Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3234382e302f32342d3234203d3e20313336373837.roa
File: 34352e38352e3234382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: /ZGtO0B7Ip0h0CUF+P1R6dqOFqigS5ZltZDhGFOBspY=
Subject key identifier: 86:5B:C7:7D:65:1A:D8:52:54:63:D1:18:B3:66:BF:06:DC:FD:37:AB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5652D65D3C1E6B6D69F95C252E8FE2665C93136C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3234382e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 27 Sep 2023 13:40:11 +0000
ROA not before: Wed 27 Sep 2023 13:35:11 +0000
ROA not after: Wed 25 Sep 2024 13:40:11 +0000
asID: 136787
IP address blocks: 45.85.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:52:d6:5d:3c:1e:6b:6d:69:f9:5c:25:2e:8f:e2:66:5c:93:13:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 27 13:35:11 2023 GMT
Not After : Sep 25 13:40:11 2024 GMT
Subject: CN=865BC77D651AD8525463D118B366BF06DCFD37AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:37:31:9b:9a:68:c8:e9:ee:e1:a6:6f:c0:
9e:9c:58:15:b4:1e:42:d8:58:aa:4a:99:ed:4f:46:
62:bb:52:60:cd:55:55:5e:84:60:e3:b8:7b:ac:58:
af:21:38:cf:45:ec:78:bb:1c:80:bd:ad:e8:40:92:
f8:94:70:07:9e:cd:76:f3:d1:85:32:7c:61:8d:c0:
1b:5d:d7:7f:66:f9:9c:6a:29:76:5f:7e:f6:82:b8:
67:54:93:e7:01:b7:cd:2f:a8:bf:92:7f:f8:93:8c:
87:d7:31:69:51:04:f7:aa:fb:26:f1:30:06:6a:80:
8b:0e:1a:f1:fc:d6:7a:67:fa:df:28:9c:37:7c:1e:
99:63:9a:fe:0a:42:54:e0:4f:88:67:8f:6e:c1:a1:
36:db:5f:ce:f9:e2:23:16:9b:47:c9:8a:18:3b:77:
27:87:35:f8:47:f6:1f:ca:7c:fa:0f:6c:29:fa:d7:
19:9b:46:89:0c:dd:16:4a:9e:3a:1e:bf:af:13:cd:
51:7c:25:ca:3c:c5:75:fa:69:91:58:61:d2:38:a3:
42:91:b7:2e:99:3a:8d:c6:88:be:7e:24:00:a8:ee:
1e:e4:ab:ad:fd:a4:67:59:3b:b8:33:36:af:89:c6:
9b:a8:f4:9d:26:02:bb:71:86:24:e6:a8:f3:f8:58:
1b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5B:C7:7D:65:1A:D8:52:54:63:D1:18:B3:66:BF:06:DC:FD:37:AB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3234382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.248.0/24
Signature Algorithm: sha256WithRSAEncryption
36:75:2d:82:76:cf:86:99:36:21:fc:81:36:e2:c5:10:fd:80:
05:60:04:e5:a4:55:ae:e6:f4:af:c6:a5:70:28:f9:1e:78:c0:
d9:c9:19:64:7f:fd:30:bd:ff:e6:93:71:55:b3:28:f4:94:6b:
18:ac:d9:8b:d0:2b:7a:8f:5f:16:c9:30:34:35:f9:d7:37:04:
7e:d1:c6:61:26:83:d8:fd:9d:38:ce:ac:2a:04:0f:28:b8:2a:
ef:ab:fa:33:93:ff:f1:9f:14:45:bc:8d:83:83:32:cf:0c:29:
d5:b8:93:aa:3f:96:68:57:88:9d:ea:0f:ba:ba:c9:b0:bd:7b:
a4:79:bc:d2:f4:ed:e0:96:d5:1a:8b:35:45:d1:1f:49:de:2f:
40:0d:dc:e7:8b:c7:94:c2:56:e8:69:e9:70:40:c0:c2:6c:96:
7a:e1:ec:6f:06:95:5d:57:cd:a5:64:56:1c:d9:13:4c:50:08:
29:da:c6:31:16:8d:93:10:45:0b:8d:a6:a4:74:93:e5:47:fd:
92:cd:9b:da:f7:9b:f7:04:58:39:89:f1:7e:c5:3f:aa:97:3b:
08:02:34:59:27:d7:21:41:b9:e9:5a:0a:91:f0:ca:8c:66:ed:
ae:63:a4:9c:d1:7b:dc:a2:6f:bb:50:99:bf:33:c1:c9:7a:70:
c4:9d:a0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:04:28 2024 by rpki-client on console-fra.rpki-client.org