Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3231362e3231392e302f32342d3332203d3e20313336373837.roa
File: 3139352e3231362e3231392e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: tJxQ5+E5FvO0oYqQ+Nf4ZgVnVEeVAUpXzDnOI+HN+uA=
Subject key identifier: 5E:CC:9E:00:86:CA:8F:77:1B:F6:4F:2C:0F:CA:59:CC:2E:8D:BF:C7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7C2BA3F7C4FD7CBC9AE9D6D5BD61CF1847AB6FC6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3231362e3231392e302f32342d3332203d3e20313336373837.roa
Signing time: Wed 01 May 2024 12:03:34 +0000
ROA not before: Wed 01 May 2024 11:58:34 +0000
ROA not after: Wed 30 Apr 2025 12:03:34 +0000
asID: 136787
IP address blocks: 195.216.219.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:2b:a3:f7:c4:fd:7c:bc:9a:e9:d6:d5:bd:61:cf:18:47:ab:6f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 1 11:58:34 2024 GMT
Not After : Apr 30 12:03:34 2025 GMT
Subject: CN=5ECC9E0086CA8F771BF64F2C0FCA59CC2E8DBFC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ff:59:1e:dd:77:fb:86:46:df:f5:7e:36:59:
4e:15:dd:fa:4f:65:6b:06:83:c1:4a:d4:bd:8d:68:
57:0b:d2:3c:7d:6e:c9:a5:49:e4:da:8c:06:c4:a6:
e5:fe:68:26:76:77:56:0b:73:48:87:0a:e9:54:2c:
29:9b:8c:56:db:b2:fd:1b:d0:54:f4:be:c1:eb:54:
d0:67:05:11:cb:20:ce:57:da:65:af:89:ce:eb:79:
69:9b:31:c1:46:f2:44:d6:44:08:a6:b6:5c:94:f0:
0e:35:ae:d1:a0:9a:20:a9:05:04:b0:41:cf:10:21:
5b:15:ce:d3:36:34:83:04:0d:f8:97:aa:86:ad:2e:
2e:96:62:ba:59:37:20:c2:c5:63:f9:1a:1f:55:23:
f8:ce:4e:b4:2b:50:7e:fc:8a:b0:ec:61:fd:f3:21:
90:39:ed:d9:3c:d5:dc:c0:b4:12:89:5a:ce:81:3e:
91:89:60:83:0a:2a:3f:92:01:91:78:c5:f4:6f:00:
bc:d7:28:66:9d:7e:c5:93:72:31:84:aa:ae:9d:e1:
98:e7:35:98:04:3e:9e:1b:3c:c3:17:7b:67:89:7f:
f1:07:25:e9:23:30:80:a2:3d:bb:b5:87:02:95:89:
fe:c6:1d:c1:26:7e:ca:ba:da:c7:46:51:af:62:7d:
55:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CC:9E:00:86:CA:8F:77:1B:F6:4F:2C:0F:CA:59:CC:2E:8D:BF:C7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3231362e3231392e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.219.0/24
Signature Algorithm: sha256WithRSAEncryption
75:1e:a6:24:d1:09:14:73:d0:87:dd:ef:0c:d4:e9:50:56:aa:
50:02:68:fa:4f:ce:fb:c2:38:d0:a9:d2:59:0e:24:d7:4c:e2:
89:c6:d1:48:c5:c1:a0:b5:e4:a0:3f:33:0d:32:61:c6:f3:16:
3a:c4:e5:8c:24:ef:b9:e9:7c:b8:6c:4b:34:8d:51:e3:2f:c6:
94:39:2d:19:cc:77:23:21:7e:97:b5:50:a0:87:b5:bd:68:df:
9a:e5:1d:f4:2e:1c:4c:f4:11:81:7d:6b:5b:00:90:8c:48:4a:
5e:40:4d:2f:7b:4e:e5:16:fa:ed:5c:cd:f1:76:12:d5:f3:3b:
86:74:14:44:aa:eb:23:74:3d:4c:92:55:47:42:71:7f:c8:94:
24:50:14:30:49:65:d6:8d:bf:d1:92:9a:4d:8d:b1:60:65:0b:
34:e6:71:10:5f:dd:dd:0d:39:c7:9b:c7:91:64:63:04:97:ad:
83:19:22:89:3f:36:4e:6c:7d:64:0d:f3:30:a7:2e:44:d2:54:
ad:e5:d9:83:1c:92:b2:4a:60:49:96:a7:13:15:57:c9:42:2e:
fb:cc:f0:a6:24:fd:0b:92:02:05:e9:ff:aa:c8:44:05:ff:2e:
ef:fe:e8:f5:3d:8d:4f:94:81:d9:61:48:b1:72:81:d8:15:f4:
1c:64:eb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:49:15 2024 by rpki-client on console-ams.rpki-client.org