Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e32382e3138342e302f32312d3332203d3e203430303231.roa
File: 3231322e32382e3138342e302f32312d3332203d3e203430303231.roa (raw, json)
Hash identifier: JHbjdeBHwAXHm+e0QMsxsEfXFvcX8iHlDM3qw2eNZEE=
Subject key identifier: B3:87:EA:EF:BB:F2:4E:79:41:59:59:EF:37:39:5F:0C:D4:14:9D:9A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 51A5C25ED4AD726167E2F90689DE4C68B785DFE3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e32382e3138342e302f32312d3332203d3e203430303231.roa
Signing time: Wed 13 Nov 2024 19:28:23 +0000
ROA not before: Wed 13 Nov 2024 19:23:23 +0000
ROA not after: Wed 12 Nov 2025 19:28:23 +0000
asID: 40021
IP address blocks: 212.28.184.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:a5:c2:5e:d4:ad:72:61:67:e2:f9:06:89:de:4c:68:b7:85:df:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 13 19:23:23 2024 GMT
Not After : Nov 12 19:28:23 2025 GMT
Subject: CN=B387EAEFBBF24E79415959EF37395F0CD4149D9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:69:05:a6:da:12:d4:ea:4e:fc:a7:9c:f1:
6a:62:c1:cb:c6:88:e8:41:72:db:e8:fc:83:06:5e:
e4:22:47:cb:01:b9:eb:4a:f6:54:36:d1:17:52:04:
ff:65:36:f3:2d:4b:f4:64:d0:89:0b:5b:54:97:e7:
69:36:1e:c1:8f:65:9b:75:a1:6f:cb:fd:2f:94:92:
0d:00:2a:db:0b:28:b0:1a:c3:9c:86:08:46:66:71:
08:61:44:0f:27:11:2d:a4:ac:08:6e:ce:35:a0:48:
17:59:0e:83:74:1b:e4:73:f2:1b:d3:9e:31:f5:4f:
b0:5f:b4:7d:b6:42:88:80:cc:68:01:c6:ee:5b:5b:
60:49:af:17:46:9a:5b:cf:37:2b:f5:54:3d:b6:f3:
60:2b:a5:ff:6a:a3:ee:09:46:54:6f:9c:44:07:56:
88:52:91:87:29:46:7b:0c:55:9c:f6:77:7b:ef:bf:
13:00:1a:86:d0:18:14:97:ee:9b:d1:6a:63:e4:72:
9a:67:0e:ee:58:41:70:80:f0:3b:e8:62:4c:3d:40:
6a:9d:a5:2a:2b:d8:2a:66:9b:d6:8f:24:59:df:0f:
bd:bd:30:d3:43:d0:e5:fd:42:6e:77:06:1a:64:ef:
78:25:bf:3f:c1:8c:a3:dd:7e:4c:ce:8c:24:13:28:
e5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:87:EA:EF:BB:F2:4E:79:41:59:59:EF:37:39:5F:0C:D4:14:9D:9A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e32382e3138342e302f32312d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.28.184.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:69:04:1a:9e:06:2f:e2:0e:48:25:6c:52:f7:5b:32:47:15:
14:0f:7f:aa:75:b0:0c:ec:4b:06:57:ad:ef:97:28:1a:ec:49:
49:a1:93:d0:5e:cb:80:de:e6:ee:1e:d7:76:93:e2:69:a9:43:
3f:56:77:8e:ca:39:5e:41:3f:7c:8f:6b:2e:a7:81:95:39:24:
19:6f:7d:d0:b7:f0:bd:19:49:41:87:69:b7:02:4c:e8:41:9d:
73:ec:9d:02:8c:18:d9:e0:e8:81:be:cf:50:9a:1f:ee:f0:a6:
46:3c:99:e2:98:90:08:c6:6a:76:8c:0f:53:05:5e:6d:e3:f4:
c3:26:cc:90:44:06:71:a6:5e:4e:56:2c:0f:ee:94:69:ee:b8:
8f:51:38:39:a5:f7:37:6a:1b:a3:47:f0:ce:dc:f0:c4:f3:c2:
8f:de:bf:0a:47:4e:98:05:57:33:bf:32:19:4a:67:cc:c0:14:
51:db:d6:2b:0d:59:46:c1:93:01:77:f8:cb:9b:b4:59:da:36:
1c:53:77:a5:09:bc:f7:c3:20:45:5b:32:58:45:48:68:d2:d4:
02:c6:b9:71:17:6e:c9:cb:54:dc:3c:a9:aa:e5:28:f6:c7:34:
52:e4:71:7d:ca:d5:e5:ae:dc:4e:98:39:1c:c6:37:91:92:77:
9e:5a:d3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:29:14 2024 by rpki-client on console-ams.rpki-client.org