Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e33302e302f32332d3234203d3e203437353833.roa
File: 3139352e33352e33302e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: qcZ1ORkHI3xyhDpx/RffoSR73eXzWfYt0hAD1KtWyI4=
Subject key identifier: DC:6A:6B:6C:57:C6:5F:FF:58:41:94:61:C4:3D:CC:8D:2F:F9:07:A6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 26368A7D5856F09CD37024AF9CB540058B325CB0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e33302e302f32332d3234203d3e203437353833.roa
Signing time: Thu 13 Jun 2024 10:41:33 +0000
ROA not before: Thu 13 Jun 2024 10:36:33 +0000
ROA not after: Thu 12 Jun 2025 10:41:33 +0000
asID: 47583
IP address blocks: 195.35.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:36:8a:7d:58:56:f0:9c:d3:70:24:af:9c:b5:40:05:8b:32:5c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 13 10:36:33 2024 GMT
Not After : Jun 12 10:41:33 2025 GMT
Subject: CN=DC6A6B6C57C65FFF58419461C43DCC8D2FF907A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5a:10:ef:33:91:6c:b9:c9:4d:79:11:47:9f:
7e:48:ef:ee:72:73:7e:30:e7:c6:7d:98:b3:60:5e:
d2:06:61:44:f3:55:d5:9e:e2:74:9f:b0:08:43:04:
65:ee:80:48:f6:35:aa:08:26:4e:15:ba:85:c4:a0:
04:b6:f0:fd:05:09:f3:29:73:6a:66:8c:0e:30:5f:
88:e5:e1:f6:69:b7:a0:3f:84:c2:28:41:8e:23:72:
16:ab:d3:f7:24:d1:14:05:cf:50:c9:6b:6c:20:e5:
c0:24:17:5c:81:d4:c0:50:ec:eb:5f:90:20:78:2c:
da:4c:51:0f:a7:90:1c:52:8d:13:a7:9b:eb:d3:b9:
86:d2:39:ab:bd:dc:7c:65:0f:94:f1:a1:49:d1:88:
18:18:15:17:d6:19:bf:0a:30:10:78:8a:e3:f0:80:
19:0c:9a:01:a7:69:cf:be:37:79:13:cd:8a:4d:8d:
30:6c:9b:1e:92:20:c3:aa:c1:61:96:71:18:a6:91:
7d:a9:59:b9:f6:9a:dc:90:b3:c6:da:86:1f:3a:9b:
6d:08:3d:5c:29:40:a9:5d:fd:36:b1:f8:64:18:57:
33:f1:4b:4b:8f:a7:f4:48:3f:4e:6a:2c:c2:35:f9:
bb:6f:f9:11:3e:1c:b3:7c:36:16:47:54:4f:dc:8e:
da:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6A:6B:6C:57:C6:5F:FF:58:41:94:61:C4:3D:CC:8D:2F:F9:07:A6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e33302e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.30.0/23
Signature Algorithm: sha256WithRSAEncryption
17:da:63:93:43:63:57:09:8a:e5:3b:22:7c:71:a3:61:f1:7b:
9b:bf:d2:06:4d:bf:51:ae:e7:ed:8d:06:11:7a:38:16:93:02:
27:00:e0:ae:6f:5a:11:d7:12:4a:26:dc:00:10:8b:d3:48:96:
71:17:7c:f9:7d:05:ec:3a:c3:61:2a:b8:79:d3:c2:98:17:e6:
2e:5f:f4:48:d6:ad:c3:c5:18:7d:f6:69:c7:7a:c8:cb:94:d5:
0f:7b:c9:73:94:30:e7:8a:80:38:92:e1:8f:64:5e:67:b1:28:
3d:5c:9e:c5:3b:f2:27:0b:62:94:75:81:e2:25:3b:9e:3c:93:
24:c5:36:86:a7:e7:4d:c1:09:29:a3:9b:43:cb:45:0e:13:51:
78:04:03:11:92:5b:74:ea:a3:fb:a5:6a:c9:e3:9a:90:25:3e:
a6:94:73:48:bf:b3:32:b5:a3:0c:28:9c:45:a2:b5:46:04:94:
ae:9b:69:ac:d3:f6:23:2c:21:3b:bc:59:f3:ad:e4:26:11:b3:
5c:6c:06:bc:99:f3:67:65:3f:a8:58:c1:6d:b4:48:13:e4:7f:
03:fe:2b:6d:7e:44:56:e6:28:6d:c8:0a:77:5f:28:fe:61:21:
43:6e:da:87:0f:71:d8:ed:8b:cf:8e:c5:93:80:3d:d5:19:9c:
71:97:9c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:48 2024 by rpki-client on console-ams.rpki-client.org