Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e34362e302f32342d3234203d3e203437353833.roa
File: 34352e3135322e34362e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: WACsoaNIsSt+Wj2R+qcHSpvlnmQDBKMI5CReBdNc/EM=
Subject key identifier: 49:78:79:3A:F0:7B:BF:80:07:87:34:96:58:36:5A:A5:5A:8D:A7:09
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5A371D6761F6BD536C6E861CA5BAC4F34B6DAE89
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e34362e302f32342d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:52:59 +0000
ROA not before: Mon 26 Feb 2024 08:47:59 +0000
ROA not after: Mon 24 Feb 2025 08:52:59 +0000
asID: 47583
IP address blocks: 45.152.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:37:1d:67:61:f6:bd:53:6c:6e:86:1c:a5:ba:c4:f3:4b:6d:ae:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:47:59 2024 GMT
Not After : Feb 24 08:52:59 2025 GMT
Subject: CN=4978793AF07BBF800787349658365AA55A8DA709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:b7:c6:05:2b:ef:ca:a2:56:f7:73:a4:38:
fc:30:46:bc:3e:0a:61:ab:08:e7:39:98:77:2d:66:
5e:80:1b:45:6e:bc:dd:82:06:d6:3d:1d:a2:ce:c2:
16:33:ca:30:b9:94:b0:9c:4f:84:a3:b6:22:19:b8:
06:25:bd:bf:2f:1f:23:46:c6:24:c0:10:fc:39:3e:
7c:2a:c6:65:44:7a:b8:98:24:81:98:75:04:ed:68:
0b:86:d7:b5:8f:3d:9a:f1:75:53:35:74:0f:6a:6b:
a7:0d:a0:c0:4a:85:5b:16:45:c6:31:b4:81:8f:93:
8e:1f:75:68:98:07:c8:67:1d:80:70:71:74:75:23:
fb:81:a0:f3:83:5d:1f:31:44:d6:7e:2b:9c:7a:cf:
3f:69:70:86:da:dd:60:66:bd:9e:11:b9:d1:eb:06:
78:06:9a:49:93:4f:73:67:99:a5:76:b8:bd:17:37:
85:92:cf:b7:91:5a:98:a7:a4:d9:3a:70:0a:aa:95:
c2:c9:52:f1:3c:12:0e:02:c6:00:51:3d:ee:b5:99:
1b:a9:d1:9e:42:f2:e5:9d:57:f7:50:7e:ee:01:80:
fa:8e:02:c6:7f:aa:c3:7b:2a:82:de:7a:65:61:59:
69:d3:cb:ad:55:3d:98:c8:3e:2f:66:5b:21:39:6d:
b9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:78:79:3A:F0:7B:BF:80:07:87:34:96:58:36:5A:A5:5A:8D:A7:09
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e34362e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.46.0/24
Signature Algorithm: sha256WithRSAEncryption
11:d3:2f:a8:c8:84:c1:fd:f1:ae:c2:f8:4e:46:cd:38:b6:cc:
3d:31:ce:28:0e:49:fa:16:a5:0d:42:b8:ae:83:b2:4b:a6:84:
32:9a:fd:f6:60:02:ff:a0:36:70:08:80:fc:35:3c:0a:e4:e2:
45:ca:87:1c:c0:5f:a5:dc:e7:dc:ca:09:63:e5:38:8e:82:a3:
35:d3:ee:5d:64:89:33:1d:c2:fa:4c:46:8b:d1:92:d0:5b:69:
55:8b:20:72:84:ed:5d:69:57:d1:9e:e2:95:78:f5:94:06:01:
82:57:c3:14:1f:d3:9b:9e:ff:12:01:55:0f:59:98:f3:81:1c:
e2:24:d3:be:2b:16:bb:cf:95:fe:6d:d3:54:fb:50:4d:f8:05:
54:c3:3d:3a:fa:9e:4f:80:53:0a:a9:ef:fe:1b:6f:66:23:0d:
c0:d4:95:ac:89:d1:79:d8:39:a1:d8:6b:f4:e1:9f:00:04:b3:
a4:6d:06:57:4f:1c:92:2f:29:1f:9b:8d:23:35:e3:08:36:ac:
c6:2a:5d:58:46:c2:6c:d6:95:94:3b:83:36:39:21:da:78:39:
46:98:fe:72:31:9e:2b:03:d2:cd:27:e7:b6:03:ee:fa:81:46:
ee:66:11:71:db:1b:d5:89:28:c3:e9:99:f1:45:c0:94:57:1c:
3d:97:85:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:12:36 2024 by rpki-client on console-fra.rpki-client.org