Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e39372e302f32342d3234203d3e203439343533.roa
File: 3139342e3233332e39372e302f32342d3234203d3e203439343533.roa (raw, json)
Hash identifier: 6NJrAybYE6dhw8FPxyPZnuUbq0Pf9pGyyX24zZdcU8g=
Subject key identifier: 7F:02:77:E3:CA:E9:47:A7:46:36:3C:83:0A:16:FD:E8:8B:A1:B3:1D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 036B87BA5E2C9CE80BF5CD8A2D6EE75774BB401E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e39372e302f32342d3234203d3e203439343533.roa
Signing time: Mon 26 Feb 2024 08:53:00 +0000
ROA not before: Mon 26 Feb 2024 08:48:00 +0000
ROA not after: Mon 24 Feb 2025 08:53:00 +0000
asID: 49453
IP address blocks: 194.233.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:6b:87:ba:5e:2c:9c:e8:0b:f5:cd:8a:2d:6e:e7:57:74:bb:40:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:00 2024 GMT
Not After : Feb 24 08:53:00 2025 GMT
Subject: CN=7F0277E3CAE947A746363C830A16FDE88BA1B31D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:4c:0d:71:ab:87:fc:bb:ef:50:1a:b6:57:
b5:9d:65:22:fb:17:6d:19:2f:c6:26:3f:eb:5c:2f:
f8:55:0b:a2:fc:bd:1e:49:8a:90:69:f0:88:46:c6:
1d:d6:ac:ad:75:8f:38:ab:66:fc:f6:1c:93:85:4f:
a7:99:18:9c:83:76:42:1d:ca:c8:d3:6c:d0:26:24:
a2:d1:e3:eb:0b:f0:08:61:2f:b9:31:b3:de:12:65:
1a:01:e9:56:6e:26:07:c9:22:b5:12:11:93:2a:cd:
66:1c:65:9b:19:d8:3a:a1:5b:01:c3:d0:a7:a3:ac:
1c:ec:fa:fd:8e:17:d8:da:af:08:7f:fc:d1:bc:57:
37:eb:24:8d:e4:59:cd:48:94:bd:e8:22:83:2b:3d:
eb:ce:5f:cd:99:43:7b:9e:15:77:47:fd:5c:ec:bd:
bf:7a:7d:5a:8c:dc:fe:51:13:81:a0:f5:0b:38:2c:
93:1f:51:3a:19:69:3c:9e:59:3f:aa:c0:94:9e:b9:
6b:43:d5:80:4e:c2:d5:aa:f8:01:63:06:59:92:cf:
b3:d9:60:6c:77:ce:42:15:c9:64:2f:f3:7f:96:b3:
4f:56:d9:37:5d:86:ca:e3:e9:b4:71:af:c0:dd:c2:
35:58:b2:40:31:3e:84:82:cb:88:51:84:ef:d4:d9:
eb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:02:77:E3:CA:E9:47:A7:46:36:3C:83:0A:16:FD:E8:8B:A1:B3:1D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e39372e302f32342d3234203d3e203439343533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.97.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:a6:0e:69:cb:24:cc:9f:fe:e1:b7:1b:84:22:08:a4:5b:87:
ea:5f:2b:c3:0d:85:3f:f1:ee:61:46:ba:6f:f3:e5:02:92:a4:
63:8a:72:39:1d:f9:7c:29:3c:ff:59:3f:74:c4:61:8e:a8:f2:
e4:30:2b:b0:cd:be:8a:49:67:b8:51:01:e8:c0:e6:60:3e:91:
72:e3:c7:da:cf:ba:c8:de:b7:12:41:b5:c4:61:40:a3:e0:f4:
5d:19:d0:36:6f:21:d8:ba:9c:9c:a3:69:22:d6:c7:e3:9f:96:
0a:ad:e1:d9:49:d2:0d:e2:1a:e3:7a:f4:fc:66:ab:35:73:f5:
0f:47:60:5c:52:12:04:d0:2a:2b:70:0b:90:70:74:98:cf:67:
90:f1:4e:fc:d2:ab:bd:ef:b9:80:ee:75:48:6e:24:a1:5c:62:
1f:f6:52:b6:f9:65:da:f3:76:16:e0:6b:28:ac:3f:90:f0:ca:
0a:69:b4:1b:de:de:c1:c3:5f:5c:b1:de:ed:2c:45:2c:32:ae:
cb:88:3b:26:15:1c:19:ec:fe:47:33:41:dd:45:95:6d:07:0f:
52:74:d3:c4:ee:68:f6:f0:39:e3:96:51:5b:53:20:5c:dc:19:
86:4d:a8:0d:1b:77:1a:3a:73:39:9b:3a:d8:06:de:cb:ba:6a:
38:20:2a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:49:15 2024 by rpki-client on console-ams.rpki-client.org