Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e32392e302f32342d3234203d3e20313336373837.roa
File: 33312e3232302e32392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: bj+0Wis9KR2ulHlbfg01xqeVJxVSIUjMYst3FfGdEGQ=
Subject key identifier: E7:5C:49:BE:54:77:6F:C6:74:83:60:32:FA:53:A5:FA:1B:F7:66:DD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 15721DC6B2312E5FDDC4DF92BDD5314670AF6F8A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e32392e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:13 +0000
ROA not before: Mon 26 Feb 2024 08:48:13 +0000
ROA not after: Mon 24 Feb 2025 08:53:13 +0000
asID: 136787
IP address blocks: 31.220.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:72:1d:c6:b2:31:2e:5f:dd:c4:df:92:bd:d5:31:46:70:af:6f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:13 2024 GMT
Not After : Feb 24 08:53:13 2025 GMT
Subject: CN=E75C49BE54776FC674836032FA53A5FA1BF766DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ca:4a:3b:76:7b:61:da:c4:00:7d:f4:1d:d1:
be:70:7f:02:8e:78:6b:35:80:dd:a7:f8:5d:f3:2a:
a4:13:0e:cf:bc:88:4b:b7:69:ff:cc:e9:fb:b4:81:
75:7d:cd:b2:40:d7:0c:3b:ee:42:b3:35:d3:f5:6e:
10:1d:b9:29:47:06:26:4f:b7:b3:cd:a5:7e:68:86:
8d:ef:d3:dc:a0:aa:d2:1f:9f:75:ad:34:30:fe:dc:
cd:52:ac:eb:f4:02:40:5a:e2:a5:28:d2:1d:26:b7:
d2:57:93:a0:23:22:d5:2e:67:50:b4:ee:8e:d8:1b:
ed:77:84:c5:ea:bb:7b:9d:6b:38:f5:f3:58:7d:01:
62:17:b2:d9:5e:81:f3:42:0d:7f:89:9d:bd:d4:65:
c6:06:1f:55:42:b3:a5:ef:a1:fc:d8:eb:68:e3:1c:
ab:c8:5c:ca:38:c4:de:37:11:75:35:86:ac:5c:79:
6d:ec:cd:96:fe:45:f0:cc:2e:13:f5:d8:93:2e:19:
4b:31:8c:a4:92:5e:c3:ba:de:ec:2c:07:40:9c:69:
ce:b9:65:6e:ae:3e:38:2d:09:6f:49:78:bf:b4:aa:
13:e0:d9:02:cd:08:27:57:fa:cf:72:6e:86:54:01:
3b:6a:fc:0f:63:2b:e6:93:85:e3:eb:9d:66:69:8b:
a5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5C:49:BE:54:77:6F:C6:74:83:60:32:FA:53:A5:FA:1B:F7:66:DD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e32392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.29.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:9e:d0:20:d1:1d:68:12:a4:96:e2:eb:f2:e2:71:29:b0:0b:
39:51:a0:30:0e:1e:9e:48:cb:e0:ae:ea:50:e1:d6:d9:12:92:
1c:93:35:d3:43:9d:d9:57:13:bf:f2:b1:c6:b6:e5:bf:04:09:
50:fb:89:64:ed:1e:a8:06:b6:09:d4:4a:cb:06:d9:e7:a2:57:
ce:62:0a:11:b6:83:c6:e3:59:67:94:53:c1:92:0f:cf:67:67:
e7:85:22:9d:9b:4f:3d:b6:f0:87:e5:04:22:a0:64:4c:e4:f8:
39:7a:3e:15:0b:be:e7:1a:d3:99:0b:3b:58:54:2c:29:ee:d1:
79:7f:64:e6:58:a7:a3:26:ca:eb:5f:53:47:ec:a2:65:34:c5:
32:a0:7f:f4:1f:9d:de:d4:9e:45:a4:1e:ce:e8:92:f2:e8:c9:
14:f7:89:d6:84:06:2b:d8:24:38:62:a9:7f:55:32:22:f4:a4:
46:39:56:94:18:46:a1:e6:b9:56:00:84:cb:a3:96:2b:d6:3c:
e2:67:b6:d6:d4:d5:95:cf:f4:71:83:76:53:fc:8d:88:2d:d5:
88:2c:80:ca:b5:e9:25:d4:50:f1:fb:f2:12:3a:0d:c7:cd:ad:
bb:4f:85:65:fc:db:f1:00:51:12:8d:34:01:8b:b5:58:74:0a:
a0:71:89:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:32:59 2024 by rpki-client on console-ams.rpki-client.org