Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31312e38322e302f32342d3234203d3e20313336373837.roa
File: 34352e31312e38322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: eZ32cCDUR3HM5DvAMwGnJ9iLoWlbHivCDGYnRpbL/cY=
Subject key identifier: 92:0E:A8:96:6D:D0:FC:44:05:4C:6C:BC:A7:FD:22:32:14:1F:8E:80
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 533264F37E9F61D44E5102501CEFD068D7C557B1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31312e38322e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 28 Aug 2024 14:04:43 +0000
ROA not before: Wed 28 Aug 2024 13:59:43 +0000
ROA not after: Wed 27 Aug 2025 14:04:43 +0000
asID: 136787
IP address blocks: 45.11.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:32:64:f3:7e:9f:61:d4:4e:51:02:50:1c:ef:d0:68:d7:c5:57:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 28 13:59:43 2024 GMT
Not After : Aug 27 14:04:43 2025 GMT
Subject: CN=920EA8966DD0FC44054C6CBCA7FD2232141F8E80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7b:56:45:b0:9d:fb:bb:f4:23:fc:d8:04:f6:
85:9c:53:c6:b0:e0:c5:ed:95:9f:50:ff:be:49:3a:
4b:d5:63:92:11:4a:5b:66:01:c1:d4:16:f4:37:90:
d9:1a:22:dc:dd:ed:ea:d2:51:fa:a4:f9:a8:c5:69:
e4:29:2e:69:68:74:c5:7d:d8:da:d3:55:69:2a:d6:
cd:28:fa:96:db:a2:65:ca:38:f0:fb:bb:9c:96:37:
7c:37:12:23:b3:fa:54:21:1c:59:e5:87:ef:62:84:
a6:9d:f0:16:32:03:3a:f6:9a:d4:b9:bc:67:ac:20:
82:7c:ee:13:6a:f5:52:68:1b:db:b0:bb:e9:fb:e0:
69:80:51:90:fa:7c:ec:97:9a:6e:bb:fe:ea:54:a6:
d5:1b:39:10:74:54:7e:98:6e:2a:c7:31:30:ec:ae:
bd:23:85:14:0a:32:41:43:69:b5:bd:59:89:0c:eb:
75:f5:c7:71:2c:80:ce:54:e1:a4:2b:56:9c:ab:d6:
e9:9b:aa:aa:05:26:48:57:ec:e4:ec:20:d9:df:4f:
15:30:2b:14:a7:4d:0a:7f:fb:ee:39:db:7a:86:eb:
72:b0:b1:e0:98:93:37:63:4f:b5:6e:c6:1c:31:2c:
91:a5:f7:73:db:8a:1e:0c:fa:b3:97:16:83:1f:c2:
db:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0E:A8:96:6D:D0:FC:44:05:4C:6C:BC:A7:FD:22:32:14:1F:8E:80
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31312e38322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.82.0/24
Signature Algorithm: sha256WithRSAEncryption
55:01:94:7f:8b:5b:3d:92:b1:2e:e2:be:77:62:83:04:2e:3e:
7c:a8:79:21:c5:31:46:2c:16:63:13:37:7f:0b:11:fc:c9:97:
8c:0e:9f:1c:03:60:53:cd:17:9f:33:f7:fa:7e:85:10:50:1a:
53:4c:38:ba:f5:73:77:e2:8e:fa:81:1a:f3:00:99:ac:fd:08:
19:f6:f9:50:eb:17:a6:a9:11:4b:66:2c:69:dd:b4:34:b7:b9:
4c:5b:4a:45:ac:f0:42:40:e3:5a:0c:76:63:2b:42:33:5f:91:
e3:85:bf:d3:2d:03:a8:91:be:5e:7d:79:76:27:35:61:0a:65:
5f:b1:97:2b:7f:24:5f:4d:a4:f0:d2:d3:78:da:37:f2:d2:76:
cd:d2:44:fa:dd:1a:e4:c1:f6:23:0f:65:1a:d7:72:f6:54:16:
4b:fe:98:c2:b4:1a:d4:92:50:0a:2a:2a:ef:64:d9:d4:23:ea:
37:0b:d7:9d:85:77:0c:5e:27:d9:22:64:eb:66:94:0a:18:fe:
57:cb:11:b1:41:9d:5f:17:0a:17:aa:83:3c:1d:5c:7c:7b:03:
43:88:69:15:7f:3a:ef:52:cf:bd:3e:ef:6a:fe:0d:26:f1:93:
21:cc:a4:1e:f5:53:9d:47:cc:72:b0:57:f1:e1:cb:89:94:ba:
9c:66:4e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:48 2024 by rpki-client on console-ams.rpki-client.org