Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e31352e3136382e302f32312d3234203d3e203437353833.roa
File: 3231372e31352e3136382e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: 295Tj9954ORe4tim7Sa4WaOBRsAOnQCf5faRhqNEC7Y=
Subject key identifier: 9E:33:53:4D:96:65:0A:B1:3F:89:02:AB:74:3B:78:1C:A9:D9:8D:F2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6BBE0026103EE4648D13AE3668915BE3D8EE8006
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e31352e3136382e302f32312d3234203d3e203437353833.roa
Signing time: Thu 13 Jun 2024 10:40:46 +0000
ROA not before: Thu 13 Jun 2024 10:35:46 +0000
ROA not after: Thu 12 Jun 2025 10:40:46 +0000
asID: 47583
IP address blocks: 217.15.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:be:00:26:10:3e:e4:64:8d:13:ae:36:68:91:5b:e3:d8:ee:80:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 13 10:35:46 2024 GMT
Not After : Jun 12 10:40:46 2025 GMT
Subject: CN=9E33534D96650AB13F8902AB743B781CA9D98DF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:58:40:8a:92:de:41:66:b2:d4:ad:8b:72:c4:
89:f8:70:d7:cb:f5:0f:fe:07:ea:3e:f9:b7:6b:69:
f8:83:5a:b8:7b:c5:e0:de:2e:bb:ba:30:55:59:6e:
33:dd:81:73:3d:e1:2d:99:8c:ae:2e:14:3e:8c:92:
60:76:69:1f:48:56:ae:68:a8:83:ed:e2:f8:45:26:
36:8a:c8:78:37:eb:57:11:3c:47:74:55:88:52:bf:
2d:0d:1b:8e:e2:fb:d4:01:eb:97:03:fd:6b:a9:3e:
c4:92:0d:1a:ed:fe:2c:cb:50:c2:33:39:a5:23:92:
d4:bd:c2:69:46:06:97:6c:09:c9:46:a4:18:55:93:
32:90:c0:7c:f7:3b:be:79:30:be:bf:93:ae:7f:34:
ef:58:14:14:c6:3b:b5:a6:d3:41:d5:12:5f:4d:a8:
00:e8:ee:f5:ab:c1:5e:a3:35:4b:b1:5d:87:71:a1:
38:37:03:f7:30:49:af:bc:b1:6b:57:6f:c4:f9:b2:
e3:f8:f9:48:e9:df:9f:0a:b3:a6:bf:6f:3d:18:92:
48:2e:dd:45:0b:5d:09:d0:25:6b:9f:ea:da:83:31:
fe:c1:84:88:82:bf:91:d6:47:ca:4c:e1:7e:6c:9b:
28:77:94:57:88:0b:b4:94:c6:2a:f0:62:15:a0:13:
3b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:33:53:4D:96:65:0A:B1:3F:89:02:AB:74:3B:78:1C:A9:D9:8D:F2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e31352e3136382e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.15.168.0/21
Signature Algorithm: sha256WithRSAEncryption
25:c6:49:0d:5b:3e:85:71:a2:d4:71:0c:15:b8:42:bd:2f:72:
8a:b8:85:9e:06:dd:50:81:26:65:b2:6f:db:91:5f:0f:b2:4b:
7a:2a:40:a2:99:f9:f4:c5:bb:7a:7a:4d:9f:ca:85:9b:be:fb:
02:1b:c3:b8:3b:15:ee:b7:a5:7a:4c:24:f2:6b:0c:d8:a3:3d:
49:d5:58:cc:e8:2f:f7:c3:7c:09:da:35:89:48:cb:db:df:91:
23:af:6d:76:7d:8a:a9:32:59:b7:da:fd:be:6f:4a:e7:a9:83:
6d:6b:4b:de:31:fe:b9:3c:f6:14:e6:dc:38:cc:ba:43:50:b6:
7a:d0:df:17:68:fd:dd:dc:d1:bb:d1:c7:5f:3b:49:e3:5d:b8:
bb:2d:63:a5:da:c2:32:42:dd:0e:34:3f:ce:2a:99:8b:d8:ec:
14:81:e0:c6:30:50:53:ae:df:6d:76:5a:0b:30:16:21:bd:1b:
0d:bb:4f:6d:b1:35:1b:59:88:fa:1b:00:d9:e0:2b:9c:6c:3d:
fc:cb:e6:f2:88:08:30:f0:67:ad:89:e3:2e:80:74:76:e8:67:
cf:3a:f5:48:6c:e3:1c:58:84:38:20:e0:71:56:cb:43:01:9f:
cd:71:6e:3b:4f:b6:f2:eb:74:05:a8:42:8c:0b:2d:d3:ec:d0:
9a:0b:2a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:26 2024 by rpki-client on console-ams.rpki-client.org