Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e34372e36342e302f32312d3332203d3e203531313637.roa
File: 3231322e34372e36342e302f32312d3332203d3e203531313637.roa (raw, json)
Hash identifier: 2VWGOL2TNcOcLKe0gRxuaDrzyZ3apQ4zibuh+lHABCw=
Subject key identifier: 0F:89:D9:81:E9:11:B1:D4:50:DA:4F:F1:21:BF:B6:33:8D:48:A0:AA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 79D66693406D9794D804BA5F4CFB6A14BCBD18BC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e34372e36342e302f32312d3332203d3e203531313637.roa
Signing time: Tue 24 Sep 2024 08:45:57 +0000
ROA not before: Tue 24 Sep 2024 08:40:57 +0000
ROA not after: Tue 23 Sep 2025 08:45:57 +0000
asID: 51167
IP address blocks: 212.47.64.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:d6:66:93:40:6d:97:94:d8:04:ba:5f:4c:fb:6a:14:bc:bd:18:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 24 08:40:57 2024 GMT
Not After : Sep 23 08:45:57 2025 GMT
Subject: CN=0F89D981E911B1D450DA4FF121BFB6338D48A0AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:35:b0:f0:76:04:66:41:73:48:4e:45:cc:
94:43:f6:7e:de:5a:7f:4a:9a:7e:97:9a:00:a7:ed:
f9:10:d9:37:70:d0:69:7a:73:1b:65:9d:1d:9d:53:
43:22:c1:8c:c3:45:e9:9f:65:70:e3:56:eb:46:d9:
36:5c:8d:32:57:fe:a9:61:a6:04:e6:36:96:ec:76:
6b:5c:55:ae:58:5e:4f:cc:30:fb:ed:09:48:2d:85:
c9:a5:94:17:a2:26:76:55:99:ef:4a:70:be:b8:c9:
be:e5:40:20:02:28:84:c1:3f:0f:1c:c0:d1:62:19:
ea:62:e8:1b:e4:59:74:9a:7c:c6:cc:23:98:08:37:
c7:fd:b0:1b:5d:2b:93:33:c7:00:40:33:23:ab:e8:
e4:cc:be:65:c7:2b:ee:64:17:03:cd:a5:4b:9a:e0:
56:89:72:54:ec:77:4f:1c:7c:45:cb:cf:55:d2:2a:
72:af:96:b0:4a:46:67:b5:4c:0a:f9:a9:4c:65:7c:
5e:3e:c0:d2:15:1c:78:25:d4:67:d4:c6:7a:98:26:
dc:49:84:90:20:83:5b:6c:89:66:15:0c:1c:73:7f:
aa:c2:c2:6e:4c:d4:86:43:f7:23:e5:fb:8b:8d:81:
dc:7c:5b:b7:a7:e7:c1:d7:2b:43:78:1f:1c:c6:de:
5a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:89:D9:81:E9:11:B1:D4:50:DA:4F:F1:21:BF:B6:33:8D:48:A0:AA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e34372e36342e302f32312d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.47.64.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:99:70:ab:db:c5:26:28:ad:b8:c9:41:19:c0:ba:0e:0d:9a:
0e:6e:a3:06:e3:e1:e1:c8:7d:af:b1:b0:3e:a5:e4:f3:73:7d:
35:40:e2:40:fb:d6:f1:6d:b3:ff:74:f9:ad:36:b1:f6:e7:9f:
a9:ea:f6:f8:34:d0:cd:7f:03:4d:08:09:3a:6b:a4:a8:72:66:
6a:bb:08:d5:32:fc:40:bd:31:58:93:ec:c0:8d:d4:5b:b6:46:
88:64:61:3b:d6:0d:3a:aa:fb:7d:46:0e:4d:62:e2:db:a3:6c:
7d:b5:28:b7:bd:65:a4:3c:1b:d4:54:36:b8:d4:f2:ec:59:20:
60:50:b0:65:0d:8b:7c:96:97:88:ed:f2:68:a5:33:6c:b8:70:
0c:54:a0:05:51:2b:4c:eb:18:39:5f:92:1b:a9:2a:e0:00:79:
f3:2b:22:86:4c:eb:92:26:c2:88:c0:12:de:77:a9:4a:49:8d:
e8:ba:4e:a3:80:df:db:fb:7f:dd:e1:bc:d9:c9:26:a7:24:b2:
c8:42:17:06:17:8a:d0:ec:5b:57:52:12:eb:1b:e0:3d:de:21:
09:e4:de:55:26:10:1e:fa:f0:b2:d2:32:a1:29:eb:58:58:57:
8d:fd:9c:42:8b:c1:08:35:a1:ae:17:47:66:26:63:ae:f2:b9:
ed:21:59:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:04 2024 by rpki-client on console-fra.rpki-client.org