Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39342e302f32342d3234203d3e20313336373837.roa
File: 3231322e33322e39342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: MbwpaavIOquTr6rvXCmaHhAsvAg9DQjqR7SgOQg9muI=
Subject key identifier: CD:1F:09:DE:79:D6:6D:DB:4F:73:AB:E9:34:B7:6D:E7:9A:D5:E8:3F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4B2A0C2D2F35A5D43CBC4748744918B86D902DAA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39342e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 14 Nov 2024 15:37:06 +0000
ROA not before: Thu 14 Nov 2024 15:32:06 +0000
ROA not after: Thu 13 Nov 2025 15:37:06 +0000
asID: 136787
IP address blocks: 212.32.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:2a:0c:2d:2f:35:a5:d4:3c:bc:47:48:74:49:18:b8:6d:90:2d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 14 15:32:06 2024 GMT
Not After : Nov 13 15:37:06 2025 GMT
Subject: CN=CD1F09DE79D66DDB4F73ABE934B76DE79AD5E83F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:74:33:22:3b:e9:cf:98:9f:c4:1f:19:a0:ed:
a4:b1:2d:4f:23:5d:99:9d:5f:cf:e1:c0:74:1c:4d:
af:0d:e2:0b:6f:1b:f5:51:6a:fe:7c:1b:f4:1a:53:
48:b5:86:9e:e0:ce:7c:d9:77:a2:05:07:b2:95:39:
3b:bf:05:d6:ff:71:4e:5c:9e:98:4f:93:48:a0:fe:
e7:d6:32:8a:e9:b3:f7:b7:04:ec:27:99:cf:19:f7:
98:97:f9:04:cc:50:83:9a:24:7f:fb:21:74:22:11:
60:3c:83:cd:88:5a:5d:86:ed:6c:ae:27:41:79:a0:
12:fc:6a:dd:de:ec:27:44:d1:1a:92:ad:61:df:d6:
77:ed:e6:06:1e:b2:9c:63:34:e1:6c:a3:32:02:be:
68:dc:77:95:8b:55:dc:58:4f:43:38:01:26:3b:f0:
77:11:5d:82:c9:35:ea:dd:c0:15:66:2a:3a:ab:84:
54:73:57:79:11:8f:31:37:85:a6:55:f8:02:cc:fb:
02:bf:46:92:2f:13:b6:cc:67:37:f2:3f:51:e1:64:
7c:0f:40:48:3f:06:0e:11:4a:29:3e:7e:23:69:9f:
86:5c:c0:43:58:f5:ae:59:19:5a:ca:ad:f8:42:f9:
8b:7e:30:7b:b8:05:54:de:55:48:76:be:21:e6:49:
2d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1F:09:DE:79:D6:6D:DB:4F:73:AB:E9:34:B7:6D:E7:9A:D5:E8:3F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.94.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:97:db:e0:4d:00:95:80:d2:0d:93:1f:c5:3e:67:74:ef:14:
cc:4d:86:bb:a5:5e:dc:23:8d:38:2a:20:09:e6:b6:71:a1:a9:
22:d6:b9:09:15:cd:42:81:57:e3:d9:8e:4e:07:39:2e:50:62:
97:4e:f1:95:cd:1f:9b:87:3e:bd:59:b4:15:6d:9b:8a:6c:59:
e3:5b:3e:86:99:f7:48:d3:45:f3:63:30:a4:5e:60:52:d1:e0:
9c:62:94:96:8b:91:32:e3:da:63:76:58:41:2d:a7:b7:de:90:
09:09:38:ee:d9:bf:f8:9c:d9:93:b6:69:ea:ae:20:46:de:57:
b9:21:74:7d:fc:7f:8d:da:79:3a:09:79:ea:8d:44:ca:04:f7:
af:26:8f:eb:45:34:82:03:a0:64:7d:95:24:f7:2e:8e:b1:b8:
67:06:f7:25:81:02:28:8b:47:e4:1f:ca:14:0f:79:8a:54:c6:
fa:6a:3c:f3:23:ea:f3:f6:30:c9:ed:b0:5a:99:ca:fe:14:16:
f5:c9:62:4c:d3:8d:45:a9:df:85:3b:ae:dd:b2:ee:93:b2:86:
81:3a:ce:59:f3:23:01:ce:76:f2:d8:f9:27:ed:cd:86:c1:2d:
79:49:a0:f6:55:76:60:0f:70:4e:9b:92:d6:5c:18:a1:b1:44:
44:fc:9f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:29:14 2024 by rpki-client on console-ams.rpki-client.org