Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133302e3232342e302f32322d3234203d3e20323031333431.roa
File: 34352e3133302e3232342e302f32322d3234203d3e20323031333431.roa (raw, json)
Hash identifier: Ku1K3mk5Ks1T+yXL9KwzZgeSopzQrLsztLBU1J3Pe/c=
Subject key identifier: A0:5E:72:5E:F6:C1:FF:1B:C0:AC:75:FD:2C:C8:4C:18:E6:0A:C5:92
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1518E7F1E9287EF5E8CFF36623E41FF1A76E2F75
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133302e3232342e302f32322d3234203d3e20323031333431.roa
Signing time: Thu 01 Aug 2024 15:04:31 +0000
ROA not before: Thu 01 Aug 2024 14:59:31 +0000
ROA not after: Thu 31 Jul 2025 15:04:31 +0000
asID: 201341
IP address blocks: 45.130.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:18:e7:f1:e9:28:7e:f5:e8:cf:f3:66:23:e4:1f:f1:a7:6e:2f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 1 14:59:31 2024 GMT
Not After : Jul 31 15:04:31 2025 GMT
Subject: CN=A05E725EF6C1FF1BC0AC75FD2CC84C18E60AC592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e0:5e:51:41:a4:9f:6d:37:47:57:d3:88:0b:
97:c4:ba:a1:5a:53:61:83:06:f6:70:d6:d6:b3:5b:
c1:b5:34:a9:2c:48:1b:77:9f:55:b6:a4:f6:84:d1:
e3:21:ee:14:0b:a8:6f:e7:1e:ec:16:3e:ce:a5:18:
72:cc:39:1c:92:8f:0c:cb:55:6c:17:3c:1c:c4:31:
ac:27:58:90:81:5d:57:bc:b9:3f:28:2f:25:f7:5c:
40:7b:53:de:12:29:3e:4d:3c:14:2c:1f:ae:12:65:
e9:b2:b0:f9:fa:0d:2e:55:c5:b7:07:93:1b:cb:01:
21:9c:e0:aa:31:f1:b8:ba:e4:f1:01:07:2a:92:93:
79:71:bb:55:f3:53:cb:65:21:d4:f2:1a:5c:c3:ff:
c0:f0:eb:99:f1:32:34:77:1a:10:e9:b3:25:f0:20:
73:ac:d4:e7:70:df:32:93:63:a9:18:0a:14:66:65:
05:ff:c6:5b:37:11:f4:b3:7b:ff:cb:75:b7:1e:38:
47:48:0e:45:8e:41:fa:13:c9:67:6b:6b:9d:df:2f:
71:ab:e1:ac:b8:b9:76:9d:eb:b7:1c:77:7a:be:4f:
c3:52:49:30:d1:cd:29:cf:be:43:9e:f1:11:8c:21:
ea:d0:d2:21:7e:dc:f2:9b:1b:6f:c0:50:3d:e5:6e:
ea:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5E:72:5E:F6:C1:FF:1B:C0:AC:75:FD:2C:C8:4C:18:E6:0A:C5:92
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133302e3232342e302f32322d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.224.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:a4:3e:d9:27:85:b3:9e:c0:b4:a1:db:ee:fb:de:fa:bd:f0:
86:cd:9a:72:a1:14:30:cc:e4:b4:5e:a1:30:55:98:a1:80:8f:
56:7f:99:35:ae:13:01:c7:bc:ec:45:b0:f0:23:71:bd:34:42:
27:88:5f:cf:f8:a8:54:42:bd:6f:11:55:04:d8:06:51:3d:f2:
b4:36:13:66:10:d5:45:e6:49:9d:db:26:eb:da:dc:c5:ed:53:
7b:49:73:6c:b3:a6:a8:59:f9:74:a4:79:5a:40:8a:24:37:c7:
4d:bb:b1:78:a8:76:bf:6e:92:bb:59:2c:fb:d9:05:9a:73:1c:
17:dd:3c:05:75:0c:cc:e3:5d:8f:07:ff:52:25:64:eb:46:d6:
95:6b:3c:b1:52:ea:bc:41:0e:8d:ae:83:f5:54:3f:57:cf:16:
0f:0a:08:b9:ba:34:ed:df:a4:7c:4a:59:e8:11:77:c6:f9:4f:
40:a6:94:2c:12:8a:48:5f:c9:4d:04:f8:fe:29:e6:b5:87:29:
c3:5b:68:76:2a:46:fa:aa:36:a2:99:bf:5a:fc:3b:fc:8a:ee:
d4:49:f8:ef:b4:6a:c8:97:77:e3:09:e6:4d:be:17:4b:35:0d:
2a:d1:77:a0:09:a8:bf:ac:02:53:9f:95:1e:15:93:1f:4c:17:
56:ce:5c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:06:16 2024 by rpki-client on console-fra.rpki-client.org