Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35362e3235332e302f32342d3234203d3e20323034313730.roa
File: 322e35362e3235332e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: 7JeBIlYJGfj2m5Z7Ppljq0KjbDZXIwQs/oFFFVJT8Dg=
Subject key identifier: E7:D5:2D:AE:46:4D:08:F4:7A:91:96:D5:44:62:65:8A:05:93:0E:2D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 20EF0A7C942B6F06324A6F0F371FD0677F13BEF6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35362e3235332e302f32342d3234203d3e20323034313730.roa
Signing time: Tue 25 Jun 2024 21:46:55 +0000
ROA not before: Tue 25 Jun 2024 21:41:55 +0000
ROA not after: Tue 24 Jun 2025 21:46:55 +0000
asID: 204170
IP address blocks: 2.56.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:ef:0a:7c:94:2b:6f:06:32:4a:6f:0f:37:1f:d0:67:7f:13:be:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 25 21:41:55 2024 GMT
Not After : Jun 24 21:46:55 2025 GMT
Subject: CN=E7D52DAE464D08F47A9196D54462658A05930E2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:95:4f:06:75:21:f5:ff:b1:1f:07:c1:ad:
18:0b:f6:07:01:61:f4:6f:e6:f7:36:0a:e9:97:70:
de:d0:86:0d:6e:03:33:92:5f:84:ca:62:52:c7:44:
2e:27:ef:e2:6f:1a:7e:b6:ff:23:22:e0:a7:c8:aa:
c6:44:22:80:16:82:51:17:53:e2:c2:a7:6c:77:fb:
43:65:b7:26:e0:a0:10:67:73:34:bb:17:f6:53:41:
0c:31:c6:bd:c6:e6:7f:9f:ff:09:4a:2b:57:6c:47:
6f:c8:73:86:e0:95:54:4d:da:80:5e:32:2e:05:45:
75:ff:8b:63:94:37:03:d0:0c:95:ee:00:b9:e5:e2:
f2:46:d6:75:e8:c1:3b:a8:e3:31:4a:27:27:24:4e:
7f:6d:ee:d8:e2:23:10:5b:97:14:8f:c1:38:cc:80:
e8:35:62:22:b2:56:b9:ba:f9:88:0d:e3:d2:38:82:
1d:14:b7:09:8d:95:20:3c:87:31:f9:cf:47:8b:fb:
b7:be:8d:d9:6a:a7:57:8f:15:9c:8a:cf:2b:88:60:
16:45:30:f7:4a:60:b4:64:53:cf:20:cb:f4:cd:45:
bd:4d:34:c6:9d:ab:6f:b2:2e:a0:b8:a0:36:3b:57:
85:27:c0:9a:a9:64:78:31:3e:c6:84:df:9c:5f:f3:
4d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D5:2D:AE:46:4D:08:F4:7A:91:96:D5:44:62:65:8A:05:93:0E:2D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35362e3235332e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.253.0/24
Signature Algorithm: sha256WithRSAEncryption
36:74:b1:7f:a9:e9:c4:46:55:c1:c4:01:f1:1c:e2:fb:79:0a:
d5:71:23:16:40:d0:37:d7:86:c4:c9:da:ba:e4:04:00:83:a1:
3f:b3:d3:e5:05:07:a8:a9:5b:92:50:57:d6:5a:3d:95:23:a0:
6f:03:fe:62:bd:c0:58:1b:45:48:19:0f:9d:20:84:13:24:68:
09:87:ad:a2:e6:26:1d:a6:cd:5c:c5:ab:b3:b4:2d:2c:87:cd:
2e:fc:24:0e:4c:23:b7:e3:17:bf:ac:73:aa:4e:70:24:13:d1:
b4:30:5b:93:52:2d:15:ce:11:f6:55:42:88:7b:03:0e:0a:e1:
a9:fc:3c:ef:33:d5:61:60:84:f1:42:0c:44:16:ce:27:99:74:
3d:90:69:a4:ba:15:3e:95:d6:85:7d:5c:68:27:55:a7:db:77:
ae:a9:ce:fd:69:0e:54:b9:15:5e:05:00:79:78:99:c3:1c:c5:
1a:55:07:a6:87:bb:a3:ba:5f:9a:27:57:cd:bf:f1:e5:e6:01:
bf:34:35:da:ef:20:c5:f4:30:cc:f3:88:f2:59:ee:34:41:f0:
29:dc:1c:6c:8a:d2:99:6f:25:37:83:ac:e3:ea:64:8d:55:c4:
34:62:72:d3:d5:82:63:cb:3d:0f:0e:4d:dd:dd:9d:71:2a:57:
0d:6e:d8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:04 2024 by rpki-client on console-fra.rpki-client.org