Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37372e302f32342d3234203d3e20313336373837.roa
File: 34352e3133372e37372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: g+odKk3siwIMke5Qew7XBm6aRO2NqnwoaKdh3CnVaJ4=
Subject key identifier: 7F:68:9D:7A:61:F8:D9:92:2C:D6:B7:A0:A9:14:FB:68:3C:58:B9:AB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5251B9DA401E1031879164C93ED9026E2EC252D1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 26 Jan 2024 19:02:02 +0000
ROA not before: Fri 26 Jan 2024 18:57:02 +0000
ROA not after: Fri 24 Jan 2025 19:02:02 +0000
asID: 136787
IP address blocks: 45.137.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:51:b9:da:40:1e:10:31:87:91:64:c9:3e:d9:02:6e:2e:c2:52:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 26 18:57:02 2024 GMT
Not After : Jan 24 19:02:02 2025 GMT
Subject: CN=7F689D7A61F8D9922CD6B7A0A914FB683C58B9AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e6:6b:48:25:9b:9b:73:f0:b4:b9:46:f3:f5:
5e:d8:2b:ab:65:bf:87:dd:94:33:dd:6c:72:cd:5c:
76:1b:98:b3:38:bb:04:e5:d5:5e:92:c8:81:d1:97:
57:55:9d:f7:ae:80:ea:59:aa:e2:60:43:21:fb:e5:
fa:c2:ed:f0:27:df:8a:67:2a:02:ba:9a:9c:21:2c:
1e:3b:34:ab:23:80:de:87:a0:4a:2c:32:b0:18:4c:
cb:c8:9b:52:20:fc:25:ee:82:99:6e:34:66:6e:50:
ed:70:c2:0f:84:3f:50:c5:b3:30:c1:b0:de:f5:bc:
b0:bd:82:87:31:a3:22:92:50:46:bc:23:38:80:ba:
d7:eb:b3:d5:f1:89:4d:d4:8b:2c:95:c0:d7:e5:fa:
1b:24:85:37:03:76:12:f1:9d:d0:f4:37:3c:ee:10:
c3:14:cb:fb:c5:6d:35:48:41:d0:ea:6f:af:91:80:
87:f0:00:2a:05:15:c0:00:dd:bf:f0:af:e8:94:25:
40:a4:34:aa:bc:02:a2:09:7a:72:0e:c2:69:d5:c0:
21:aa:9f:e2:aa:2f:5a:97:36:08:67:c8:e3:91:3d:
25:f4:da:d0:7c:fe:0e:b0:30:8e:1f:6e:a2:df:84:
63:23:ed:9b:25:af:35:f6:c7:e5:20:c1:28:f6:4c:
57:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:68:9D:7A:61:F8:D9:92:2C:D6:B7:A0:A9:14:FB:68:3C:58:B9:AB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.77.0/24
Signature Algorithm: sha256WithRSAEncryption
96:ec:aa:1b:e0:15:32:5f:bf:84:7c:53:41:b5:e3:d8:a0:95:
6c:75:75:7b:d4:9b:c6:72:be:85:1a:ba:0f:11:62:36:86:4e:
be:8f:ae:a2:a2:ca:a0:10:da:81:5f:9c:89:75:72:c2:ca:6b:
34:1b:42:36:68:cf:38:c9:9f:71:c6:a0:91:b3:df:13:19:65:
8a:90:d1:36:bc:22:0d:b1:e8:4a:d6:4e:4b:d6:e1:22:34:8a:
f6:0e:06:11:53:99:1f:83:ff:95:e2:8f:44:a0:78:7c:b4:c3:
1f:0c:6c:b4:9f:fc:f5:ae:57:8d:94:e4:f2:49:ff:af:f3:8f:
1a:88:b3:4b:27:29:05:6e:ec:84:cb:c0:b2:ec:c6:7c:a0:54:
1b:a7:7c:fe:26:a5:e3:19:77:8d:5d:55:1c:57:b3:66:05:cf:
b5:29:9c:4e:eb:14:d4:2a:c8:de:1e:7f:e7:fa:31:7f:20:9d:
52:9f:d3:01:0f:a6:1e:65:62:66:8e:f1:a4:5e:9c:ea:31:63:
98:bc:ea:e7:7b:67:df:71:6a:68:7c:16:ef:0e:4f:cb:3b:25:
39:bd:ea:35:4e:92:e1:08:57:b1:f9:ac:18:8a:2b:64:e7:b2:
a3:55:e1:7b:fa:fd:85:81:fa:b1:bf:d9:35:eb:13:2a:f7:32:
62:0d:17:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:21:26 2024 by rpki-client on console-fra.rpki-client.org