Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3136332e33322e302f32322d3234203d3e203631333137.roa
File: 3139342e3136332e33322e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier: UhtxIHVrN3hQPU2YZk6r87qb1xKHjGKEoEaZRKsh9xo=
Subject key identifier: C2:98:A0:2F:3C:B3:FA:B9:4D:A8:84:AD:50:67:9A:73:BB:F2:77:E8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 030583F7B07B33552CD0E03A737A799C02BB6E3F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3136332e33322e302f32322d3234203d3e203631333137.roa
Signing time: Mon 26 Feb 2024 08:52:58 +0000
ROA not before: Mon 26 Feb 2024 08:47:58 +0000
ROA not after: Mon 24 Feb 2025 08:52:58 +0000
asID: 61317
IP address blocks: 194.163.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:05:83:f7:b0:7b:33:55:2c:d0:e0:3a:73:7a:79:9c:02:bb:6e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:47:58 2024 GMT
Not After : Feb 24 08:52:58 2025 GMT
Subject: CN=C298A02F3CB3FAB94DA884AD50679A73BBF277E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b3:5c:9e:23:56:96:82:f1:52:1d:f3:52:c9:
7a:5a:a7:d3:33:96:d6:f1:f0:1e:ed:09:00:a2:37:
ea:ac:e2:8b:5f:6b:81:16:0b:36:e0:51:cf:7b:02:
25:cc:a0:48:bf:ab:01:9e:7a:a2:f2:d6:33:da:24:
21:50:89:9e:14:85:2e:ba:47:24:3b:3c:1d:fb:fb:
90:a3:47:99:1d:c7:f4:5c:3b:8a:c9:d5:a9:5a:ab:
6c:8a:eb:2c:5c:14:f3:cb:0e:ed:e1:44:f8:e6:2a:
98:d5:9a:6a:d3:d4:3d:6c:bc:64:5c:f1:22:9b:46:
1b:c3:04:9c:0a:8b:5b:41:1a:9e:3e:45:50:6a:40:
e5:74:29:b7:10:9b:32:d1:4a:f2:f2:a4:5f:a8:88:
06:ae:c6:1b:29:63:f7:01:16:9c:9a:ea:e6:1f:86:
70:3a:aa:a7:a5:3b:0b:c5:6b:95:b9:66:6c:e5:bf:
6b:1d:17:45:56:31:29:4d:8d:78:2b:14:1a:93:dc:
1f:5e:b5:7a:0d:73:69:d7:d1:c5:44:41:52:36:03:
2f:4c:22:0c:8c:8c:c5:1a:7e:13:9f:91:0a:90:ca:
d2:17:b8:a1:e1:58:df:68:18:03:0f:84:d4:f8:b5:
5c:7a:d4:b3:58:ec:4c:3c:84:57:ab:28:51:e2:43:
2f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:98:A0:2F:3C:B3:FA:B9:4D:A8:84:AD:50:67:9A:73:BB:F2:77:E8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3136332e33322e302f32322d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.32.0/22
Signature Algorithm: sha256WithRSAEncryption
67:a5:37:83:f6:e1:1d:2a:12:04:be:9b:bd:11:df:a2:ef:c1:
de:c1:92:3e:58:28:9f:7b:83:f0:7a:c0:e3:26:c6:78:91:a8:
d3:3a:86:64:bf:a4:d4:06:82:09:cd:6b:c5:89:8a:e8:62:94:
dd:a2:a3:4e:82:e0:27:ef:30:29:75:b6:2a:3d:8a:b8:6b:35:
90:62:b9:4c:fb:c9:2b:db:6b:da:aa:4e:16:d0:6e:4e:72:b6:
77:84:e4:15:fe:d3:9d:75:a1:d8:1b:44:aa:c5:cb:ad:15:e8:
4e:23:67:f4:86:18:c8:48:2a:db:6c:2b:2a:aa:9d:f9:09:a6:
4e:57:73:80:2b:37:ef:49:ee:a9:e4:22:08:b3:42:d7:0f:9d:
33:60:a9:45:ba:ee:d6:9a:42:56:f6:cc:d0:07:52:c1:9c:33:
1d:1f:77:d5:69:f6:4e:af:d5:59:7d:28:7a:28:b7:0a:b1:93:
21:0f:da:6b:64:48:d2:b6:d3:3e:d1:03:09:ec:ab:61:f7:e1:
c7:d5:76:d0:05:0e:69:03:41:35:9e:5f:b3:29:2c:f6:74:9f:
30:bc:af:b7:c6:f7:b7:99:03:8b:60:84:8d:88:9d:0c:26:59:
ba:43:b5:3b:55:2a:7d:9a:cf:af:12:de:5a:ca:38:de:70:a7:
69:9a:18:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 18:15:07 2024 by rpki-client on console-ams.rpki-client.org