Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3231322e302f32322d3232203d3e20323031333431.roa
File: 34352e31342e3231322e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier: 0IX+O7PUz25mZaaSa+kRn2VqvALDYloMOExW4VorAP4=
Subject key identifier: 61:0F:15:05:8F:1E:A0:16:FA:EE:24:A5:08:E0:7D:99:06:47:75:AC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 648786C49D60DE187E66A1BA1B5F7D94C32DC2A9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3231322e302f32322d3232203d3e20323031333431.roa
Signing time: Wed 01 May 2024 12:03:33 +0000
ROA not before: Wed 01 May 2024 11:58:33 +0000
ROA not after: Wed 30 Apr 2025 12:03:33 +0000
asID: 201341
IP address blocks: 45.14.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:87:86:c4:9d:60:de:18:7e:66:a1:ba:1b:5f:7d:94:c3:2d:c2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 1 11:58:33 2024 GMT
Not After : Apr 30 12:03:33 2025 GMT
Subject: CN=610F15058F1EA016FAEE24A508E07D99064775AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:ab:d5:b0:bc:73:71:91:08:bf:f7:0f:4d:
e1:15:43:b6:af:69:60:5b:c4:e0:c5:5c:5a:0b:d5:
3f:8f:c6:b3:ae:5a:b2:72:a1:50:e0:4e:1f:74:f6:
f2:78:6c:e9:fe:fd:90:51:a5:31:d4:b8:75:c5:2b:
00:e4:da:f3:cb:83:ec:45:67:a3:51:97:5a:9a:90:
1d:49:27:fc:8f:9b:65:56:fb:ac:2b:8d:c5:db:c7:
f9:93:2b:85:22:95:1d:18:10:19:62:a2:89:5a:d8:
ac:07:9a:b4:37:23:54:7b:b7:1b:07:9f:4b:a8:02:
c2:ed:fb:63:ff:db:30:98:a4:fe:a8:7b:1c:7e:45:
e1:68:bc:e5:50:99:be:98:5b:e2:28:a3:20:dd:22:
ed:b7:ff:66:12:85:63:cf:51:99:9d:42:ca:a9:57:
a9:2d:6a:19:fc:ae:35:88:e1:02:b0:b5:18:e9:52:
c8:f5:0a:74:68:45:99:62:b7:71:ec:58:8e:bd:75:
20:24:5f:68:9c:81:f4:f2:0c:20:ad:52:9f:63:dc:
31:b9:96:45:d5:ba:5f:7b:57:2b:42:6e:5b:87:2b:
e9:9e:e0:54:cb:fb:c6:d2:07:3a:b1:ea:22:3a:a9:
f6:0d:01:a1:e8:f4:9b:3f:79:df:d8:26:5d:33:3e:
f6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0F:15:05:8F:1E:A0:16:FA:EE:24:A5:08:E0:7D:99:06:47:75:AC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3231322e302f32322d3232203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.212.0/22
Signature Algorithm: sha256WithRSAEncryption
69:e2:16:cc:34:02:cf:6d:b9:6b:ac:24:17:00:ae:df:8d:ec:
9f:ea:d5:83:83:52:2b:12:a3:ce:c6:1e:60:53:33:fd:39:17:
12:e0:a9:bd:93:5e:17:82:e8:0e:de:25:55:d4:65:54:91:35:
53:39:7b:f7:a4:32:b9:9d:00:5b:06:9a:2b:10:ed:33:28:8e:
ee:39:c9:19:23:7d:b7:34:3d:bd:a9:71:4f:bb:8f:0c:42:d2:
5b:70:c6:78:0e:16:03:cf:35:9d:a0:68:32:4d:73:71:9b:6c:
8c:70:33:ff:33:47:da:c2:3d:51:84:18:0d:bb:77:a4:13:37:
0b:a7:ce:88:75:0b:77:97:56:86:d2:57:91:d6:06:87:f4:ba:
ca:8f:2b:3e:68:ae:dc:68:8f:00:97:2b:29:f9:09:12:61:ff:
b9:ab:30:7e:12:54:00:94:41:03:24:37:e7:73:5d:ac:81:77:
36:13:6c:3a:95:bd:b6:68:e6:57:74:ed:9b:16:81:22:5c:90:
b1:62:3e:e6:1b:82:9a:f5:18:74:e8:6e:5f:6a:ae:0d:ca:08:
94:9c:98:16:42:a5:8b:39:82:e4:65:e8:c3:9e:f5:3b:dc:2f:
fc:2b:25:fa:18:68:f6:e7:5c:fd:f4:15:f8:b2:7b:7a:21:b9:
64:ae:17:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 23:31:24 2024 by rpki-client on console-ams.rpki-client.org