Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3230342e302f32322d3234203d3e20323034313730.roa
File: 3139352e3137392e3230342e302f32322d3234203d3e20323034313730.roa (raw, json)
Hash identifier: ZjXNJHSyuYJRVcmQdVVCJArJUBptk7SVhUSGtJ29uRU=
Subject key identifier: 10:2F:72:F1:27:41:F6:2D:B5:B1:63:04:81:45:60:7B:A5:4D:C3:27
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5E3CB0D49A0AF1B30877D4612DA45946731BE601
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3230342e302f32322d3234203d3e20323034313730.roa
Signing time: Mon 26 Feb 2024 08:53:29 +0000
ROA not before: Mon 26 Feb 2024 08:48:29 +0000
ROA not after: Mon 24 Feb 2025 08:53:29 +0000
asID: 204170
IP address blocks: 195.179.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:3c:b0:d4:9a:0a:f1:b3:08:77:d4:61:2d:a4:59:46:73:1b:e6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:29 2024 GMT
Not After : Feb 24 08:53:29 2025 GMT
Subject: CN=102F72F12741F62DB5B163048145607BA54DC327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:a0:87:73:44:bd:12:4e:40:b6:fd:6d:75:
41:26:60:11:10:91:c7:fa:fe:3c:38:09:9b:04:59:
35:12:b3:8f:66:4f:bf:f7:2c:fb:d2:5e:0a:d1:3e:
14:5d:7b:a0:40:8a:be:33:ef:a0:4e:69:1e:6f:5b:
a5:2b:4f:03:f1:71:40:22:0e:a9:4e:c0:4f:56:9e:
82:47:53:1a:bd:ed:a7:9b:b3:ca:c9:a7:0b:bd:b7:
47:a7:d9:a2:68:2a:33:94:8a:1e:37:97:b4:21:66:
b9:01:43:9f:4e:a1:64:f5:d1:f0:b3:9a:c4:6f:5c:
99:b5:58:90:e0:79:db:66:81:d3:88:c4:70:90:8a:
47:52:29:fa:cc:0e:66:b3:bc:53:ad:8a:b0:e7:bd:
92:dc:4b:3f:59:00:d0:45:8c:1b:c8:2b:8f:f6:26:
0d:40:12:1b:5e:a0:d8:cd:cb:49:7f:bc:b5:bb:2e:
a6:a1:ef:7e:75:27:93:f3:20:79:8a:c7:31:09:be:
f8:0a:66:b9:de:c9:99:a6:85:b2:7c:37:7c:5f:56:
2e:50:0b:03:31:68:80:44:df:97:b3:37:ef:a0:19:
19:7b:0b:52:13:b6:9b:b5:64:a9:30:ba:72:2f:2c:
30:c0:0d:a9:45:06:84:2d:21:a2:30:63:a2:b6:5a:
b9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2F:72:F1:27:41:F6:2D:B5:B1:63:04:81:45:60:7B:A5:4D:C3:27
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3230342e302f32322d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.179.204.0/22
Signature Algorithm: sha256WithRSAEncryption
30:61:69:07:96:4b:eb:21:ce:5a:97:18:cd:de:9a:b4:9f:de:
52:99:54:79:d9:08:3f:7e:f3:99:47:35:9f:88:54:e5:19:dd:
e3:e5:36:fe:36:8a:0a:bd:e5:14:36:39:e9:9e:f0:6e:60:c4:
b8:68:f1:ef:d1:33:e6:f8:fd:b2:50:90:a7:c8:7b:a1:7e:c4:
3f:f1:5c:bc:99:15:3c:71:cd:cc:e7:c6:3b:3a:aa:00:c3:9d:
53:36:1c:78:ac:16:2e:b5:3a:44:10:82:65:cb:ec:78:08:4b:
69:64:a0:f6:7a:04:16:74:36:f6:37:61:3f:cf:04:96:32:59:
e3:b6:73:47:c4:55:cf:c3:bc:ce:2c:f1:98:84:d8:ef:79:c4:
b0:4e:9b:97:0f:e1:da:30:28:d8:bc:8a:65:c8:59:2b:d0:19:
9d:a2:7a:b6:39:4b:d6:96:ef:dd:59:ef:17:76:77:c4:cf:b2:
0e:d2:de:ae:23:fe:d7:f4:24:29:ee:23:ac:1a:61:26:82:f0:
b5:ff:5b:8c:68:62:1e:f2:d8:33:d2:14:8a:fb:51:62:5d:e1:
e9:a0:31:3f:12:57:b3:59:94:d6:1d:91:b2:7d:5e:1b:58:aa:
a4:8f:c8:c8:e2:d9:7f:3e:9f:0a:c2:75:f7:f7:51:5e:b5:2d:
23:2e:39:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 09:23:50 2024 by rpki-client on console-ams.rpki-client.org