Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38362e302f32342d3234203d3e20313336373837.roa
File: 3231322e33322e38362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: PKRRpKZOHn0rkJFfltbt8Gi0AitQ7AAcT5m7WRaxDUI=
Subject key identifier: 94:EF:12:11:BB:08:AF:DE:B8:73:9D:F9:03:11:1A:A9:62:A0:54:D5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1806C8114ACD15F32AB307CD1BC4E0C3CB4ED0C2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38362e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 14 Nov 2024 15:36:54 +0000
ROA not before: Thu 14 Nov 2024 15:31:54 +0000
ROA not after: Thu 13 Nov 2025 15:36:54 +0000
asID: 136787
IP address blocks: 212.32.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:06:c8:11:4a:cd:15:f3:2a:b3:07:cd:1b:c4:e0:c3:cb:4e:d0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 14 15:31:54 2024 GMT
Not After : Nov 13 15:36:54 2025 GMT
Subject: CN=94EF1211BB08AFDEB8739DF903111AA962A054D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:a7:38:11:96:78:f2:e8:b4:cb:f7:a3:2d:
9b:61:88:ef:f5:57:97:3c:21:5a:5b:da:d8:df:09:
09:34:dd:4d:75:b2:e3:ee:aa:f5:de:2c:4c:78:8d:
18:26:9d:5d:1a:c8:ea:3f:1d:6f:25:98:8d:64:a9:
c0:bf:5b:6c:f7:e6:b0:63:a8:be:f0:bd:1d:31:20:
ef:82:48:14:b1:04:cb:40:b2:b5:05:a4:2e:95:c6:
cf:be:77:ee:e5:9d:b3:65:8a:24:6c:03:2d:19:f8:
d8:b7:12:eb:ed:b9:56:a9:ad:9d:67:1b:aa:2e:c7:
7f:ac:8f:f0:9c:25:78:77:33:c5:4c:25:ad:34:b6:
a0:90:6d:fd:47:27:ac:d0:a8:b7:c9:af:a2:7f:bc:
fc:a5:25:48:37:4c:c5:3f:60:5e:00:a0:79:c7:6e:
b5:b9:38:b1:d9:7d:3c:e4:30:42:ff:ab:18:b7:1b:
53:00:59:1e:86:0c:59:a8:9e:c1:2e:33:7d:a7:8a:
f0:ea:a6:cb:15:7f:a8:23:1d:d2:1a:6d:6f:6a:7f:
44:20:d3:3a:e8:ea:09:b4:cd:03:bb:40:e6:8c:58:
89:b9:c5:09:6f:a3:08:cd:aa:20:33:50:4b:34:b6:
ff:ac:9e:2f:bd:73:d9:3a:d1:4c:99:be:b3:35:ad:
a2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EF:12:11:BB:08:AF:DE:B8:73:9D:F9:03:11:1A:A9:62:A0:54:D5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.86.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:6a:71:24:c2:c0:b3:4b:cd:1d:67:e0:05:e2:61:ef:4f:36:
0d:6b:8e:3d:9b:93:aa:7d:77:1f:95:32:62:21:cb:84:79:06:
aa:24:5d:82:09:5a:79:f2:78:ed:51:22:0a:ca:ac:94:e7:3a:
04:ae:62:04:d6:e3:d5:77:0f:7d:96:2e:4d:fe:47:11:96:08:
05:4f:44:5b:14:65:f3:ac:6b:5a:e2:d1:17:72:cc:27:b5:8e:
f1:25:f2:7f:4f:73:5e:d5:28:d5:fd:da:13:3e:ab:6c:cb:ea:
c8:e8:b9:4b:fb:29:3c:87:d8:ae:49:a3:82:ef:e8:48:31:2e:
88:4d:7c:78:cb:73:47:e9:e8:1b:4a:e8:89:a6:f7:da:b7:79:
a6:cb:17:7f:2b:88:71:6c:88:0b:26:ce:8e:f0:4f:2e:b0:46:
3f:87:c2:99:90:ee:18:2e:f0:6d:40:c8:0a:50:31:17:f6:c8:
3a:e6:c4:a5:7f:ed:c2:fe:9d:de:b8:50:25:e6:83:62:03:cd:
0d:15:bd:80:c4:e1:ce:fc:af:98:7e:42:09:3f:e9:25:d9:3c:
91:1f:cb:a5:86:49:8a:ac:fc:e8:08:5a:41:7b:19:f6:e9:fc:
d0:30:68:31:99:8d:07:3e:2d:b3:00:2d:0f:dd:1e:f6:76:cf:
bc:a9:67:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:04 2024 by rpki-client on console-fra.rpki-client.org