Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3134312e3134302e302f32322d3232203d3e20323031333431.roa
File: 34352e3134312e3134302e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier: 6kDhQ7nlS/JJHf+g0qB3ARxd7VnyOLKf4JpN94E173I=
Subject key identifier: 30:E4:0E:C7:7C:41:77:6E:BC:E2:91:FC:95:AE:76:54:E3:F4:97:62
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 43A8AACEB4BB56D749E62F52966E15FEB6A5D5E9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3134312e3134302e302f32322d3232203d3e20323031333431.roa
Signing time: Mon 26 Feb 2024 08:53:03 +0000
ROA not before: Mon 26 Feb 2024 08:48:03 +0000
ROA not after: Mon 24 Feb 2025 08:53:03 +0000
asID: 201341
IP address blocks: 45.141.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:a8:aa:ce:b4:bb:56:d7:49:e6:2f:52:96:6e:15:fe:b6:a5:d5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:03 2024 GMT
Not After : Feb 24 08:53:03 2025 GMT
Subject: CN=30E40EC77C41776EBCE291FC95AE7654E3F49762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0b:09:4d:8c:74:9b:10:61:0c:7e:48:13:8f:
6b:97:73:7d:15:09:15:37:16:5d:f1:ec:18:87:dc:
35:8b:af:e6:d5:60:fc:b0:77:ef:91:87:92:46:64:
57:7e:c3:5b:81:21:b7:25:17:88:54:b6:d6:3c:d9:
bb:5b:eb:5b:54:18:29:fc:ed:e2:0b:59:81:e2:d5:
49:a1:d8:a6:aa:b5:a6:f2:5e:e0:43:ac:cd:da:5a:
7a:03:e6:3e:9b:5e:3d:b4:ec:e0:87:b9:5f:0d:66:
bd:40:df:31:30:54:4e:38:c8:1f:29:d5:4b:5e:6b:
4c:59:fd:24:89:35:7c:d6:f4:d5:a6:67:dd:0b:50:
e0:10:83:d4:29:db:f2:6c:55:70:27:d5:01:57:08:
0f:0b:f3:6b:e9:fe:68:30:bb:74:17:86:5c:df:1e:
84:b2:f4:c4:45:5c:d1:c3:1b:49:95:74:10:c5:1a:
77:81:41:da:76:b9:91:c6:01:a8:14:3d:a2:89:3c:
47:5f:cf:db:42:58:c0:b2:a4:33:8c:71:3b:62:1c:
b3:04:fe:71:a4:65:8e:40:ab:c1:75:55:da:77:29:
34:f3:fd:80:01:be:06:5f:84:4c:f6:d5:6f:89:ee:
12:6d:53:62:66:c5:aa:79:f1:17:5d:35:d3:34:2c:
86:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E4:0E:C7:7C:41:77:6E:BC:E2:91:FC:95:AE:76:54:E3:F4:97:62
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3134312e3134302e302f32322d3232203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.140.0/22
Signature Algorithm: sha256WithRSAEncryption
55:45:94:20:f9:ce:2b:a1:6e:0e:62:aa:ab:09:6e:90:11:eb:
84:2d:db:56:e2:e1:5c:16:04:d9:3e:6b:a5:12:84:6f:9c:62:
31:86:19:b1:3a:29:65:70:c3:98:37:16:7f:87:22:fe:ca:74:
f7:1b:26:62:4e:bd:dc:89:37:55:e8:98:ab:5c:13:13:59:12:
48:c7:7a:3a:8d:dd:c9:3c:e2:ab:2c:bd:88:1a:ca:62:31:13:
66:93:88:1a:3a:52:f9:41:38:d4:be:a9:d4:fe:09:fe:61:61:
17:c7:9e:73:b2:c0:3d:2e:84:c3:ba:61:d9:99:1f:dc:df:58:
e6:b4:a8:4a:2a:4a:0e:25:a5:65:4a:92:65:68:4e:3c:f3:da:
fb:d5:c4:7b:ab:13:9a:48:45:84:1a:09:fb:2b:61:0f:7c:75:
bd:37:31:bf:18:e3:56:a0:f3:15:4b:2b:a2:ed:d7:22:24:93:
47:16:73:32:5c:63:26:41:ef:43:15:33:4f:d8:26:b7:47:36:
0d:0b:0f:8f:16:b1:b5:b5:04:a3:2c:3a:11:06:2d:7f:88:db:
ff:8b:8c:b5:7e:be:b0:d4:24:64:4b:52:7c:20:f8:07:36:f0:
88:1a:d0:67:8c:9f:1a:f5:87:a9:c0:72:97:eb:3e:51:35:99:
2e:b3:68:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 09:23:50 2024 by rpki-client on console-ams.rpki-client.org