Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34342e302f32332d3233203d3e203633343733.roa
File: 33312e3232302e34342e302f32332d3233203d3e203633343733.roa (raw, json)
Hash identifier: mdgtaYDy4SWwkp8Ixf5Q9kKDF7wDci5QZ9vlwYUx8CE=
Subject key identifier: AE:80:F2:93:BD:AA:6F:84:20:DA:D2:74:3C:0E:E6:3A:62:27:4A:F8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 74556D26132EF963D9470E455760A03FE6377FB5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34342e302f32332d3233203d3e203633343733.roa
Signing time: Mon 26 Feb 2024 08:53:17 +0000
ROA not before: Mon 26 Feb 2024 08:48:17 +0000
ROA not after: Mon 24 Feb 2025 08:53:17 +0000
asID: 63473
IP address blocks: 31.220.44.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:55:6d:26:13:2e:f9:63:d9:47:0e:45:57:60:a0:3f:e6:37:7f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:17 2024 GMT
Not After : Feb 24 08:53:17 2025 GMT
Subject: CN=AE80F293BDAA6F8420DAD2743C0EE63A62274AF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:8a:bc:98:17:64:a4:19:47:f2:75:fa:80:
e3:8b:37:18:16:24:b3:13:1c:d8:5c:5e:90:8c:cb:
ba:e0:4c:c5:7e:e7:6f:fd:5b:2f:3f:b9:9c:c8:4a:
26:56:ad:8b:a8:45:36:34:3c:9f:c6:e9:a6:5b:45:
61:3c:f8:10:27:69:be:53:c9:9e:c6:d0:26:fd:fc:
ba:a3:67:b6:c2:a1:70:c5:3b:d8:92:ed:85:df:94:
6b:1b:bf:6a:81:76:9f:cd:11:dc:9b:9f:c9:33:2b:
c5:0e:8e:7d:38:bb:70:59:e6:2d:c9:8e:07:8b:f7:
34:de:d9:bc:91:90:59:0c:a0:cc:95:69:4a:f1:3f:
ef:b9:60:ff:79:5e:34:5f:4c:fb:25:d8:ed:f5:02:
a2:99:52:6b:88:f4:68:bd:54:6b:ec:4f:e5:5f:e1:
04:25:27:70:1e:39:31:2a:9d:50:5d:4c:20:bc:53:
7e:ff:7d:c9:d8:4a:73:49:4d:93:8a:a6:88:28:e0:
16:00:d0:c1:8b:d9:06:01:c4:81:3f:48:27:4a:77:
13:65:86:df:21:7d:d1:62:05:6a:bc:ac:27:8b:cb:
ed:46:60:5c:44:4d:a7:0f:bf:b1:48:c9:c9:10:34:
ca:d5:de:1d:14:86:f0:7b:58:a6:1a:6e:a6:f9:6e:
27:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:80:F2:93:BD:AA:6F:84:20:DA:D2:74:3C:0E:E6:3A:62:27:4A:F8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34342e302f32332d3233203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.44.0/23
Signature Algorithm: sha256WithRSAEncryption
75:8c:b4:59:28:ab:fd:b6:85:08:3d:a2:7c:f6:f9:df:d8:97:
cd:4a:3f:68:d8:05:a3:70:d0:13:ab:f9:35:c3:30:49:54:94:
43:59:e2:67:54:21:48:c1:b3:e2:65:8f:0f:ab:8b:fd:8a:0f:
fc:ed:cf:a9:39:e2:35:0c:2c:2b:1a:51:45:36:6a:fc:7b:02:
8d:01:bf:d9:9f:e6:36:b7:e1:e9:e0:91:62:e4:c8:32:31:d4:
d0:4b:14:7f:31:b9:48:21:e9:25:95:13:a3:31:79:a2:03:4f:
97:e1:2b:9e:28:60:cd:28:65:0c:42:08:1e:c4:2c:f2:cd:66:
5b:d6:2a:b8:af:9e:d0:1f:c7:4e:ab:7d:46:e0:2f:a3:43:d5:
30:f8:25:67:1f:c5:38:db:a7:b1:ab:82:83:df:9f:2d:a5:ee:
b0:60:c5:d3:61:69:5c:dc:6e:b7:23:2e:c1:0a:7c:54:d9:1f:
d8:83:f4:d8:f8:ec:46:47:5b:bc:bb:40:8a:da:53:60:f6:7b:
18:c0:82:be:f4:48:47:41:50:55:31:05:8b:d7:9f:1a:88:c3:
8e:ad:31:b1:9a:01:21:05:e4:2e:75:a3:99:c9:ed:43:38:9b:
c2:0d:52:14:dc:2f:f3:20:21:3b:02:2a:86:1a:dd:ca:26:6a:
a1:83:21:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:12:36 2024 by rpki-client on console-fra.rpki-client.org