Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38382e3232302e302f32342d3234203d3e20313431303339.roa
File: 34352e38382e3232302e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: oHrhRImjDkpNdOdK5vgQOTsYE117h/U3Xh8OiorK9Js=
Subject key identifier: 85:1C:A7:B6:8B:64:86:4E:DC:9F:A1:8C:16:0F:E3:5D:6D:2E:B1:34
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 52F9B746B00C8A05F18609706F8B5F6085AE2477
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38382e3232302e302f32342d3234203d3e20313431303339.roa
Signing time: Wed 28 Aug 2024 14:04:44 +0000
ROA not before: Wed 28 Aug 2024 13:59:44 +0000
ROA not after: Wed 27 Aug 2025 14:04:44 +0000
asID: 141039
IP address blocks: 45.88.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:f9:b7:46:b0:0c:8a:05:f1:86:09:70:6f:8b:5f:60:85:ae:24:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 28 13:59:44 2024 GMT
Not After : Aug 27 14:04:44 2025 GMT
Subject: CN=851CA7B68B64864EDC9FA18C160FE35D6D2EB134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ab:a8:37:21:d4:37:4a:3d:5f:0f:18:d7:c6:
ce:41:62:34:6d:18:b2:b5:31:df:81:18:ad:3c:0c:
07:7f:b1:88:68:e0:c9:df:ad:da:85:58:2d:70:e8:
75:06:17:2d:34:ff:b3:49:c4:4d:94:68:a6:88:2f:
72:6e:95:cf:d4:c9:07:6f:35:c4:eb:30:dd:81:38:
3f:75:c7:bb:9f:1e:e3:77:88:c9:75:f7:5c:7b:d1:
8d:0a:65:04:ae:ee:61:b0:9b:48:78:5a:9f:ed:68:
44:cf:e9:e1:7b:3a:fb:ee:26:ee:7e:90:79:b6:2c:
c7:46:89:0d:25:11:42:87:1f:8d:ba:58:94:63:4a:
44:87:58:6c:81:0a:8e:3f:ca:e8:f4:45:7f:43:1b:
08:aa:1c:d6:c0:3b:1f:95:bb:1e:15:88:ee:ab:b4:
02:61:56:41:f2:ba:96:e1:ff:ed:6a:e1:44:5b:2c:
64:a7:ac:ff:50:97:9f:8e:7a:98:63:67:9e:2f:25:
01:e4:2d:2e:59:9a:80:04:83:0c:c5:68:34:c6:ad:
40:a5:a9:f7:80:3c:3c:c0:13:23:bf:f6:56:81:80:
38:64:35:58:85:23:08:76:35:6f:61:9c:2e:4d:12:
8f:79:9c:84:f7:1e:5f:42:f5:31:71:d4:4d:8f:eb:
0a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1C:A7:B6:8B:64:86:4E:DC:9F:A1:8C:16:0F:E3:5D:6D:2E:B1:34
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38382e3232302e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.220.0/24
Signature Algorithm: sha256WithRSAEncryption
35:51:e2:39:c9:20:bf:0a:94:2c:9b:56:e3:01:86:f5:f0:0e:
9f:68:97:f0:63:24:1c:97:24:49:db:a2:95:56:47:73:8d:00:
ac:5f:cd:5f:d3:65:fc:42:24:92:f5:a9:a5:31:ae:ac:2a:4b:
b1:8b:f2:a7:c8:3d:07:f5:46:41:fa:99:3b:a1:74:f6:6f:43:
4f:cd:5d:b8:d0:6f:d4:d7:f3:ff:2b:6e:9a:74:e1:2f:ea:11:
f9:17:92:70:8b:f7:82:cb:bc:2a:16:a3:93:38:2f:a1:5f:ea:
bf:d4:e7:85:a7:0d:13:9d:fb:f1:32:32:cb:24:43:e0:b3:fd:
76:20:2b:90:5f:04:02:86:04:6d:97:9a:6f:5f:5d:ae:da:b3:
cb:66:ab:7a:b9:1c:6a:9c:38:ad:5d:09:1a:f2:29:4b:c9:49:
98:56:63:67:80:7c:b6:34:07:47:39:9f:b9:b4:ee:eb:c2:46:
de:ec:72:85:30:96:f3:38:94:db:18:e9:6b:a4:56:55:f5:c2:
f3:6b:31:52:cc:12:fc:3e:17:4a:50:0f:07:54:1c:5e:8c:7c:
f4:3a:4e:32:44:b2:59:cf:01:34:f7:c2:c2:79:3b:6f:2c:12:
b1:6c:20:07:7b:52:bd:2e:67:3f:68:ad:16:5e:ac:1b:ce:2b:
27:01:cb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:04 2024 by rpki-client on console-fra.rpki-client.org