Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e33322e3233352e302f32342d3234203d3e20323132323338.roa
File: 3139342e33322e3233352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: Hs8iYNfEOhKI2Cfytp5dupWQGY1VQjJU1ft0Fl4hoKM=
Subject key identifier: 41:23:57:48:BE:E8:AD:F4:34:5D:C9:C6:AA:89:29:9A:9F:25:32:91
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6AFDBB33613E9E199359219BDE77D0695E5C3068
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e33322e3233352e302f32342d3234203d3e20323132323338.roa
Signing time: Fri 14 Jun 2024 09:10:06 +0000
ROA not before: Fri 14 Jun 2024 09:05:06 +0000
ROA not after: Fri 13 Jun 2025 09:10:06 +0000
asID: 212238
IP address blocks: 194.32.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:fd:bb:33:61:3e:9e:19:93:59:21:9b:de:77:d0:69:5e:5c:30:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 14 09:05:06 2024 GMT
Not After : Jun 13 09:10:06 2025 GMT
Subject: CN=41235748BEE8ADF4345DC9C6AA89299A9F253291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:01:a4:36:e7:02:6a:bc:0b:16:e6:08:79:7a:
94:eb:4b:93:39:c0:b8:4a:7c:ef:2b:d8:fa:ca:fc:
e0:0f:30:47:1a:9b:d0:9f:36:15:da:fc:0a:72:cb:
d2:20:3b:dd:9a:0d:c3:cb:22:66:35:14:14:b1:9d:
27:46:8d:74:6e:89:46:3c:0e:50:8c:26:95:d7:f0:
32:06:3c:1b:ee:1b:69:c8:57:2f:66:3a:56:3d:9d:
c5:7e:89:d0:60:a7:23:6d:ae:71:4d:5f:ea:c5:33:
90:75:07:38:b6:18:18:2b:2d:75:9a:8c:41:25:25:
9c:fc:90:60:3a:b5:5d:23:fd:fa:1a:b3:4a:66:1e:
7b:b6:01:39:64:ec:37:d6:63:5d:8a:ca:b2:4e:f7:
f6:1f:e6:cf:07:60:a2:76:35:8c:40:c2:2d:07:93:
62:c4:1d:84:b9:b9:cb:c6:c7:3f:36:02:64:41:75:
d4:81:90:74:ab:0f:a2:35:8e:97:89:c4:5e:dd:46:
07:d4:c7:f3:64:e4:8e:e8:ec:25:c3:d8:7b:13:52:
f5:5f:61:3b:59:52:4c:4b:50:13:6c:a3:30:ba:74:
84:c6:f6:6d:1a:ed:56:0d:3d:9c:2b:30:16:82:7a:
e7:e8:0a:43:67:f5:88:25:9c:7a:09:a0:a5:a0:d6:
38:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:23:57:48:BE:E8:AD:F4:34:5D:C9:C6:AA:89:29:9A:9F:25:32:91
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e33322e3233352e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.235.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:fa:f9:da:bf:80:b2:fb:a9:0d:77:07:ac:b5:92:64:c8:bd:
cc:03:0b:65:4b:53:33:ed:69:4a:80:f6:6d:00:50:e3:3a:e2:
88:91:89:32:50:d4:1d:24:0e:98:67:1e:25:97:72:e5:b0:c3:
11:5c:c4:7e:f0:4f:6e:88:b0:21:64:f1:9a:24:46:65:29:3e:
53:6b:94:aa:34:c1:b1:5e:7b:c3:70:01:e9:5b:84:2b:47:50:
08:ce:f6:70:e1:5a:da:93:e7:f5:64:6e:79:98:3d:82:a8:f4:
eb:15:cf:6c:58:ec:e7:12:f4:5c:14:35:c8:db:f6:aa:7d:5e:
23:20:c6:48:91:de:d0:e7:55:63:da:bb:5a:ca:a6:0f:45:d6:
c0:bb:2e:a3:99:61:17:e3:fd:1e:b2:23:fc:83:5c:c4:7a:bc:
64:09:80:29:1b:25:90:43:59:15:a4:c7:fb:76:80:b5:30:65:
d5:bf:9f:ff:49:84:3b:3f:a3:2b:14:ce:52:1a:2c:9f:3d:54:
44:2f:a7:4c:ce:a7:1f:16:20:39:67:c3:62:87:aa:ef:24:f9:
38:64:4e:3a:e4:07:60:04:5a:bb:35:55:8d:af:cf:da:38:f3:
9e:8a:97:b6:e7:31:92:bc:36:2e:68:a9:b3:c8:59:85:b0:7a:
c4:ee:02:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:25 2024 by rpki-client on console-ams.rpki-client.org