Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e34352e302f32342d3234203d3e20313336373837.roa
File: 34352e3135322e34352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: c0EF+CwDN0pEIccTG/xqnxcstTfvgJq0sNh8dv/1kIA=
Subject key identifier: 8D:5F:4F:C7:25:80:C9:D4:7A:AF:A7:DC:A0:AC:36:C5:92:D3:58:27
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 689E0E38E564F064A70FCDDB620C58F4F7B8B904
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e34352e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 26 Jan 2024 19:02:53 +0000
ROA not before: Fri 26 Jan 2024 18:57:53 +0000
ROA not after: Fri 24 Jan 2025 19:02:53 +0000
asID: 136787
IP address blocks: 45.152.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:9e:0e:38:e5:64:f0:64:a7:0f:cd:db:62:0c:58:f4:f7:b8:b9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 26 18:57:53 2024 GMT
Not After : Jan 24 19:02:53 2025 GMT
Subject: CN=8D5F4FC72580C9D47AAFA7DCA0AC36C592D35827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:37:13:77:ec:20:e8:ed:c4:6b:1e:cd:97:
73:b2:38:fb:2d:d1:58:fb:88:d2:4f:b0:26:14:d5:
2a:b7:0a:e6:f0:ec:8d:bb:a0:41:2f:5e:4f:0f:f8:
73:89:29:7a:19:90:ad:19:5e:50:0d:83:70:b7:18:
00:ba:cd:3a:f0:f5:f2:13:af:31:fc:a9:a0:ec:49:
51:c0:cb:f3:a6:fe:79:1c:b8:2e:d4:06:02:c9:54:
b9:98:1a:a6:84:e3:fd:4a:38:d2:2b:39:0d:28:e5:
f4:84:24:cb:a5:79:62:f1:74:9a:55:2a:b7:0a:1a:
61:93:0f:7d:7e:6d:ef:c7:bf:14:1e:81:a4:93:48:
1d:12:de:dc:1c:ad:98:eb:01:d3:e2:35:0a:46:e5:
5f:6d:c7:cf:25:69:24:e2:ad:73:35:24:bd:bf:68:
5b:b7:44:ca:35:f7:64:ff:72:1a:30:eb:c8:4b:25:
e0:0b:a7:e7:7f:9e:79:47:c4:c2:f0:a8:4f:69:5e:
6a:d8:80:8d:71:b4:d6:76:97:ca:59:8a:bd:c5:38:
e8:81:8f:ed:f8:ff:22:94:33:d8:48:b6:32:89:aa:
2b:5b:6d:29:ff:ab:3f:ea:f0:1c:b6:b3:dc:a1:aa:
fd:ba:b9:f9:94:47:cb:45:d0:93:60:a1:15:65:43:
4c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5F:4F:C7:25:80:C9:D4:7A:AF:A7:DC:A0:AC:36:C5:92:D3:58:27
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e34352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.45.0/24
Signature Algorithm: sha256WithRSAEncryption
89:fc:55:1a:c0:f2:4d:0e:9d:82:17:65:6e:e6:f9:c0:79:69:
5a:a3:ae:f0:a3:11:fb:4c:04:e0:f8:3e:13:66:f6:d0:0c:44:
10:0b:82:45:d3:ee:cc:15:a5:37:5e:8a:8e:7e:57:41:f8:5f:
19:31:24:8a:0f:7e:a9:8b:4c:83:b0:98:a2:8c:0b:bb:21:94:
f3:6c:5f:3a:a4:33:6f:e4:fe:86:da:61:88:13:10:1a:3c:37:
92:83:6e:ad:f3:3d:1e:ca:83:03:d3:e1:92:ff:20:ea:8f:07:
49:f4:65:22:68:84:98:a7:b1:97:15:08:13:19:4a:78:39:f8:
31:a5:96:04:46:57:21:1d:04:62:86:9c:a8:92:e5:c4:f9:25:
c4:1e:08:10:a1:31:3e:44:b7:de:7d:f2:06:00:f3:ef:b9:0b:
27:d6:cd:cc:76:75:38:19:44:d1:65:35:d0:56:d2:b4:fa:98:
db:a3:05:bd:10:0c:d3:c3:c4:c4:ce:3d:e2:7b:20:3b:2d:7e:
34:c5:ba:23:fe:1e:53:d3:82:65:7b:80:c3:6e:e7:25:85:d1:
da:20:f9:38:6a:c2:58:47:e2:4b:d5:22:3d:bf:92:fb:28:d0:
3e:6e:31:d9:ad:3c:5d:66:34:ac:49:1f:e2:9d:6e:62:7d:ca:
3d:5f:c3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:54:24 2024 by rpki-client on console-fra.rpki-client.org