Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35392e3135362e302f32342d3332203d3e203531313637.roa
File: 322e35392e3135362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: RIJ6l65VckPeLdQeBGTDNvusi97Sff0TsBHlO+zrfSw=
Subject key identifier: 2D:68:B2:A6:ED:A7:87:0B:BA:3D:BE:E4:43:E4:0F:87:17:59:D2:2F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0555B40C9DC3F21C5638249CE549F130C2738B62
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35392e3135362e302f32342d3332203d3e203531313637.roa
Signing time: Wed 28 Aug 2024 14:04:43 +0000
ROA not before: Wed 28 Aug 2024 13:59:43 +0000
ROA not after: Wed 27 Aug 2025 14:04:43 +0000
asID: 51167
IP address blocks: 2.59.156.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:55:b4:0c:9d:c3:f2:1c:56:38:24:9c:e5:49:f1:30:c2:73:8b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 28 13:59:43 2024 GMT
Not After : Aug 27 14:04:43 2025 GMT
Subject: CN=2D68B2A6EDA7870BBA3DBEE443E40F871759D22F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c9:55:8b:51:45:57:48:89:cf:a7:f0:c7:6d:
58:4c:1a:1e:6e:e5:88:c0:34:22:c4:27:9e:71:5b:
20:6b:b6:f3:6e:45:b0:45:13:db:88:d7:f6:a6:f6:
62:3a:a2:38:99:48:dd:a5:89:ca:28:b8:96:9a:e9:
b1:79:7d:d0:56:28:5f:7e:16:6f:59:d7:4d:60:3a:
00:c9:e8:cb:1a:26:24:16:c4:30:d7:2b:f0:b6:0d:
f2:4f:4f:c7:11:03:1b:b1:d1:8b:bb:48:36:ce:69:
b6:d1:87:3c:9f:ec:78:10:12:70:c0:6a:a3:d6:4e:
13:ea:a1:4d:a9:86:23:b2:5b:9f:1e:ab:a0:e9:3d:
6b:fa:79:ca:d3:68:05:51:1a:2e:bb:41:ce:52:c9:
5e:33:19:ae:85:a6:d4:23:c9:37:83:2d:12:6a:47:
a8:19:0f:2a:f7:19:54:1f:6e:90:7f:31:e4:5c:a8:
29:51:15:24:ad:56:3e:6d:7c:69:b2:7d:d1:fb:0e:
15:98:8b:eb:65:17:c6:5d:6e:0a:b6:36:29:c4:60:
3f:db:72:11:a5:48:6c:6b:6d:95:0b:d2:b2:f6:15:
26:ac:0d:95:cd:74:02:8c:0c:96:af:74:6b:90:f2:
a7:d7:b1:62:f4:11:da:d8:c5:ea:14:9b:c8:62:40:
e6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:68:B2:A6:ED:A7:87:0B:BA:3D:BE:E4:43:E4:0F:87:17:59:D2:2F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35392e3135362e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.156.0/24
Signature Algorithm: sha256WithRSAEncryption
57:56:97:4e:c0:3e:dd:b6:1d:b5:a5:d3:bd:87:45:31:be:7e:
ac:12:33:18:56:d9:ce:94:03:cb:7a:a0:24:a4:2a:9b:e8:7e:
52:e8:72:b7:c0:b6:35:bc:25:75:75:a1:e1:72:32:50:a4:2c:
b2:d0:15:73:48:ac:75:72:d6:bf:cf:df:23:30:71:ba:29:f4:
56:35:e0:01:99:2f:5f:2e:19:af:a8:5b:fb:0c:dc:54:b8:f7:
d9:65:f5:ec:41:7d:bd:d0:d7:40:6d:86:a1:89:27:36:7b:95:
d5:59:f3:13:6a:61:75:17:31:13:6d:ab:e2:46:15:58:1e:a1:
b3:c9:7d:6a:3f:04:52:02:95:22:dd:86:e0:ad:0f:f2:d8:06:
68:b2:c2:a1:3a:b1:cf:cd:4c:c3:fb:96:88:9b:db:1b:fe:2a:
bd:84:e4:2f:b0:26:58:05:d3:c5:0c:c2:0c:e3:ea:c6:25:ec:
64:42:1d:3b:f6:67:9e:f1:eb:7a:5f:93:5e:e1:dd:35:cb:cf:
85:92:f0:b2:4e:f5:07:ba:22:ce:fc:e1:06:27:b0:ab:30:13:
91:c1:39:de:4a:cb:f5:cf:64:f9:b2:64:2b:39:22:01:fc:4c:
82:a7:79:31:a2:1d:d7:03:5c:3f:5f:c6:63:da:40:56:ff:83:
dc:c1:e2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:29:14 2024 by rpki-client on console-ams.rpki-client.org