Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e37372e302e302f32312d3332203d3e203430303231.roa
File: 3231372e37372e302e302f32312d3332203d3e203430303231.roa (raw, json)
Hash identifier: agKGyJk9HHyTFIcj8V33BWClICUhS09ch8web8t/Ssg=
Subject key identifier: 55:36:A6:A2:D3:14:A6:9A:1A:B0:06:9F:CF:93:F8:C9:95:EC:50:C6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6C9BC21A541B4884430FD2D19C0EEAB83C0EDDAC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e37372e302e302f32312d3332203d3e203430303231.roa
Signing time: Sun 10 Nov 2024 20:57:12 +0000
ROA not before: Sun 10 Nov 2024 20:52:12 +0000
ROA not after: Sun 09 Nov 2025 20:57:12 +0000
asID: 40021
IP address blocks: 217.77.0.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:9b:c2:1a:54:1b:48:84:43:0f:d2:d1:9c:0e:ea:b8:3c:0e:dd:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 10 20:52:12 2024 GMT
Not After : Nov 9 20:57:12 2025 GMT
Subject: CN=5536A6A2D314A69A1AB0069FCF93F8C995EC50C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:64:37:f6:6d:13:96:cf:c5:6c:75:d0:45:26:
1a:8f:79:e9:a8:ab:66:a8:9d:ea:80:85:8c:8a:27:
af:80:4d:ff:00:36:fc:ba:8a:37:3e:a8:c9:98:ff:
95:ab:38:db:06:55:16:96:38:72:f5:53:07:8d:8c:
9e:dc:a8:9e:04:45:86:47:58:4c:ea:e7:a9:e6:22:
e5:f3:e2:5b:ea:4b:1d:81:32:51:ff:51:3b:92:34:
cc:2b:d1:5e:ee:f3:02:9d:60:d5:27:34:73:4e:64:
4e:9f:43:3a:d1:47:b3:fd:fc:fd:ce:5e:41:08:ee:
83:77:0a:b4:c2:a5:bc:26:cd:5d:c2:e6:7f:d0:8b:
76:5b:23:81:fb:73:5c:9d:5d:69:0e:49:d5:7c:bd:
b7:4b:83:6d:38:88:34:ac:12:ec:e1:9a:3e:f9:b6:
d2:db:5a:cd:a3:54:fb:ac:db:54:ff:6d:7b:f2:d1:
2c:58:69:6e:c4:54:6f:10:d6:09:71:0d:c5:14:4d:
c4:ca:c8:13:02:e4:4c:51:7b:0f:d3:7b:8a:45:ec:
d1:b5:5e:95:d2:97:2f:b3:48:70:75:26:5a:58:1d:
2e:61:21:5f:63:a6:c8:2f:62:fe:5c:5b:a2:c0:a9:
3a:f7:89:09:5d:a6:1a:b4:9b:69:d6:4b:fa:25:5d:
2f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:36:A6:A2:D3:14:A6:9A:1A:B0:06:9F:CF:93:F8:C9:95:EC:50:C6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e37372e302e302f32312d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.77.0.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:82:bc:a4:3a:95:6b:cf:c1:2c:9c:81:5d:85:9f:1b:83:cb:
54:e7:9f:ef:b0:bd:42:82:b9:f1:b4:af:1a:80:90:95:3e:ea:
5f:92:bf:81:5d:d2:c9:f3:06:47:16:e4:cd:c4:30:e5:9f:6e:
59:af:ae:df:c8:bb:f4:f8:f1:82:60:27:15:ad:85:60:94:23:
f2:f1:5a:49:88:05:91:75:ff:a5:22:8a:c5:4e:cf:9c:d1:3c:
30:64:f3:fc:37:d1:3e:eb:d7:d1:2b:2a:81:78:6e:0d:07:d8:
2f:b3:bf:fe:2b:9c:cf:1c:d2:de:b5:d9:8e:70:d9:35:83:8f:
6e:34:67:1a:2c:1a:34:22:9d:c4:f6:64:ca:1c:b5:d7:dc:d7:
42:7c:f8:0f:f6:ae:44:01:d4:31:50:19:fc:1e:23:51:0e:47:
84:f4:16:74:d0:83:2d:bb:63:df:68:4f:6b:07:bb:68:2a:3d:
44:e1:4a:5f:17:49:ff:a3:90:04:d9:74:54:6f:1a:1d:03:14:
52:36:a9:d4:14:e8:42:33:22:79:9b:71:31:8d:95:18:66:fe:
8e:33:29:d7:93:96:84:59:97:28:23:be:87:3c:29:1b:81:c5:
5c:28:8d:16:16:9e:0b:39:11:66:7c:a2:c3:87:38:09:27:06:
8d:20:c9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:29:14 2024 by rpki-client on console-ams.rpki-client.org