Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38342e33392e302f32342d3234203d3e20313336373837.roa
File: 34352e38342e33392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: eCVPpupJyUnpdnrii2XmcIsRwWucutf4HTtY25HwWzI=
Subject key identifier: 34:37:6D:04:BF:01:18:7F:45:2D:A4:02:F8:14:F2:C9:2E:C7:2C:28
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0BA87BF7623B970EE233A86C3E72A4D0271652B1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38342e33392e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 30 Nov 2023 14:01:32 +0000
ROA not before: Thu 30 Nov 2023 13:56:32 +0000
ROA not after: Thu 28 Nov 2024 14:01:32 +0000
asID: 136787
IP address blocks: 45.84.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:a8:7b:f7:62:3b:97:0e:e2:33:a8:6c:3e:72:a4:d0:27:16:52:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 30 13:56:32 2023 GMT
Not After : Nov 28 14:01:32 2024 GMT
Subject: CN=34376D04BF01187F452DA402F814F2C92EC72C28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e6:a6:2d:8f:be:60:2e:98:a4:53:bc:68:a3:
31:9b:80:c1:0d:70:81:79:dc:84:ec:66:fd:35:84:
23:59:39:d4:ad:93:05:62:28:7a:a0:e9:89:0f:ef:
4c:8e:5d:9f:db:18:fc:3f:0e:49:48:8f:f9:32:5a:
90:79:ed:eb:42:7c:90:a6:90:59:90:8d:4b:ae:55:
5f:c5:e0:ea:c3:cb:5e:9a:70:14:c1:fd:25:0d:1d:
61:96:6c:00:2d:e7:b9:53:13:53:33:40:b9:33:07:
2e:45:56:5f:69:7d:2a:3a:61:44:92:51:04:a2:8f:
02:c6:1e:21:1b:5b:26:03:5f:9f:37:05:32:92:13:
48:b1:dd:96:c4:11:44:5f:84:d5:69:44:60:a4:bb:
4c:ce:07:18:cd:96:34:b2:b4:0f:38:1e:e0:ea:fd:
a5:27:a4:3d:e7:15:84:b2:b5:10:6a:c0:f4:fb:52:
df:fa:e5:a2:5e:44:12:11:be:02:22:a3:eb:d9:34:
f0:53:13:ad:3d:14:7f:44:d6:2f:aa:b5:e7:ce:70:
ac:3f:18:00:08:af:30:90:ed:b1:68:35:ce:91:fc:
b9:ce:aa:ba:01:ee:73:72:30:ee:93:7d:b8:b4:7b:
5e:fb:eb:3e:9c:75:34:f1:0d:ed:86:e8:a8:fa:5e:
5c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:37:6D:04:BF:01:18:7F:45:2D:A4:02:F8:14:F2:C9:2E:C7:2C:28
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38342e33392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.39.0/24
Signature Algorithm: sha256WithRSAEncryption
15:70:11:5c:74:9e:bf:a8:87:2c:45:23:55:8b:ef:52:f4:6f:
e5:c6:12:a6:b3:d9:5b:36:de:6f:25:5e:a6:d6:12:f9:0d:3c:
5d:c5:df:b4:95:1b:3b:74:15:45:9b:b3:ff:51:a7:97:84:79:
49:3d:57:b0:22:f8:aa:8c:15:18:c2:53:86:f8:1a:37:e8:f5:
d7:d8:e9:d0:dc:0f:e0:60:d1:94:1a:bb:d2:d2:2d:56:c9:89:
71:17:e1:12:89:56:32:29:53:c6:16:be:9d:ff:ed:7e:ff:73:
03:3e:89:99:8d:9f:74:2c:29:41:89:b6:ee:61:4e:5b:88:bc:
72:a8:1e:5c:6a:8e:6f:10:6b:de:68:02:bd:19:20:5c:9c:33:
84:7d:50:6f:8c:22:e2:91:f0:ba:c0:23:6e:79:7d:49:a0:52:
bb:e1:75:52:11:29:f6:ad:3d:47:4b:9a:5e:48:dd:96:43:2e:
b6:60:d8:20:a8:28:1e:9e:fe:0f:54:8c:b6:b9:32:47:2a:dc:
92:e3:66:9f:47:4a:c0:72:f8:55:ee:91:58:ae:4f:d7:33:f0:
8f:04:81:23:ff:57:e3:52:b4:70:9e:d7:ce:8c:32:9c:43:c4:
4e:57:19:92:5c:52:c2:d5:23:b1:92:17:65:5d:d5:b5:b0:9b:
8f:c8:91:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:04:28 2024 by rpki-client on console-fra.rpki-client.org