Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e36392e302f32342d3234203d3e20313336373837.roa
File: 33312e3138372e36392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Xz+xFM6DEmdE12rw5cqRZDmYowR/Bgg4SgMkwjlKCN4=
Subject key identifier: B8:49:77:20:AF:9B:A5:C1:CB:19:33:77:7F:33:09:92:7F:2D:2E:50
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 28845691FB3B5D76FBCD4E824FC7DDE1F85C58A8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e36392e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:33 +0000
ROA not before: Mon 26 Feb 2024 08:48:33 +0000
ROA not after: Mon 24 Feb 2025 08:53:33 +0000
asID: 136787
IP address blocks: 31.187.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:84:56:91:fb:3b:5d:76:fb:cd:4e:82:4f:c7:dd:e1:f8:5c:58:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:33 2024 GMT
Not After : Feb 24 08:53:33 2025 GMT
Subject: CN=B8497720AF9BA5C1CB1933777F3309927F2D2E50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f3:06:8f:14:62:54:fd:02:c7:91:66:74:ac:
d1:4f:7d:2e:00:fb:64:c0:ec:f2:6f:37:8b:49:55:
0f:a3:db:82:f1:b5:23:39:0c:d9:50:57:da:d1:54:
87:bd:04:17:bc:72:51:13:f0:7c:4c:34:06:47:7a:
c4:9a:39:6a:76:76:a2:2f:49:6f:4a:14:12:5c:e3:
7d:23:88:e7:fe:79:c1:08:27:fa:ba:43:2c:a1:74:
68:b7:39:c4:78:1f:d6:4a:7d:71:96:ea:fb:9b:d2:
0a:b4:b0:95:78:1d:75:ef:c8:64:a7:c5:d2:73:3a:
89:92:f2:96:89:62:4f:ae:8c:c7:76:08:75:70:98:
ca:21:c2:57:29:62:57:df:eb:b4:f4:e3:83:5c:79:
45:09:04:30:60:c7:9c:88:28:05:2d:bb:ae:8f:08:
73:71:04:36:47:74:5b:d4:34:52:f2:56:70:9d:cb:
44:19:0d:76:68:cd:04:d0:60:1c:67:63:2d:b5:e1:
d8:89:97:d3:7d:95:7f:a4:5b:6d:6a:14:7a:78:df:
d2:e3:02:2d:23:73:29:56:d5:58:c3:72:a4:f0:8c:
42:ae:c0:3b:22:ad:a4:ac:e9:35:9d:4d:20:53:f5:
67:0a:5f:0b:9a:82:4b:c7:ed:b1:e5:49:6f:7b:29:
2f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:49:77:20:AF:9B:A5:C1:CB:19:33:77:7F:33:09:92:7F:2D:2E:50
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e36392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.69.0/24
Signature Algorithm: sha256WithRSAEncryption
28:53:d1:1a:3b:6f:42:cb:ed:dd:5c:2d:ef:48:5d:bf:ca:ef:
7b:a2:97:13:b2:4b:cb:d2:86:f0:ae:a2:b7:36:dd:89:75:e9:
75:50:b2:e2:24:9d:81:1d:c7:cd:e3:e3:09:f3:8a:36:14:ee:
eb:93:d4:42:55:88:7b:08:c9:89:53:e4:48:65:3a:d9:15:23:
d5:56:b7:c5:3b:87:87:ae:08:7e:03:0d:67:d8:ee:34:0d:cc:
b3:2f:12:04:1c:af:67:93:0c:65:74:46:42:3d:32:5d:77:ca:
b0:27:50:52:7d:c7:9d:ab:dc:58:09:68:c9:86:48:d5:22:f9:
c7:ec:c5:3a:e0:15:04:f2:2a:a3:d5:00:14:c1:1a:cf:95:d4:
f2:13:a2:a9:54:c6:5d:42:02:93:f0:31:76:2a:e8:23:e7:b4:
07:0e:bb:cf:32:2d:dc:20:94:4b:15:ee:14:61:3a:ec:0e:7b:
1c:c7:6e:c7:5d:0d:6a:ab:d6:5e:05:8d:94:de:1a:29:2c:8e:
53:88:16:86:bc:9f:42:50:79:27:d6:80:36:c4:93:63:a6:e2:
e1:05:a4:66:7e:ae:e7:ee:d6:59:21:2e:d4:f3:0a:5a:59:e0:
66:ed:74:80:19:18:43:b4:0d:57:0c:7e:5f:df:66:7c:d9:f0:
93:d2:0f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:29:14 2024 by rpki-client on console-ams.rpki-client.org