Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133362e31362e302f32332d3234203d3e203631333137.roa
File: 34352e3133362e31362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier: z2ENU/X+X03VsJBCz5SAI2trLSzXtGjwzP5wbAcRc1k=
Subject key identifier: F8:B5:AD:3B:59:E0:0F:10:4D:1F:D8:92:BD:3E:32:22:9D:A1:66:3E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3D8EA595B5AF59F49AB5FB9F2ECD0AB49493E51E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133362e31362e302f32332d3234203d3e203631333137.roa
Signing time: Mon 26 Feb 2024 08:53:24 +0000
ROA not before: Mon 26 Feb 2024 08:48:24 +0000
ROA not after: Mon 24 Feb 2025 08:53:24 +0000
asID: 61317
IP address blocks: 45.136.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:8e:a5:95:b5:af:59:f4:9a:b5:fb:9f:2e:cd:0a:b4:94:93:e5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:24 2024 GMT
Not After : Feb 24 08:53:24 2025 GMT
Subject: CN=F8B5AD3B59E00F104D1FD892BD3E32229DA1663E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:ae:8b:17:db:6a:c8:a9:1d:f6:09:36:d2:
d3:1a:c2:31:1e:82:d3:2c:ab:5a:3c:03:fe:71:c6:
ae:b1:a4:14:1e:6d:bf:0f:64:e8:89:0e:3a:33:16:
5a:32:a5:8e:98:5e:54:8f:47:de:0b:b6:94:dc:32:
77:bf:38:e4:9d:5b:9d:8f:7d:46:d1:50:69:ee:e3:
b5:a0:4c:5f:4e:26:e8:25:8a:b6:93:8a:5c:0e:a7:
02:41:93:1d:97:72:48:a3:6d:35:00:d7:7b:aa:9c:
8e:58:23:a8:0f:a7:a7:2b:59:9c:92:95:0e:cc:72:
a4:eb:b6:14:f7:69:38:5f:08:22:52:c9:89:3b:42:
57:98:11:27:2e:e9:3f:06:d4:d0:7f:49:4b:3a:af:
d1:0d:00:ca:63:ab:53:db:3b:2c:06:7e:19:54:9a:
d5:a2:25:72:29:fc:37:53:cf:f5:ea:86:68:ed:ea:
ab:5a:7a:41:45:fc:da:c2:81:bf:d9:d0:c3:12:c5:
d8:f4:30:54:85:de:e6:3e:76:24:eb:c5:57:d5:97:
1c:3c:82:0a:94:1e:ef:05:69:ad:66:aa:87:08:6f:
7d:f4:01:58:44:54:4e:c7:c4:69:bd:a8:01:8d:3a:
f6:3b:98:4b:8f:b4:37:c8:f4:c4:4a:45:a4:d8:b8:
96:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B5:AD:3B:59:E0:0F:10:4D:1F:D8:92:BD:3E:32:22:9D:A1:66:3E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133362e31362e302f32332d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.16.0/23
Signature Algorithm: sha256WithRSAEncryption
64:31:5a:b6:27:3d:09:df:64:aa:d8:6f:dd:c7:3d:a9:c2:0e:
1b:e2:7f:c8:66:72:cf:03:d8:98:d2:b1:db:25:02:ba:82:95:
43:3f:9f:46:30:70:d0:b4:74:96:78:30:62:52:4a:62:b6:0f:
af:3a:05:fc:70:fd:e1:d4:8c:d4:18:c3:88:59:d1:4f:51:72:
66:a1:46:53:9b:ec:3c:81:72:1b:77:a4:e7:3e:0f:c2:fd:6b:
a9:66:25:45:55:88:cd:b2:9c:ba:85:34:76:af:76:b6:43:db:
2b:2b:6a:90:32:df:bb:f5:28:87:c0:ed:8f:bd:1a:d3:44:cf:
8e:ba:05:ea:16:1e:0b:da:a1:55:f9:14:f8:0e:b1:13:b9:f3:
22:1a:de:42:e4:9f:bb:18:87:ab:02:0c:1b:ca:25:4a:fd:92:
cd:d4:15:c0:a9:e1:54:df:df:ff:8b:40:15:3d:43:89:0c:e7:
bc:30:6c:8f:5b:1d:9a:cf:f1:c7:ed:f9:57:81:e2:36:e3:0a:
3d:36:9f:22:a2:dd:7a:d5:3f:1f:1f:0c:54:db:a0:89:3d:6a:
e0:87:83:c4:56:d0:19:49:f0:f9:05:10:51:c7:dc:1d:4c:40:
b2:ed:1b:ce:52:81:5d:04:21:30:dc:90:7c:55:4f:b4:0b:24:
87:52:18:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 12:40:37 2024 by rpki-client on console-ams.rpki-client.org