Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e342e302f32322d3232203d3e203437353833.roa
File: 3139352e33352e342e302f32322d3232203d3e203437353833.roa (raw, json)
Hash identifier: qLvbXes7HVzlVQp7an+yMCalMk9Lt54Tek9R2ln/fAs=
Subject key identifier: EB:C0:9B:DE:55:C8:56:AF:C7:2A:5A:57:D4:07:B7:FA:D3:B2:4E:03
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3E7797A86D99EDFD47E1E5CC2F25910BA0EC4833
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e342e302f32322d3232203d3e203437353833.roa
Signing time: Thu 30 Nov 2023 19:01:04 +0000
ROA not before: Thu 30 Nov 2023 18:56:04 +0000
ROA not after: Thu 28 Nov 2024 19:01:04 +0000
asID: 47583
IP address blocks: 195.35.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:77:97:a8:6d:99:ed:fd:47:e1:e5:cc:2f:25:91:0b:a0:ec:48:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 30 18:56:04 2023 GMT
Not After : Nov 28 19:01:04 2024 GMT
Subject: CN=EBC09BDE55C856AFC72A5A57D407B7FAD3B24E03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:f4:46:b3:5f:e6:a9:7f:4f:27:da:42:24:
77:1a:87:60:7a:3e:45:3c:dd:17:ab:10:09:75:2c:
d9:74:d4:19:fa:c0:30:47:0e:97:d7:2d:99:5e:5f:
78:c0:19:63:28:59:9d:c1:67:48:da:51:e9:5e:ea:
91:0b:9a:e5:09:65:f9:db:db:57:7c:0d:7e:e5:1e:
9b:35:6b:65:6b:d1:3e:70:05:f2:95:56:ad:b0:8c:
f7:93:65:d9:66:bc:fe:41:72:d7:28:78:86:02:5f:
00:d4:ed:a4:f9:a7:11:e3:34:db:ae:f9:3f:92:1d:
0b:31:41:3e:63:7a:d0:54:66:d7:b4:d5:35:8d:75:
d6:5b:26:ad:72:19:3a:63:f5:28:c8:7e:b2:1c:cb:
a7:ba:14:ce:4e:a0:7e:89:54:91:70:4f:22:97:0d:
4b:c1:b0:4e:79:f4:15:cc:c0:ed:c9:0c:32:5a:45:
41:4e:4a:9b:c9:e8:56:19:af:b8:ae:ca:29:77:47:
0b:80:70:2d:b4:79:14:ed:0f:2c:20:09:21:d7:dc:
83:ce:78:bd:31:ec:70:9f:6e:b4:f8:43:3d:a6:28:
03:26:1d:23:a3:38:0d:76:f1:06:c3:e7:7d:bb:0f:
1b:f3:a2:82:5f:a0:fc:e7:d7:7e:d4:c7:b7:89:97:
00:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C0:9B:DE:55:C8:56:AF:C7:2A:5A:57:D4:07:B7:FA:D3:B2:4E:03
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e342e302f32322d3232203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.4.0/22
Signature Algorithm: sha256WithRSAEncryption
83:3f:60:31:87:46:f0:72:08:5f:40:d5:f1:f5:d6:97:6c:11:
e9:1f:ad:87:db:4c:a7:f9:56:e9:0b:d5:c1:ae:2d:84:13:c9:
65:de:56:4b:51:74:ff:a2:04:92:bc:7c:af:d8:ad:48:6a:16:
b4:fa:10:ca:e8:51:cb:62:e3:1a:9d:b0:51:fd:79:6d:b0:dc:
ca:83:4f:37:f7:ce:49:4a:e7:9e:81:1e:06:26:2f:08:30:71:
fe:8e:04:c1:e6:4c:a6:38:cd:5b:f8:f9:8b:43:68:ea:8a:df:
e3:6e:91:ed:5e:6d:d8:07:45:3e:c3:61:1e:17:bf:22:ff:46:
53:04:da:a5:1b:2e:4b:cb:01:4c:39:ab:67:2a:ff:88:cc:a5:
e6:43:b8:81:bf:24:2b:2c:88:92:2b:44:0e:90:65:db:49:47:
f4:7f:92:f3:14:aa:16:9b:9f:a8:0a:6a:65:de:6f:5f:4a:42:
79:2e:5d:c4:94:27:c4:1e:78:f6:88:00:79:e6:bb:4b:31:98:
05:46:40:71:f0:38:43:77:95:1c:0a:3d:79:18:64:6b:e0:86:
9e:09:c7:0e:40:97:ab:d3:51:a9:de:b7:d3:da:a0:d9:ff:67:
8c:89:49:09:dc:c5:a9:09:9e:83:b9:03:dd:65:53:c3:2d:66:
d4:e1:13:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:12:36 2024 by rpki-client on console-fra.rpki-client.org