Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3134302e3139362e302f32322d3332203d3e203531313637.roa
File: 3139342e3134302e3139362e302f32322d3332203d3e203531313637.roa (raw, json)
Hash identifier: M+O6YrHcT2pbFLSHyFkdpa0ppctSY/uJdg35ARwdxRs=
Subject key identifier: 8E:98:EC:E8:CE:6A:D8:2D:82:12:22:6D:CB:16:CE:31:1E:EA:53:36
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3F34E5733742AB4BA5EB29AECD4EF9923A803FAA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3134302e3139362e302f32322d3332203d3e203531313637.roa
Signing time: Fri 21 Jun 2024 08:04:00 +0000
ROA not before: Fri 21 Jun 2024 07:59:00 +0000
ROA not after: Fri 20 Jun 2025 08:04:00 +0000
asID: 51167
IP address blocks: 194.140.196.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:34:e5:73:37:42:ab:4b:a5:eb:29:ae:cd:4e:f9:92:3a:80:3f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 21 07:59:00 2024 GMT
Not After : Jun 20 08:04:00 2025 GMT
Subject: CN=8E98ECE8CE6AD82D8212226DCB16CE311EEA5336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:81:db:4f:c2:f7:da:13:88:99:83:26:9a:35:
17:08:cc:13:47:1f:0f:4f:54:4d:c5:e0:ff:af:98:
52:ed:91:02:ab:73:e6:cf:24:2d:a3:17:5f:6e:3a:
0c:4d:e5:61:f0:dd:bf:7d:fe:a3:c3:b2:39:10:34:
4b:45:46:02:84:a7:b4:bf:69:f9:9e:f1:50:d3:f0:
51:4d:1d:47:a9:08:d8:fb:9c:8f:5e:27:32:20:37:
82:fa:eb:14:fe:1f:62:cf:4b:2b:48:46:e0:bc:8f:
c6:fe:17:8b:9b:cb:7a:af:d6:d6:56:a2:74:a3:6f:
4e:08:ed:00:7b:5a:da:bf:a0:2e:6d:8a:2b:cd:95:
b5:83:6f:55:aa:10:88:ee:bf:3f:f0:eb:f9:0c:2a:
da:70:85:32:3c:ed:7c:63:cd:f9:4c:cd:bf:9d:02:
e2:36:f5:c1:97:6e:7a:d0:1f:45:a8:eb:78:6e:ed:
93:c2:e3:86:6e:9a:92:69:66:92:46:c2:3d:f0:68:
ad:b8:5b:ed:26:3f:d2:bc:82:23:6d:74:e8:e1:67:
74:f1:e5:78:c5:6b:86:e1:c9:85:56:df:fa:83:d3:
d9:01:21:19:f9:66:3d:fc:b8:34:d3:31:20:5e:53:
5c:40:2b:d7:08:22:aa:be:95:cf:3a:62:b9:e5:b4:
e8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:98:EC:E8:CE:6A:D8:2D:82:12:22:6D:CB:16:CE:31:1E:EA:53:36
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3134302e3139362e302f32322d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.140.196.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:27:d7:ff:3c:5b:bf:f6:2e:14:92:41:7f:86:59:5e:7a:1d:
e1:fd:fd:db:3a:68:45:ce:2b:07:37:32:a0:38:5f:22:64:07:
91:c6:ab:ad:86:36:c4:50:ef:20:e2:2b:73:b3:fe:c6:a7:23:
78:a7:d2:90:08:d5:7c:35:4c:47:cb:77:19:b5:59:78:ec:07:
72:75:87:e3:c4:2d:f0:9d:7a:9e:2a:ba:21:8e:4c:e9:97:98:
0b:13:a5:1d:6b:32:b6:b6:a7:5c:fd:9d:ee:df:eb:7d:95:c2:
23:c8:e1:50:41:7b:1b:53:af:88:3d:34:0a:f4:16:bb:88:18:
b6:d6:23:4a:51:8e:d5:13:49:3d:a2:26:2b:56:46:02:f7:97:
e2:59:b4:52:94:05:8d:c6:80:74:f3:0d:62:8d:f8:d4:aa:e0:
9c:51:30:53:ee:3d:06:fc:eb:55:00:a7:48:6d:d3:45:d1:68:
34:84:e6:1e:dd:fc:ae:93:de:e0:3a:87:69:7d:01:da:33:7f:
b1:5e:c6:b3:a6:49:26:33:93:c7:ec:01:ac:3a:79:cf:c4:7e:
21:52:9b:d8:bc:d2:5a:9a:2f:f2:d6:39:9f:8d:9d:62:82:43:
be:95:c1:87:60:3a:32:a2:03:71:66:96:a2:65:fe:fb:cf:a7:
5c:14:b1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:03 2024 by rpki-client on console-fra.rpki-client.org