Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3138382e302f32342d3234203d3e20313336373837.roa
File: 34352e3133342e3138382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: T+zQa4sCD52/T5KheiwsDwiUugtjz768UGDkTg/vZZ4=
Subject key identifier: 90:1F:B0:C4:21:3D:D8:29:4F:4C:BD:AC:63:99:2F:4A:9E:6D:CC:60
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 02C2CA553D3C9DD9998AA61DBB9DA268411AD099
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3138382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 26 Jan 2024 19:02:06 +0000
ROA not before: Fri 26 Jan 2024 18:57:06 +0000
ROA not after: Fri 24 Jan 2025 19:02:06 +0000
asID: 136787
IP address blocks: 45.134.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:c2:ca:55:3d:3c:9d:d9:99:8a:a6:1d:bb:9d:a2:68:41:1a:d0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 26 18:57:06 2024 GMT
Not After : Jan 24 19:02:06 2025 GMT
Subject: CN=901FB0C4213DD8294F4CBDAC63992F4A9E6DCC60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:f6:13:f3:00:dc:28:79:8b:ed:87:e7:a8:
d3:4a:22:da:a0:07:e2:d5:91:21:31:55:f1:eb:64:
b7:fc:4c:cc:2d:dc:9f:fc:c9:86:3d:b9:86:96:7d:
2e:a4:bf:0c:61:35:45:c1:a3:5e:94:b7:f8:77:37:
c0:52:58:bf:6e:ed:ec:5c:79:95:09:ec:4a:07:e1:
98:7e:e4:86:35:8f:65:b0:27:98:e9:f9:00:75:8b:
74:1b:00:1f:f0:ff:6b:c1:35:03:ea:b4:1d:9a:fa:
46:5a:a8:68:06:a8:c3:d5:24:e1:1c:db:b4:29:3a:
8b:79:6f:aa:ed:d7:50:c1:cb:5f:d4:a6:2c:1c:d9:
1f:e2:70:cf:de:e5:83:64:ed:d9:3b:9e:ea:c0:69:
d7:da:08:e1:18:db:54:c4:47:56:46:ba:db:63:b2:
a0:a9:94:46:c0:e6:03:34:07:92:7e:c6:6c:81:4b:
61:5e:56:6c:d9:e4:90:d7:56:bc:f2:6b:55:8a:a6:
59:a9:4f:df:99:51:75:ef:0b:12:0c:25:72:e9:2b:
5a:4e:9d:53:b8:43:16:a3:3e:56:06:ec:ec:59:34:
43:5c:23:bb:79:a2:b5:a0:1f:32:9d:d4:ca:95:75:
85:46:fe:a6:00:23:47:b7:cb:e9:43:22:90:5d:51:
37:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1F:B0:C4:21:3D:D8:29:4F:4C:BD:AC:63:99:2F:4A:9E:6D:CC:60
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3138382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.188.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:5b:ce:c2:1c:d5:cc:df:0a:1d:b5:84:0c:42:8f:77:b3:bd:
26:76:ca:a9:16:15:2e:8b:4d:06:81:64:a9:12:7c:3a:c2:37:
cb:d1:9c:bc:b9:00:eb:5c:0e:12:ce:bb:05:0b:79:0d:b8:26:
1f:b8:ad:9f:c3:0f:ab:83:af:8c:17:b6:17:4e:b1:92:96:79:
d3:48:56:c8:32:33:e9:a8:c5:24:3b:a4:4e:67:32:cc:b1:26:
54:3a:bb:f7:9e:5a:e7:5e:ba:cf:c8:c3:8a:73:be:33:7f:b7:
38:c5:50:4b:6a:9d:26:4d:75:ad:07:6d:28:d0:b1:ce:ef:d5:
16:dd:d8:24:71:06:5e:d6:59:7f:14:32:8f:fe:63:e1:9d:0d:
74:ee:af:52:7d:af:74:77:15:15:fe:bd:e3:b7:b0:ab:1a:14:
81:9a:10:f5:6b:10:c9:dc:fc:06:75:97:91:6c:8b:88:c0:fd:
a9:d9:d4:38:be:ac:f2:77:8c:fd:39:9e:d4:c3:cd:f0:1f:97:
73:84:c8:5b:cd:75:a5:b6:95:36:e5:53:84:92:7c:72:ae:b0:
4d:d2:c2:7d:8a:97:95:cf:93:20:f6:61:3f:36:38:dc:90:9b:
31:3e:a9:54:6e:9e:b6:aa:cd:be:17:bd:69:12:06:97:f0:1b:
3d:0c:29:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:21:26 2024 by rpki-client on console-fra.rpki-client.org