Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3139322e302f32342d3234203d3e20323037313337.roa
File: 34352e31342e3139322e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: y5J+XLqLCRV5k7zYToP9M5ZMq3Upmyd4IOcuOM6olwU=
Subject key identifier: 43:FE:C2:12:CE:E2:50:51:A8:0D:51:A7:4C:DB:FD:0D:AA:C8:61:5B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 60D7C826CF37A865BCD826C5026EB181CBB2B299
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3139322e302f32342d3234203d3e20323037313337.roa
Signing time: Wed 28 Aug 2024 14:04:44 +0000
ROA not before: Wed 28 Aug 2024 13:59:44 +0000
ROA not after: Wed 27 Aug 2025 14:04:44 +0000
asID: 207137
IP address blocks: 45.14.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:d7:c8:26:cf:37:a8:65:bc:d8:26:c5:02:6e:b1:81:cb:b2:b2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 28 13:59:44 2024 GMT
Not After : Aug 27 14:04:44 2025 GMT
Subject: CN=43FEC212CEE25051A80D51A74CDBFD0DAAC8615B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6c:a2:69:00:38:03:d4:55:d3:09:01:86:fe:
2d:78:10:16:62:e2:89:32:f5:eb:35:72:d7:b5:7b:
39:d2:f3:aa:e7:7d:e0:8a:91:bd:fc:ae:c9:ea:04:
30:7c:7e:31:94:9e:8c:b0:ae:97:5c:8d:93:dc:6f:
65:2d:c1:73:8d:2d:f0:10:a1:70:d6:0d:13:9a:36:
86:01:54:fd:e5:f3:bd:ee:26:37:5d:cb:48:c3:ed:
15:e3:2a:ea:c6:e7:b4:0e:5e:f6:c5:19:f2:f9:d3:
1f:5d:94:85:dd:73:3e:94:3e:2c:e0:f3:c1:c4:21:
aa:92:6d:f4:32:57:9a:32:ed:10:e0:f3:ff:e8:32:
97:0f:fe:11:31:c0:77:c3:66:d0:1c:31:fb:c1:57:
66:b2:da:e0:1b:7e:4b:ae:f3:8d:1b:2a:91:e3:29:
a4:bf:b1:c3:c1:8e:8b:66:0c:85:71:16:b3:69:99:
41:a7:cd:12:a3:eb:75:9a:b1:63:7d:3a:3c:b0:9d:
51:b5:3a:1f:c2:5e:24:42:92:d7:4c:53:2e:a1:35:
20:4e:2d:1f:0e:42:3e:d1:cf:c8:38:26:67:d3:9c:
97:a0:f9:d3:43:24:2a:c4:d8:3e:57:19:69:72:bc:
65:76:73:4e:98:d7:7e:2b:ae:3f:ca:b2:a2:52:28:
96:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FE:C2:12:CE:E2:50:51:A8:0D:51:A7:4C:DB:FD:0D:AA:C8:61:5B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3139322e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.192.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:8f:16:40:8e:9d:49:26:c1:07:2e:d8:a8:18:07:a9:6a:96:
84:01:b8:6c:5f:cc:96:3f:df:84:bc:55:3f:3c:ce:b9:fc:a9:
0f:68:96:fb:37:3f:59:d6:c7:8b:fe:4d:49:1e:16:22:19:72:
23:52:f2:1d:27:3c:c5:4a:ad:28:2c:d2:25:f4:af:97:23:aa:
b9:34:f6:ee:b1:1c:a3:c0:cb:3f:1a:93:06:2f:60:b9:7e:84:
c0:db:5f:02:66:56:19:b6:54:94:49:d6:07:00:33:47:33:2d:
6a:06:03:a4:99:5b:a6:d6:03:33:9d:3d:f8:1b:e4:fc:e3:aa:
36:d0:4e:d8:db:25:36:e1:04:ac:f1:ee:cb:b1:20:11:b8:8f:
86:f5:47:3d:87:f3:73:e1:d3:06:72:ee:9c:18:3d:48:f0:f3:
95:d7:11:8b:b4:64:27:b6:4f:31:11:1b:7c:4a:a2:8b:52:ab:
9a:29:0c:0a:2c:6c:2c:da:ff:58:97:a7:b5:d2:9b:d3:c5:5e:
2a:85:28:db:83:37:7c:6b:67:64:13:bd:89:15:f7:22:c1:04:
e9:4a:0b:78:db:85:26:1d:a1:4e:95:69:85:28:a6:3c:8e:2e:
c1:47:ef:24:85:fd:d3:cf:5c:76:1e:aa:00:ad:8a:43:3d:73:
61:16:11:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:29:14 2024 by rpki-client on console-ams.rpki-client.org