Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39342e302f32342d3234203d3e203533333536.roa
File: 3139342e3139352e39342e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier: siEn7Hzwo3cqIZuAgBK8Izkoi1VZbJBQDhX0dP3jvmE=
Subject key identifier: 28:61:79:02:E2:F2:41:9D:BC:0D:98:BE:3D:62:7B:8A:A1:B7:C9:38
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0219617A36C81A5DA9DBA96E801984654EDE48C0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39342e302f32342d3234203d3e203533333536.roa
Signing time: Sat 09 Nov 2024 21:23:26 +0000
ROA not before: Sat 09 Nov 2024 21:18:26 +0000
ROA not after: Sat 08 Nov 2025 21:23:26 +0000
asID: 53356
IP address blocks: 194.195.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:19:61:7a:36:c8:1a:5d:a9:db:a9:6e:80:19:84:65:4e:de:48:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 9 21:18:26 2024 GMT
Not After : Nov 8 21:23:26 2025 GMT
Subject: CN=28617902E2F2419DBC0D98BE3D627B8AA1B7C938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:c3:1c:de:3d:54:11:95:70:6f:60:d3:7b:
50:4c:77:eb:b5:e3:6e:33:02:11:11:ce:5c:28:9d:
16:c2:36:a4:11:12:30:59:62:f2:55:12:7e:4b:ca:
4f:d5:28:fb:81:eb:a7:24:d5:a2:79:bc:c1:59:63:
50:54:5c:55:8e:07:3f:da:1d:78:44:f7:86:da:10:
f4:ed:66:b2:71:29:d5:5a:cb:69:3b:6e:0a:aa:93:
91:aa:0e:92:71:95:e5:f1:26:53:26:1f:4e:ef:b0:
23:64:b7:7b:f4:03:16:1d:d5:06:6b:00:1e:23:45:
c3:e0:b1:7a:42:80:95:1d:df:d1:d3:7b:3e:20:7a:
df:17:85:3b:a8:49:08:5e:78:f3:3c:35:12:fe:d6:
b8:8e:3e:a8:9e:d5:d0:cb:6f:01:c0:a1:ef:9e:26:
11:0e:21:ff:78:9a:f3:6d:5a:71:60:a5:5e:3a:6f:
ae:99:94:15:e6:43:b2:77:74:eb:ad:3a:fc:e9:30:
02:34:1d:12:68:4e:71:42:02:b3:f8:4f:77:37:39:
b0:49:f9:eb:5c:d3:fb:37:3d:6e:5a:ab:02:da:f5:
68:1e:22:52:8e:0a:2d:af:6f:c1:48:a5:b0:66:83:
18:8d:ff:6a:a8:3c:68:2a:25:2f:6b:bb:22:3a:6b:
af:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:61:79:02:E2:F2:41:9D:BC:0D:98:BE:3D:62:7B:8A:A1:B7:C9:38
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39342e302f32342d3234203d3e203533333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.94.0/24
Signature Algorithm: sha256WithRSAEncryption
74:38:d1:23:f0:92:75:6d:a4:52:1c:91:7e:e7:d7:6d:5c:a1:
fc:47:f7:67:5f:d3:aa:db:dc:ce:a4:c5:fc:48:ab:f1:e4:ce:
07:4e:e9:e8:29:43:b4:50:14:77:cf:87:95:9d:dc:2d:c4:21:
b5:af:61:33:52:89:82:ee:4e:ca:dc:9a:ea:d3:6f:d2:b5:56:
80:64:d3:4d:43:38:36:80:7f:22:30:ba:ea:3d:fe:09:f5:16:
17:45:17:06:3c:5a:27:f7:df:57:6f:b0:04:bb:1d:06:4e:50:
43:69:0d:d0:47:9f:63:46:35:b5:e8:a9:86:d1:c2:a3:c8:b2:
08:95:01:c3:80:52:de:65:42:1a:95:43:94:c1:22:71:ff:f3:
b7:67:0d:53:0d:ce:5a:79:ca:f8:46:29:73:e7:6a:e1:55:a5:
36:cf:d3:61:0e:03:e8:b3:b7:1e:99:da:1f:99:94:ca:65:be:
5b:39:86:11:10:2b:63:56:fc:d0:57:35:33:76:77:46:47:16:
e7:58:66:50:90:3f:ff:8c:e7:51:e1:58:f5:39:70:5f:74:23:
ba:8c:1e:f2:c3:a8:e5:b5:16:60:ae:a3:1f:df:ce:bb:2d:80:
45:f0:2c:88:61:2e:bf:18:bc:15:ba:43:be:d0:b8:67:ca:18:
fd:63:01:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:42:57 2024 by rpki-client on console-fra.rpki-client.org