Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3234382e302f32342d3234203d3e20313336373837.roa
File: 34352e38352e3234382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Oc9+lMUHbooQH+213J+z6Ow5kYanKk61dav5R+oaeRc=
Subject key identifier: 8F:4D:3C:C2:10:F0:F9:31:6A:EC:75:1C:91:A8:7E:04:42:3B:92:AC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 087A333EEEF3283DDBA39BB9594EF76E00417741
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3234382e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 28 Aug 2024 14:04:43 +0000
ROA not before: Wed 28 Aug 2024 13:59:43 +0000
ROA not after: Wed 27 Aug 2025 14:04:43 +0000
asID: 136787
IP address blocks: 45.85.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:7a:33:3e:ee:f3:28:3d:db:a3:9b:b9:59:4e:f7:6e:00:41:77:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 28 13:59:43 2024 GMT
Not After : Aug 27 14:04:43 2025 GMT
Subject: CN=8F4D3CC210F0F9316AEC751C91A87E04423B92AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4b:89:2a:2e:3b:a7:c9:6f:77:a9:2a:a2:fe:
fd:3a:45:4d:90:86:c3:3a:e6:00:a8:ee:1c:ea:f1:
fe:e2:14:3c:82:78:d5:26:0b:b5:66:8e:bb:55:15:
73:ef:50:fb:45:3d:00:c4:70:a7:c0:1c:b8:8d:5d:
b7:e0:7f:7f:12:e6:05:d4:85:c0:39:e2:be:6a:f2:
fb:88:aa:3b:43:cd:26:88:5f:cb:1e:f5:c9:79:9d:
a4:6f:7e:94:86:8f:76:97:1b:e5:1e:dc:4c:2c:df:
cc:b3:6d:ef:c6:72:0a:34:c1:9f:4c:67:18:5a:3d:
ca:1a:8c:09:f3:12:41:5c:d5:de:2a:de:6f:91:1e:
34:8b:74:1e:f9:fe:76:d2:8a:7a:28:da:0f:4e:68:
3e:86:00:0f:70:33:02:bb:70:ed:72:5c:39:06:e2:
bf:64:4e:ef:e6:9f:2b:38:16:ff:80:47:6a:5a:cb:
d6:06:16:59:a4:fa:8f:af:c2:50:70:d9:af:ba:eb:
5d:a4:0d:1e:fb:c6:b3:5a:08:c7:61:3a:05:94:9e:
f3:ac:02:a2:62:b2:7d:31:0b:ff:41:71:17:f6:f1:
cd:f0:fd:4e:4a:6a:4f:bf:5b:c1:ed:2f:e5:2f:4a:
87:a2:f9:04:13:28:5d:d2:53:67:80:73:45:d0:7b:
8b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4D:3C:C2:10:F0:F9:31:6A:EC:75:1C:91:A8:7E:04:42:3B:92:AC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3234382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.248.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:99:8e:cd:be:ce:6a:16:eb:12:b6:71:31:95:af:8b:d3:4c:
ba:85:e3:bb:cf:2d:4e:9c:f3:88:c5:52:9c:8a:eb:e2:3a:43:
68:9e:29:4f:f0:0b:01:dd:01:94:56:f8:95:fd:29:87:90:cf:
a0:61:b3:9c:58:43:33:e4:cb:bc:b6:47:65:cc:b2:90:4e:c3:
6e:df:7b:34:52:6f:88:10:fa:c6:fc:be:a2:19:92:f0:b7:c2:
6b:05:44:2c:e2:3d:4c:4d:a5:bd:19:7d:56:ac:13:3f:c5:b9:
3f:a0:64:e1:4a:e5:1b:62:7c:76:68:7a:92:5d:7d:ae:3c:d1:
0b:13:c2:f0:a3:96:ce:00:d5:2f:12:b8:40:82:94:a4:1a:f4:
84:8e:53:e8:41:e5:82:77:9f:4a:41:d2:94:84:62:b4:0a:8c:
0e:11:44:5e:83:bc:a8:38:f6:b5:8c:4c:b9:97:c6:ee:10:20:
72:25:39:cb:d1:eb:ce:f0:2e:d3:5b:87:fb:a3:88:3f:a1:19:
58:e3:fa:4f:fb:54:bc:6a:d4:7c:11:7e:30:ac:cc:2c:06:c1:
93:21:ee:2f:dc:5c:4f:47:a9:e3:53:27:35:15:55:e5:7f:a4:
71:02:a4:8b:e5:07:ce:b8:36:0c:8f:a8:4b:3b:97:99:85:b3:
c4:37:0e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:29:14 2024 by rpki-client on console-ams.rpki-client.org