Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3230302e302e302f32312d3231203d3e203437353833.roa
File: 3139352e3230302e302e302f32312d3231203d3e203437353833.roa (raw, json)
Hash identifier: b9f7/Rf0JCgXdq28nEpgst96QMi9yMsG+wQgNi7lmnk=
Subject key identifier: D2:0F:9D:EA:30:99:E8:D0:C3:A7:F1:F7:FE:B3:0D:E2:6C:C0:C7:E3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 57EE9CE1DD801001C4552429A4EC19B8E6F219AA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3230302e302e302f32312d3231203d3e203437353833.roa
Signing time: Wed 08 May 2024 16:07:47 +0000
ROA not before: Wed 08 May 2024 16:02:47 +0000
ROA not after: Wed 07 May 2025 16:07:47 +0000
asID: 47583
IP address blocks: 195.200.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:ee:9c:e1:dd:80:10:01:c4:55:24:29:a4:ec:19:b8:e6:f2:19:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 8 16:02:47 2024 GMT
Not After : May 7 16:07:47 2025 GMT
Subject: CN=D20F9DEA3099E8D0C3A7F1F7FEB30DE26CC0C7E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e1:a4:db:e5:e0:a6:84:15:86:1b:ac:d7:02:
44:f8:a3:07:85:55:a2:fe:d8:9c:6c:5b:c1:eb:25:
c2:59:c8:c4:f1:c7:72:aa:ec:e3:e6:70:b7:d3:2c:
bf:32:c2:0d:2e:a8:c2:ec:ec:50:7c:96:a6:05:77:
39:d8:08:08:70:88:26:d6:69:bd:e0:3a:4d:d7:32:
48:6f:54:6e:fb:5c:6f:b3:57:bf:64:eb:f3:74:42:
f5:e6:1a:a2:76:a3:20:f1:cd:93:eb:1c:22:1d:20:
1e:29:c6:ce:34:f7:89:71:ab:13:f3:3b:b4:55:12:
04:d5:ce:22:cd:5f:92:5c:c8:0f:95:bf:67:73:71:
d8:0a:01:0e:67:ee:23:09:12:06:ff:93:82:bf:e0:
1d:5a:28:22:73:13:4b:b5:3c:2a:2d:eb:4c:91:5e:
b2:7f:bc:69:bf:2a:0d:e0:b3:cf:d9:1e:33:09:9a:
7f:e6:3a:f2:e8:53:96:2d:cc:39:0b:ec:d6:4e:6c:
30:60:09:e0:90:42:ee:18:8d:99:20:78:f4:43:9a:
74:42:b4:fe:a3:f9:e5:8f:a4:00:9e:76:69:e4:e6:
71:b1:e4:07:cf:cc:63:94:e8:b5:71:2a:f3:d6:dc:
24:2b:99:46:8a:14:fc:49:b5:c0:41:8c:77:ab:0e:
ae:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0F:9D:EA:30:99:E8:D0:C3:A7:F1:F7:FE:B3:0D:E2:6C:C0:C7:E3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3230302e302e302f32312d3231203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.0.0/21
Signature Algorithm: sha256WithRSAEncryption
65:77:76:dc:c5:bb:6b:b1:fe:12:84:0f:3e:e4:cf:e0:7a:0c:
16:90:74:70:3b:75:cd:17:66:5d:e8:4e:9c:17:92:12:71:ac:
58:bd:af:bf:f5:1d:db:e5:60:8e:f7:eb:cc:62:9d:e9:da:61:
1c:e9:e0:f7:d9:68:e3:23:40:8c:74:68:2f:8a:6e:13:c6:78:
0f:27:92:a3:69:eb:1e:32:93:08:aa:51:b7:83:c5:81:1b:93:
4f:06:23:64:3c:74:c8:b7:99:fd:d1:3d:d3:ba:ce:41:df:37:
b8:be:9a:1c:ba:4e:b2:dc:f5:98:bc:31:d2:ab:a3:3d:a7:c0:
f7:9b:f3:2e:ae:e0:96:be:5f:af:e2:cb:7a:91:0f:e6:a1:60:
78:84:0d:33:5a:1d:3d:4c:c7:0e:86:8e:69:fc:c8:4b:e2:be:
1f:91:48:c0:1b:56:8b:73:84:e3:ad:2c:c4:35:ee:97:70:b9:
bb:0e:e9:15:2c:55:41:77:63:68:6e:25:2c:31:86:3c:70:9a:
cb:28:a5:36:c7:aa:02:a7:8a:b7:5f:57:f4:0d:50:db:b6:5d:
c3:47:3a:2e:23:83:04:73:f4:f5:b5:0d:0c:d1:14:9e:13:de:
34:37:2e:d0:b4:eb:fc:ea:43:1f:44:e0:2c:9e:c0:ed:40:19:
e1:33:c4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:47:07 2024 by rpki-client on console-ams.rpki-client.org