Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39302e3132322e302f32342d3234203d3e20313336373837.roa
File: 3231322e39302e3132322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: aC4VSX6Q7Gi1Ci0IXRHOH6Gxf2dFP0fdz9LPb16pczw=
Subject key identifier: 85:DD:C0:76:CC:1B:8E:49:75:60:BB:E7:AF:76:D1:A5:3D:AE:31:76
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 669282A364C75EB24BAADC1545378A837FFE4D16
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39302e3132322e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 14 Jan 2024 18:09:37 +0000
ROA not before: Sun 14 Jan 2024 18:04:37 +0000
ROA not after: Sun 12 Jan 2025 18:09:37 +0000
asID: 136787
IP address blocks: 212.90.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:92:82:a3:64:c7:5e:b2:4b:aa:dc:15:45:37:8a:83:7f:fe:4d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 14 18:04:37 2024 GMT
Not After : Jan 12 18:09:37 2025 GMT
Subject: CN=85DDC076CC1B8E497560BBE7AF76D1A53DAE3176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:56:ef:a3:3d:73:b5:85:b7:e6:0a:81:6b:bf:
1e:fb:58:30:da:13:ed:2d:c7:d4:ed:c7:0e:fa:ab:
74:96:91:c9:fa:92:e7:18:a7:78:7c:16:a0:5b:5e:
2b:46:ca:16:9f:8a:3e:ba:b7:7f:f8:9a:9f:b9:de:
50:65:3f:2c:65:2e:0e:20:91:b6:87:a4:28:b0:4e:
bb:9f:4b:fc:1a:cf:66:e2:25:df:2d:21:17:02:0c:
ba:e6:f4:87:d8:dc:61:32:87:c1:c8:03:74:5e:e8:
54:7b:da:5d:9b:13:51:c4:fb:86:7c:75:3f:4d:0d:
02:83:4d:2c:b5:00:4e:4b:76:12:c2:af:e5:21:4d:
5f:10:53:5a:a4:83:f4:ec:ff:cc:b0:43:79:81:17:
28:aa:f2:f6:5a:de:33:e9:bd:6a:19:4f:3a:69:45:
c0:a9:63:8c:63:50:05:01:df:88:ee:98:59:36:b8:
d1:e7:f8:7b:52:67:5d:a3:6e:b6:a4:a6:a6:7c:3b:
0d:19:12:eb:a5:e2:ec:92:a6:f9:eb:36:0f:3f:5e:
65:27:b6:1e:38:ec:af:38:e3:03:0f:8d:7d:c6:88:
d6:67:88:91:83:c0:6a:21:44:1a:81:9b:35:83:51:
9f:3f:f8:1c:43:63:a8:63:17:4a:87:a9:0f:1f:97:
d0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DD:C0:76:CC:1B:8E:49:75:60:BB:E7:AF:76:D1:A5:3D:AE:31:76
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39302e3132322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.90.122.0/24
Signature Algorithm: sha256WithRSAEncryption
59:09:c3:25:ab:21:03:66:cd:a4:7c:3b:dc:22:2c:93:27:68:
05:48:b1:4e:74:57:70:96:48:e7:81:8b:05:56:00:6a:4d:9f:
9f:51:00:26:4f:17:6f:3a:e8:fd:77:10:21:d0:a4:50:fe:f7:
e5:f7:91:c6:ec:1d:8a:7f:90:5f:32:0a:90:69:f4:64:a8:7c:
9a:c0:57:da:27:7e:a1:69:01:47:10:c9:0b:dc:69:ab:f8:cb:
6b:f8:0f:a9:bf:ec:55:d7:b8:7b:88:a3:d6:c0:1a:97:27:49:
1a:21:4c:c9:1c:5b:d7:ba:ce:d6:e9:6e:6f:d7:40:b2:1a:7a:
ac:67:88:b0:05:31:cb:88:a4:42:3c:74:80:d3:73:b5:74:80:
80:dd:4d:56:96:d4:c9:97:0f:0f:85:7e:e8:a3:50:34:43:9b:
eb:dd:f2:98:59:a0:47:87:3e:a3:b6:99:77:45:e8:9a:0a:5e:
32:32:e9:a2:cf:9e:f0:cf:2e:b7:40:ae:e2:d3:fc:a2:54:1e:
92:b3:cf:89:67:d0:37:23:7a:59:6f:31:21:bb:92:e2:e8:ca:
48:db:95:ea:30:62:1b:4f:cb:77:1d:b7:b2:0d:d7:81:d2:5c:
0a:04:e8:24:ae:10:2f:b7:34:00:44:1f:3d:d2:34:bb:da:f5:
ee:44:f1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:32:59 2024 by rpki-client on console-ams.rpki-client.org