Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3139342e302f32342d3332203d3e203531313637.roa
File: 34352e31342e3139342e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: 0HpxWt/OiYBeJoEVR/lWCHI5vHh1CsqfAwEXcVW45jI=
Subject key identifier: F9:DE:9C:A3:76:62:4B:AA:79:C9:B3:E3:12:71:29:D3:F2:61:F2:31
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7810B72EC8E3755F3EC838D04F7FAA133A2B20D3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3139342e302f32342d3332203d3e203531313637.roa
Signing time: Wed 27 Sep 2023 13:40:10 +0000
ROA not before: Wed 27 Sep 2023 13:35:10 +0000
ROA not after: Wed 25 Sep 2024 13:40:10 +0000
asID: 51167
IP address blocks: 45.14.194.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:10:b7:2e:c8:e3:75:5f:3e:c8:38:d0:4f:7f:aa:13:3a:2b:20:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 27 13:35:10 2023 GMT
Not After : Sep 25 13:40:10 2024 GMT
Subject: CN=F9DE9CA376624BAA79C9B3E3127129D3F261F231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:a6:e2:e5:c6:04:10:82:f2:f8:05:5b:b7:
1a:27:34:40:63:ca:08:82:f5:32:b5:4b:c0:04:43:
18:1f:b7:95:0a:16:94:3f:6a:3c:95:98:c3:0f:4d:
45:0a:d7:c7:18:a5:4d:24:a6:00:a5:e2:b0:ff:b5:
46:d8:7f:a4:16:dd:0b:fa:43:8b:e7:3f:0d:81:0a:
f8:1a:fe:40:e6:72:1c:bc:37:71:33:b8:a7:04:24:
73:11:fe:18:07:3d:17:8e:89:7b:d4:6c:48:cf:c2:
c7:f2:e3:22:9b:6a:96:8f:eb:74:ec:6c:7f:0d:58:
34:ea:4b:03:2d:52:7c:ba:68:92:d5:7c:f4:22:1c:
15:59:e9:35:a8:25:6e:9b:7e:40:05:96:ae:7b:65:
ad:59:70:0f:9f:21:40:56:f3:ac:ad:e7:3a:00:ec:
ef:39:2c:e3:4a:86:71:49:fd:d9:2f:f7:72:5f:73:
39:f1:32:8f:25:b9:5e:af:de:2e:85:ae:b4:9d:5d:
e5:c6:71:73:d0:d9:39:03:66:c1:2d:ec:e6:3f:c7:
9d:85:e0:a6:8f:fa:1c:bb:a8:ce:4d:73:10:2e:f1:
45:68:8c:10:af:ea:c2:a0:70:7f:0e:b0:b7:07:6c:
b6:27:cd:83:e5:86:4a:14:f4:fa:96:f8:6b:c5:78:
e0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DE:9C:A3:76:62:4B:AA:79:C9:B3:E3:12:71:29:D3:F2:61:F2:31
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3139342e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.194.0/24
Signature Algorithm: sha256WithRSAEncryption
87:68:c7:62:82:08:ad:f4:08:89:d4:26:65:05:e0:35:c9:5b:
47:5a:6a:ca:39:03:21:2a:4c:87:3a:03:e2:b0:0b:a1:1f:c9:
7e:55:35:40:ce:f5:cd:79:32:c8:db:13:7a:39:65:50:d7:e3:
0f:2a:bd:79:a9:d2:e0:01:e9:c2:ac:f9:bf:22:e3:5e:73:cd:
e0:70:34:9c:42:5f:0a:d8:78:f0:0d:33:97:7d:a1:2b:80:13:
75:0e:c8:d1:7e:a1:d3:01:f4:b4:09:a1:01:4b:3c:11:17:39:
20:62:22:81:ac:c3:99:5d:ae:02:7c:2f:fa:b2:a2:ad:4e:53:
2f:d4:0b:f9:42:52:65:4e:53:20:66:4f:b9:4e:82:94:c3:77:
3d:01:26:9e:8f:2f:df:41:51:f6:25:8c:12:e3:96:68:5d:8e:
13:c6:8d:34:6c:2b:3e:d4:2e:09:31:91:41:d9:75:9e:de:f8:
1d:02:38:11:ee:73:d0:f1:02:2a:d8:bb:b5:e3:37:5f:53:7e:
16:37:39:84:9c:e1:8a:d5:17:d5:28:4a:4c:be:5e:40:34:87:
91:80:5b:cf:7e:ba:ff:42:7d:ba:44:9c:46:b6:52:e6:f3:4c:
e3:7f:ce:a6:6c:40:a2:ac:d0:9c:44:7a:dd:93:29:a8:de:c4:
a5:76:b2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:12:36 2024 by rpki-client on console-fra.rpki-client.org