Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e3138392e302f32342d3234203d3e203631333137.roa
File: 34352e3135322e3138392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: W2NvElT/2aL8SvGWsP3TvjM2vZqNyvIwEzmt7GoGz7k=
Subject key identifier: 98:A0:3C:4B:58:FC:C5:E2:DC:1D:20:6E:D9:E9:39:49:41:9B:04:55
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2F0158279D291D7B4F845EA58A94A37272B76CC8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e3138392e302f32342d3234203d3e203631333137.roa
Signing time: Mon 26 Feb 2024 08:53:08 +0000
ROA not before: Mon 26 Feb 2024 08:48:08 +0000
ROA not after: Mon 24 Feb 2025 08:53:08 +0000
asID: 61317
IP address blocks: 45.152.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:01:58:27:9d:29:1d:7b:4f:84:5e:a5:8a:94:a3:72:72:b7:6c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:08 2024 GMT
Not After : Feb 24 08:53:08 2025 GMT
Subject: CN=98A03C4B58FCC5E2DC1D206ED9E93949419B0455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:33:62:09:c0:2b:6a:20:03:ef:a7:32:9e:d4:
6c:66:16:ff:39:88:a8:9c:75:6c:ed:db:4e:e8:dc:
c6:e2:b0:66:7a:87:82:fb:10:fd:40:cd:0e:53:51:
5a:94:7e:42:60:7b:8a:88:71:18:f0:46:3e:a6:15:
1c:81:d4:3e:c2:16:9d:d4:1c:18:78:8d:eb:41:19:
38:bf:a5:c3:41:0e:08:42:cc:90:8f:01:4f:29:d5:
ab:65:64:62:98:09:ca:c1:ea:46:58:a1:67:f7:b4:
4b:de:c5:23:bd:5b:97:96:18:ba:49:4c:70:90:8f:
c3:37:45:49:36:3b:2f:46:33:ef:2a:73:d0:99:42:
ad:75:58:e6:79:7f:a8:e4:26:22:a9:14:8f:97:f3:
bf:df:23:dc:5d:6d:be:43:31:de:44:ba:79:83:45:
7c:1b:e9:ca:57:3e:e3:97:65:d0:8d:e7:8c:04:a0:
ed:e9:4b:e6:05:63:bb:4c:53:93:27:f4:92:c2:0d:
4f:4f:54:ed:cd:c3:52:e5:d5:c6:07:e0:c0:d4:91:
fc:31:0b:a9:77:4e:13:6a:e9:86:9a:51:8c:2c:e5:
22:4a:e5:16:0d:f9:96:f4:8e:9b:94:f6:f4:e0:4d:
72:ae:eb:b4:5d:3a:ee:fa:0a:26:ba:76:f8:4f:9b:
06:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A0:3C:4B:58:FC:C5:E2:DC:1D:20:6E:D9:E9:39:49:41:9B:04:55
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e3138392e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.189.0/24
Signature Algorithm: sha256WithRSAEncryption
92:21:25:68:54:83:4b:44:3a:fe:e9:8c:9d:ff:06:c0:66:57:
92:f2:3a:c7:2e:25:29:d5:70:0e:60:87:52:8d:a5:e8:e5:2e:
75:d5:66:15:9b:e4:e0:29:51:af:07:af:58:0f:6b:64:34:75:
ef:a0:fc:ef:63:ba:e4:44:b1:bd:5b:00:c4:1e:7a:d5:5e:7e:
96:a4:7a:b2:a5:64:a8:f5:c3:0c:27:e5:ea:d5:1a:09:17:a8:
c3:e9:b9:4d:75:e5:f4:bc:16:c9:04:13:8f:7f:8a:24:58:ac:
f8:ae:9b:03:51:12:8b:74:24:23:dc:da:8d:a3:f2:d8:3c:ee:
5c:a3:53:e6:14:33:71:ec:52:d0:82:08:f5:a5:33:ae:15:74:
8a:37:b8:14:3b:7b:ab:78:06:03:7e:dc:25:fe:41:b2:fb:b5:
a5:53:e2:43:7d:2b:db:88:41:b2:13:74:99:cf:31:53:cb:8b:
3c:87:53:e5:c4:85:c7:e2:67:b9:58:9c:c0:84:fe:67:5b:21:
c0:b8:0b:10:15:c4:1c:71:f0:2e:bd:c1:a9:c4:75:45:83:04:
8a:f7:4d:83:c9:ed:ef:dd:3c:6a:56:97:24:66:46:fc:72:0e:
a5:06:a4:0c:1f:a4:0f:9c:95:c0:55:be:c8:eb:ca:0a:95:f3:
47:d0:91:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 12:40:37 2024 by rpki-client on console-ams.rpki-client.org