Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38322e302f32342d3234203d3e20313336373837.roa
File: 3231322e33322e38322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: pF+60/ShzGZk0KAdUF59LyLUVROVkl+ZZScLHj7ErAU=
Subject key identifier: 00:4E:42:83:F0:44:04:9A:11:2B:0F:78:7D:5F:7F:A2:0B:2F:1E:28
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 200ECCFD0AAA6EC983137923AD86CB9DDD8B05DE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38322e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 14 Nov 2024 15:36:48 +0000
ROA not before: Thu 14 Nov 2024 15:31:48 +0000
ROA not after: Thu 13 Nov 2025 15:36:48 +0000
asID: 136787
IP address blocks: 212.32.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:0e:cc:fd:0a:aa:6e:c9:83:13:79:23:ad:86:cb:9d:dd:8b:05:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 14 15:31:48 2024 GMT
Not After : Nov 13 15:36:48 2025 GMT
Subject: CN=004E4283F044049A112B0F787D5F7FA20B2F1E28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6c:dd:3c:c1:2f:65:e0:5d:20:17:2c:a5:b1:
ab:3e:56:65:de:94:8d:67:92:f5:b3:76:ba:44:5c:
de:96:b7:22:7f:2b:9b:2a:8e:df:29:38:39:f8:de:
c3:3f:33:73:25:8e:42:16:f3:47:60:47:b2:75:dc:
ec:e5:f3:51:a2:a4:73:4d:e8:cd:9d:04:64:67:36:
51:a2:3b:64:cb:c1:55:d9:22:aa:ca:52:07:e8:9c:
3e:38:2f:8e:78:d1:67:1d:75:32:12:66:70:d2:dc:
de:a0:3b:02:4b:61:a0:5c:19:1f:cd:50:f2:72:70:
ce:d4:dc:b7:e2:f7:74:2d:18:c6:af:55:52:55:b9:
78:97:c3:54:50:6b:08:65:83:17:59:c5:00:8b:b9:
82:41:66:4a:f6:e6:3e:44:29:f0:7f:30:d5:ac:92:
6d:fc:07:7b:13:67:e0:77:9c:5d:cf:56:a8:21:9c:
e7:e4:4a:34:d7:40:81:02:7c:3f:5b:d7:81:19:d4:
5b:cb:0e:1a:96:40:c6:0c:42:2e:1a:d6:7a:37:69:
4c:2b:7a:39:54:98:c2:65:38:21:5a:2b:2f:16:e9:
db:c1:3b:b1:ee:30:c2:e9:2f:26:af:e5:46:1e:72:
6d:d8:04:30:27:35:06:20:02:23:90:13:b5:c1:00:
31:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4E:42:83:F0:44:04:9A:11:2B:0F:78:7D:5F:7F:A2:0B:2F:1E:28
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.82.0/24
Signature Algorithm: sha256WithRSAEncryption
77:0a:01:5e:e3:1a:8c:e0:cd:03:b0:61:8c:cd:3f:cd:42:28:
00:17:a1:99:1b:33:29:0a:5c:98:0e:4e:3b:10:c7:39:27:d3:
9f:1f:55:4e:d2:39:41:a1:1e:a2:10:6b:3c:6e:66:ff:ab:6a:
49:19:31:84:f9:ca:70:03:d0:6d:c4:03:94:51:34:62:be:db:
de:3b:b1:dc:61:13:59:2b:da:15:f0:ed:31:20:bd:6f:c9:4a:
02:1a:58:d5:87:08:6a:a9:4d:33:c7:6f:94:58:c0:d8:14:92:
75:8d:1a:ea:fb:2c:b0:38:d0:bd:22:82:de:66:04:29:be:9c:
91:ec:18:2f:48:93:23:e0:89:01:69:a8:63:03:d8:ea:a8:a1:
61:33:b9:bf:6e:37:c3:eb:43:ac:46:13:89:6c:bf:f6:84:20:
2a:82:31:0e:20:db:99:f2:01:a3:44:3c:87:de:23:db:02:b7:
02:e3:b5:bb:0f:c9:27:7b:e5:da:56:3d:4c:a8:80:d6:f5:3f:
c3:e9:65:4a:7c:c7:e2:8c:db:05:f2:69:03:3c:5e:56:17:84:
54:98:c3:1c:a8:a3:ff:e2:1f:ab:f0:e6:70:d2:60:1f:c0:1a:
14:1d:9d:1c:d1:fb:ff:85:ae:dd:12:c9:94:ef:37:8a:a5:70:
f7:71:93:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:26 2025 by rpki-client