Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e392e302f32342d3234203d3e20313336373837.roa
File: 33312e3232302e392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Ka9V6nGMvNKEpS7NfUqLUpx24ELIxZWm0y/di4Rmlio=
Subject key identifier: 79:FB:42:DB:71:BF:32:B8:01:49:6E:D5:72:6D:9F:0F:11:CB:EB:0F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4B4444748BBCAFC644B83E71C4D9FCC46B346702
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e392e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 26 Nov 2023 19:47:22 +0000
ROA not before: Sun 26 Nov 2023 19:42:22 +0000
ROA not after: Sun 24 Nov 2024 19:47:22 +0000
asID: 136787
IP address blocks: 31.220.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:44:44:74:8b:bc:af:c6:44:b8:3e:71:c4:d9:fc:c4:6b:34:67:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 26 19:42:22 2023 GMT
Not After : Nov 24 19:47:22 2024 GMT
Subject: CN=79FB42DB71BF32B801496ED5726D9F0F11CBEB0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:54:d2:d6:b9:6c:3e:4f:d6:60:7c:50:9e:
c0:a9:8f:bc:b8:9e:56:e0:cf:e0:57:9f:1a:ea:a0:
0c:a7:a1:87:21:2f:96:76:38:17:da:f5:12:f7:7b:
3c:20:ad:d1:a8:72:67:42:e7:d5:99:a2:a9:f2:2d:
a6:06:b9:a2:4d:51:be:05:02:51:82:95:e7:4d:53:
6e:eb:62:0b:a0:b3:b4:d1:a3:3b:17:ad:1e:e1:47:
b3:3b:7f:ff:f8:c0:39:72:e5:21:4b:b0:3d:f9:0c:
f2:4d:0a:4d:94:d9:2c:b3:64:5a:c9:98:c1:e9:03:
9e:ee:ab:6b:1a:80:55:8c:39:af:ef:1b:54:6c:23:
de:26:bc:b8:fb:0f:fa:62:bf:20:91:1e:a9:67:eb:
d2:1f:e5:a4:7f:1c:bc:c7:19:06:e0:ff:19:7c:a3:
70:b6:24:76:72:71:4d:b3:51:31:e0:d3:b0:4c:6c:
b7:73:07:bf:38:8d:3e:32:54:56:6b:46:39:a4:21:
fd:a6:17:9f:a9:38:65:42:b7:52:fc:04:05:0c:96:
35:ac:97:90:bb:3c:f9:1e:71:c9:fe:8c:c7:c8:bf:
15:fe:ef:69:b2:a5:c3:de:81:39:fc:11:9f:b9:ca:
75:c7:ba:47:c1:16:06:62:2b:ae:e2:68:af:a4:bf:
6b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FB:42:DB:71:BF:32:B8:01:49:6E:D5:72:6D:9F:0F:11:CB:EB:0F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.9.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:5b:c1:e3:24:23:01:63:68:3a:59:ff:26:c5:af:bb:f5:7d:
08:6f:7d:3e:ee:09:0e:b1:48:4e:21:16:2c:2c:7c:b2:7f:7f:
28:20:7b:09:c1:09:46:00:9a:d7:b2:b8:d8:4d:ff:f6:4f:28:
f5:17:26:58:3c:b8:21:6b:41:5e:cf:aa:af:be:06:88:de:f6:
f5:7f:6c:3a:28:6f:b2:64:0a:1e:13:e6:1d:2c:6a:d6:33:44:
df:c3:9f:72:45:ba:54:87:53:c6:b9:04:22:89:ce:44:05:67:
00:34:91:d8:bb:9d:b4:c2:67:4f:1f:81:0f:d8:26:75:c0:8c:
1e:6a:bc:49:86:b7:96:2f:5a:74:a1:f7:a9:c4:2d:28:0e:c9:
d8:39:e8:6f:c2:3c:7f:4b:ed:b6:ea:96:15:83:96:94:48:4e:
d0:fa:f6:d5:66:f8:78:14:e4:c5:af:f5:38:5a:e1:fd:24:f8:
36:70:a2:17:d7:a3:24:4f:f9:38:b8:50:92:62:22:71:ed:24:
3a:c5:86:14:38:a2:e2:5d:a3:9d:1c:e6:b1:c4:e6:00:cc:01:
4e:1e:73:e2:55:bc:34:d0:dc:6b:af:aa:01:a5:3c:bf:37:9d:
4b:5f:3e:55:d1:0c:b9:31:db:d4:09:da:20:64:3c:05:a9:68:
6b:fd:a8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:49:15 2024 by rpki-client on console-ams.rpki-client.org