Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e32382e302f32332d3234203d3e203437353833.roa
File: 3139352e33352e32382e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: 3xuRvJPopQa/9hS+Hk6zU6PV5dk0QKMxYIpJXaQSVqg=
Subject key identifier: 56:34:B9:B8:43:2D:11:61:E5:58:0C:0E:9F:A0:00:28:C1:0F:5C:40
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7B92D2055F1695ABDF017F004F72B94DF6408A2D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e32382e302f32332d3234203d3e203437353833.roa
Signing time: Thu 13 Jun 2024 10:41:31 +0000
ROA not before: Thu 13 Jun 2024 10:36:31 +0000
ROA not after: Thu 12 Jun 2025 10:41:31 +0000
asID: 47583
IP address blocks: 195.35.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:92:d2:05:5f:16:95:ab:df:01:7f:00:4f:72:b9:4d:f6:40:8a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 13 10:36:31 2024 GMT
Not After : Jun 12 10:41:31 2025 GMT
Subject: CN=5634B9B8432D1161E5580C0E9FA00028C10F5C40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:0b:78:67:8c:23:db:aa:b5:50:56:21:a3:
69:61:3e:93:5b:72:f9:9c:aa:21:5d:0c:72:0f:ec:
18:a3:d1:49:ce:b3:f5:e7:a6:d6:18:bb:e6:59:22:
13:6b:b8:82:fb:2e:f3:1a:e9:5c:f3:59:82:6d:ef:
97:93:ec:fe:67:4d:f4:33:f0:9e:a4:01:14:c2:71:
60:78:68:e4:53:10:f2:33:e5:32:83:03:f4:24:88:
f1:1f:ec:c8:f7:ba:95:e4:b8:a6:01:8a:ac:61:b2:
9b:5b:c1:fd:cd:42:6d:9a:c7:0b:96:53:0e:cf:bd:
d8:45:d8:cb:8a:81:4e:81:10:07:5e:e5:75:02:8c:
8f:91:db:85:5d:6c:59:97:2c:b6:22:fa:d6:20:ce:
cb:20:3c:de:ac:24:2f:d1:c2:08:15:b1:ad:be:cc:
34:97:45:29:a5:5f:9b:be:18:b5:34:cd:e2:08:19:
01:eb:0e:eb:98:2c:b1:29:32:be:65:be:f5:1a:f0:
7a:14:3a:8d:fe:6f:89:ec:18:aa:f8:64:6d:49:0a:
a9:91:fa:8b:3e:cc:28:0f:3c:51:73:dd:0f:44:49:
81:a2:7c:9e:c6:4a:9b:66:72:28:8a:21:3f:cd:d6:
08:5b:0e:c5:38:61:9b:76:fc:f3:40:7d:14:02:8a:
ae:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:34:B9:B8:43:2D:11:61:E5:58:0C:0E:9F:A0:00:28:C1:0F:5C:40
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e32382e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.28.0/23
Signature Algorithm: sha256WithRSAEncryption
17:78:4b:97:44:f1:b9:eb:97:a5:a4:12:72:6b:11:03:ec:22:
3b:aa:74:e5:87:d0:5b:98:b0:a8:2e:3b:7a:37:23:f1:4c:43:
5b:f1:bc:8f:3c:15:64:f4:be:18:e4:4f:9a:59:49:f5:93:69:
bf:39:b1:64:17:f9:ef:17:31:05:e5:2a:1c:44:c3:9e:7d:b2:
12:f3:f3:d0:14:39:72:29:d2:cd:12:d3:3b:34:ab:5a:39:77:
2a:bf:2d:f6:94:68:f0:89:6a:1e:a9:2e:82:ce:68:25:47:db:
07:83:d5:f1:5b:ee:2e:0c:3c:b1:1a:f1:75:74:b8:59:89:fa:
26:b7:a1:dd:6b:a4:4a:eb:4a:dd:4c:d5:53:94:c0:d3:b7:8b:
5b:7d:fa:6c:99:4e:a9:38:eb:df:42:0d:2a:01:98:b0:58:82:
e5:70:87:53:fc:75:19:ed:97:19:36:d8:22:6c:c7:83:be:38:
8d:3f:d4:c6:5e:44:b1:99:c5:f8:84:20:b3:bc:0f:70:ac:2e:
2a:b8:34:6a:aa:b8:93:16:64:58:01:2d:b3:1d:2d:a9:dc:70:
9e:4d:2e:ed:4b:24:de:e8:cd:db:e0:b6:80:e6:b6:3e:4a:dd:
4b:57:46:04:82:9d:af:61:da:75:61:30:19:3e:11:c7:10:82:
c4:50:8c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:03 2024 by rpki-client on console-fra.rpki-client.org