Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e31352e3136382e302f32312d3231203d3e203437353833.roa
File: 3231372e31352e3136382e302f32312d3231203d3e203437353833.roa (raw, json)
Hash identifier: kHVKqCbuw63FPjpYlVUbSYi7oCLZjI0hs3D/7dlXu1M=
Subject key identifier: C4:F9:43:41:7A:93:66:C1:B8:6B:E6:BA:CC:17:B8:5C:B9:08:F4:9E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2DD4B2859254A60F49D18B72A1D5C03332EE2C32
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e31352e3136382e302f32312d3231203d3e203437353833.roa
Signing time: Wed 31 Jan 2024 12:14:27 +0000
ROA not before: Wed 31 Jan 2024 12:09:27 +0000
ROA not after: Wed 29 Jan 2025 12:14:27 +0000
asID: 47583
IP address blocks: 217.15.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:d4:b2:85:92:54:a6:0f:49:d1:8b:72:a1:d5:c0:33:32:ee:2c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 31 12:09:27 2024 GMT
Not After : Jan 29 12:14:27 2025 GMT
Subject: CN=C4F943417A9366C1B86BE6BACC17B85CB908F49E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a1:6d:8d:d6:57:76:48:d3:10:32:ba:99:01:
83:19:82:9e:cd:26:3e:6a:6c:34:6d:9a:ed:3e:fc:
2f:86:65:ec:39:fe:32:4f:b2:1e:cc:04:68:f4:cb:
f8:3d:74:11:f7:1d:a7:24:a8:ce:bc:26:0e:bb:06:
4d:e4:d3:db:55:75:7a:54:63:17:10:a7:28:38:50:
64:ad:88:fb:3d:58:1b:be:7e:dc:b2:d2:12:27:1e:
90:b9:72:1b:5d:9a:ef:6a:44:9a:10:06:c5:e6:f7:
75:e4:17:cd:c9:92:09:53:93:a4:a7:35:71:34:ea:
6d:3d:71:d6:02:f7:8e:c2:fc:62:5c:ed:ff:c3:ef:
be:64:e6:89:d8:6b:8c:70:01:73:7b:6c:d0:b8:7a:
e2:dc:be:9e:4c:84:a6:72:04:86:21:67:df:3c:34:
68:5b:08:05:a6:33:df:5f:68:66:eb:71:a7:4e:83:
a7:d4:c5:8e:07:57:7d:3a:44:e0:a4:7b:b4:c0:83:
45:5c:fa:8d:64:98:79:eb:43:6f:59:8a:d4:9c:36:
1c:a7:0e:f0:a1:db:94:82:6a:0c:ee:c0:5e:2b:50:
02:72:09:51:fb:54:d0:c1:fa:a7:1d:66:2a:b3:01:
86:e3:a1:28:4f:e1:f1:be:0d:1d:60:5f:1b:8f:1d:
41:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F9:43:41:7A:93:66:C1:B8:6B:E6:BA:CC:17:B8:5C:B9:08:F4:9E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e31352e3136382e302f32312d3231203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.15.168.0/21
Signature Algorithm: sha256WithRSAEncryption
57:f8:29:54:1c:3c:0c:aa:b5:0a:bb:cb:fe:40:b9:ec:cd:f3:
14:a0:9b:0a:5a:aa:1c:d1:e7:53:23:93:67:9f:d1:f6:a6:b1:
3d:24:e7:17:71:f4:75:dc:ad:3c:09:96:80:9a:ae:6d:8a:17:
03:48:56:b7:9d:3b:10:91:14:00:de:de:77:19:07:bc:41:7f:
ca:eb:eb:84:a5:4c:27:ac:0f:d7:b4:a4:ed:57:fd:7b:91:2c:
63:19:6a:c1:19:22:f8:9e:ca:49:43:f8:45:82:c9:0e:30:8c:
73:cb:5e:1f:d4:19:05:9b:9b:33:6d:8e:3e:51:fa:36:45:43:
b0:21:dc:ad:68:66:17:62:f6:3d:70:60:d7:73:ef:0b:10:17:
25:79:99:2a:4d:e5:47:f7:ba:08:19:54:77:72:a2:fc:b9:95:
23:10:47:57:02:74:09:5c:dd:c2:be:2d:ca:44:56:95:1a:e0:
ad:6a:9c:99:8d:29:da:64:52:a8:c2:6a:5a:86:6c:e4:a3:5b:
12:bc:2c:58:c1:3d:63:1b:21:77:49:5b:74:93:ab:b5:e5:17:
36:31:be:50:e4:be:c4:d5:4c:18:8a:5a:4f:90:63:1e:fd:ba:
f3:3b:85:de:71:c5:57:bd:79:54:32:16:2c:0e:6f:39:ce:b5:
35:ce:72:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 23:31:24 2024 by rpki-client on console-ams.rpki-client.org