Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e31322e302f32342d3234203d3e203237343538.roa
File: 33312e3232302e31322e302f32342d3234203d3e203237343538.roa (raw, json)
Hash identifier: 5KxKFM0b69YBs05DO3edX4cufdSQC/0iwggx8Cp81js=
Subject key identifier: 88:BB:A7:58:8B:07:D9:3F:D9:E8:E8:34:95:23:00:CD:8C:E8:2A:FA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2D66F08A55E28BF0F7DB9336D1D92D22DB6A7C73
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e31322e302f32342d3234203d3e203237343538.roa
Signing time: Mon 26 Feb 2024 08:53:06 +0000
ROA not before: Mon 26 Feb 2024 08:48:06 +0000
ROA not after: Mon 24 Feb 2025 08:53:06 +0000
asID: 27458
IP address blocks: 31.220.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:66:f0:8a:55:e2:8b:f0:f7:db:93:36:d1:d9:2d:22:db:6a:7c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:06 2024 GMT
Not After : Feb 24 08:53:06 2025 GMT
Subject: CN=88BBA7588B07D93FD9E8E834952300CD8CE82AFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:77:d0:72:c9:ef:97:f7:f7:ac:f9:3e:89:b5:
64:0f:68:9b:18:93:32:2e:cd:82:b4:f1:5e:c9:8c:
a6:e0:1e:47:0c:21:71:c4:56:8b:ec:2d:ee:31:d0:
82:9c:73:aa:ad:9b:66:ba:1b:b3:64:6f:f0:ba:22:
c8:47:b4:55:8f:c4:95:ac:85:78:27:e9:a5:f6:01:
a8:fd:da:0c:83:f6:26:ca:62:f1:3c:9b:59:f9:6d:
fd:25:16:f5:d6:4c:34:bb:e7:cb:6b:de:ae:98:cc:
db:7c:56:f5:4b:76:b0:82:ee:ad:d2:22:e7:cb:10:
91:68:45:60:b8:51:70:39:6a:aa:1a:94:8f:6b:bc:
a1:57:f0:ab:52:a3:2e:56:44:d0:96:a4:30:78:e2:
79:d9:73:a6:46:2f:03:d0:ea:1d:16:09:b0:3d:30:
22:3e:df:b5:1d:c6:87:24:f0:ca:71:ec:fc:47:88:
e0:9f:66:a4:ed:0e:4a:22:d2:a3:28:39:02:9c:89:
0f:93:45:72:fb:d5:b4:9a:29:c7:cc:06:70:76:63:
c1:7c:8a:88:ea:ca:05:73:ac:89:46:4b:fb:9c:1f:
22:67:32:f8:12:c5:09:0b:87:46:a4:cc:71:b1:c7:
dd:6f:dd:e9:fc:c2:23:73:89:26:fc:9f:11:d3:e0:
77:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BB:A7:58:8B:07:D9:3F:D9:E8:E8:34:95:23:00:CD:8C:E8:2A:FA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e31322e302f32342d3234203d3e203237343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.12.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:87:d9:c1:ad:86:11:50:3c:a5:86:1f:23:70:5a:9f:2c:d5:
c7:ee:b9:e0:78:e2:b3:7a:f3:fa:c9:87:4b:ac:c6:a2:60:19:
ac:b3:2b:2c:a1:68:fc:ee:88:51:d9:da:51:7c:25:f1:45:8f:
99:09:79:d1:15:1e:1e:39:28:06:17:3e:76:ff:44:25:d8:3e:
e8:ba:2d:9f:95:b8:7b:5b:e2:7b:b4:a3:e9:e1:7d:74:2a:e5:
a1:3a:f8:4f:10:28:7b:7f:72:37:1c:f0:46:05:2f:93:be:7b:
b2:ce:e0:86:4b:40:ec:75:fc:c6:9e:bc:60:5e:a6:dd:74:52:
52:54:ab:ee:d1:d2:32:9f:bd:8e:8f:cd:3f:7b:c7:e6:0d:09:
c6:bf:50:f3:07:30:0a:2e:ee:37:ba:05:f0:3e:a4:ca:5a:07:
6f:aa:41:d3:18:f4:5b:5e:08:ee:0a:b4:0d:00:80:aa:17:b0:
45:1a:8e:ea:02:e6:c6:c2:27:e4:44:f4:92:96:ac:74:7c:48:
7d:41:54:03:f7:9e:99:89:9a:b1:2f:55:fd:2b:2c:63:f0:a4:
46:78:c5:80:ff:42:35:be:44:7f:4f:a9:39:a1:1e:3f:54:58:
41:35:82:74:c8:48:c8:bc:13:8f:12:27:50:dc:41:a5:55:bf:
54:fb:8f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 08:01:45 2024 by rpki-client on console-fra.rpki-client.org