:79:a4:a4:92:5b:5d:fd:a6:3c:1e:cc:8e:dc:4b:75:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 22 13:20:26 2024 GMT
Not After : Nov 21 13:25:26 2025 GMT
Subject: CN=56136EB3BE5CD9C7C4BFF0892436D782E3CE6FD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0a:87:34:c0:c0:07:c6:5a:9b:5c:31:1d:f7:
32:67:b0:37:ed:ca:b0:5b:3b:72:37:3b:15:e2:af:
9e:4d:a4:2c:46:0b:f1:49:13:44:f6:f0:3b:87:05:
1b:c2:2f:e9:2a:e2:76:5f:2f:6b:bc:3c:01:26:60:
a6:f9:1a:79:41:6a:c8:fb:27:8b:83:c4:89:da:0c:
9f:9a:92:1e:53:ac:28:31:ef:de:27:c0:fd:17:32:
7a:41:d2:18:ba:53:ab:a9:37:80:63:04:74:95:50:
e2:58:3e:19:55:c1:35:b5:a5:89:da:7a:f7:18:29:
2b:f5:89:68:14:0f:32:8f:8c:18:42:73:51:25:d4:
ee:13:88:8e:c0:34:fe:2f:c2:20:9e:14:ac:87:cd:
79:1a:e7:8e:2b:a7:d8:73:73:43:d5:23:28:97:bb:
0c:3d:51:2b:53:e5:b0:dd:24:1b:25:a7:bd:2a:f5:
b9:3d:74:f3:2b:6e:19:39:0f:85:fa:1d:70:73:1f:
73:ed:bf:b5:23:44:74:20:ad:25:64:0f:19:e0:f4:
18:db:74:6d:01:11:f0:1f:16:87:b5:b0:7f:be:3c:
55:c7:77:0d:a5:81:0c:16:4e:cb:10:dc:57:2c:9f:
29:ba:15:49:57:e4:38:27:0b:58:f4:21:9c:77:c5:
c3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:13:6E:B3:BE:5C:D9:C7:C4:BF:F0:89:24:36:D7:82:E3:CE:6F:D7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3130372e3136332e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.163.0/24
Signature Algorithm: sha256WithRSAEncryption
98:75:3a:f3:0c:99:e5:ea:9a:4e:cc:c6:54:ab:13:ea:80:6d:
92:8d:51:d9:df:4e:f1:c6:8b:72:64:f1:9f:28:d3:be:b6:be:
44:ba:6e:fc:ee:45:5f:8f:ed:89:5d:c3:63:38:08:eb:2c:69:
88:5f:8e:69:58:1c:71:5a:2f:16:53:4c:ec:bc:bf:3b:41:dd:
42:aa:b0:ca:77:ac:59:d5:a3:de:6d:06:f1:dc:4e:e4:7d:b6:
27:de:a3:db:7a:66:c2:e5:03:91:31:4d:c6:16:0b:1d:7b:d6:
86:c1:02:b1:09:4d:8f:a0:ba:be:44:73:1a:42:32:73:77:1e:
66:75:69:56:08:5b:57:3b:5c:6b:d5:b0:ba:ba:c7:ae:5d:5d:
7b:d9:a6:0a:26:cc:3d:8d:ad:a3:ec:e3:63:f2:65:29:42:d2:
31:47:1f:39:8b:80:66:3d:29:e1:40:fe:99:32:2a:6b:7a:09:
8e:2e:1d:f9:7a:c5:d5:a5:d5:2e:6f:43:30:a8:86:e2:e9:23:
b2:ec:6a:51:38:c9:3c:0b:cd:bb:e1:4a:e0:65:fa:60:3e:d4:
f9:80:53:41:25:48:ed:3c:d2:89:37:d6:4d:86:db:f9:fb:1d:
cf:3f:1d:fe:d3:19:b9:fe:ee:f9:3f:40:07:d4:61:66:f8:c7:
ab:bc:34:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:40:29 2024 by rpki-client on console-fra.rpki-client.org