Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38332e302f32342d3234203d3e20313336373837.roa
File: 3231322e33322e38332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: eVtUQz0jOBB78Cykbe1fqxc9oR9V186lW3JzacL0vk4=
Subject key identifier: 3A:EE:DC:94:E9:48:FB:0E:55:A0:8F:CE:9E:EE:B1:1A:26:4C:26:E8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1D7EBEA5718593D600301A8206E0AB99E51B32AB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38332e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 14 Nov 2024 15:36:49 +0000
ROA not before: Thu 14 Nov 2024 15:31:49 +0000
ROA not after: Thu 13 Nov 2025 15:36:49 +0000
asID: 136787
IP address blocks: 212.32.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:7e:be:a5:71:85:93:d6:00:30:1a:82:06:e0:ab:99:e5:1b:32:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 14 15:31:49 2024 GMT
Not After : Nov 13 15:36:49 2025 GMT
Subject: CN=3AEEDC94E948FB0E55A08FCE9EEEB11A264C26E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bf:a7:c3:9c:80:cd:d4:8a:b5:39:80:fd:be:
c7:2b:7f:8f:f7:16:20:a3:3d:d4:b6:59:ac:bb:75:
41:86:de:08:fb:3a:f3:13:79:be:4d:60:6a:f9:f1:
13:80:30:93:ff:08:f5:70:01:d2:a4:0c:f2:92:91:
40:89:cd:46:a1:61:bd:75:6e:e8:eb:18:f7:ca:b3:
e1:28:b2:bb:a7:29:ab:e9:98:43:bd:81:81:09:59:
2e:89:ef:a7:51:33:30:7d:7f:b9:f4:ef:9b:6a:0e:
73:93:c5:3c:18:9e:9a:86:1b:f9:85:b0:b2:38:e5:
14:e6:dd:1c:15:5d:af:0d:0d:e6:69:88:a4:d5:95:
45:af:52:b3:cb:cc:77:49:ab:13:dc:4d:3f:80:75:
91:bb:9b:49:aa:e8:33:15:6c:91:b7:02:5d:48:65:
e5:94:89:c0:41:b9:72:5e:f0:74:fe:5b:ec:ef:e3:
84:bd:06:c6:d2:ed:e6:f9:c4:f2:ce:be:09:6e:aa:
22:ae:d9:16:62:e0:6a:06:bc:d6:a5:13:dd:6b:0d:
5a:03:cf:2a:97:c3:71:f3:7a:f9:77:9b:5e:cc:7c:
4e:c4:a7:86:eb:45:0c:d7:04:53:9f:ec:f0:2e:14:
b3:12:91:9d:6e:49:f3:b5:0a:0c:98:09:ea:f0:97:
e7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EE:DC:94:E9:48:FB:0E:55:A0:8F:CE:9E:EE:B1:1A:26:4C:26:E8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.83.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a9:66:8a:12:66:a7:4c:4d:04:05:e1:be:3d:f4:68:a7:a2:
ab:c7:de:92:ba:ad:8c:ea:1b:51:bc:b5:8e:10:1e:0f:cc:5d:
e9:e2:dc:9f:7a:a5:62:c4:ab:fb:44:b6:54:68:83:43:c8:b3:
ee:44:0a:b8:e7:12:4f:13:35:90:48:27:0b:60:48:36:ba:b6:
2d:e7:52:85:c8:64:36:fd:ab:c1:e1:a1:cc:fe:26:75:0e:52:
99:95:07:6a:ff:2a:c0:a8:fe:5f:d5:19:b4:41:25:77:68:22:
de:ba:80:d2:b3:b4:6b:4d:69:2e:0b:8f:76:11:40:69:98:ec:
45:9f:6f:59:b5:0a:61:92:34:0a:df:57:75:26:2b:33:40:bd:
83:86:1d:b9:49:08:b1:2e:6a:51:a8:65:45:9c:1d:89:a0:1f:
9b:40:da:24:bb:67:d9:25:30:da:03:37:1e:70:c1:93:f6:34:
f2:02:6a:a0:b7:5b:36:2e:a6:94:b9:55:b3:af:66:c4:d0:95:
76:c3:b5:03:02:f9:0d:ef:34:e4:b5:8f:83:ca:ea:a2:51:4f:
da:e3:4f:69:90:6e:30:26:65:e4:9a:ab:b5:7d:18:d6:d2:8d:
54:a3:68:b9:eb:b1:6f:eb:35:a6:f2:ba:0d:3a:1d:51:51:03:
22:dd:c6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:29:14 2024 by rpki-client on console-ams.rpki-client.org