Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38382e3232302e302f32342d3234203d3e20313431303339.roa
File: 34352e38382e3232302e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: lMDb+GyChGBZ2KSZ+vyPj1pnxmq/53WI6u4ENcLZIFE=
Subject key identifier: FE:B1:2E:8E:9B:AD:39:5E:10:AF:33:CB:AC:19:37:BF:6F:2E:16:FD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 45AC528BDFFB204CE3305B1CBA651020CFBB9646
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38382e3232302e302f32342d3234203d3e20313431303339.roa
Signing time: Wed 27 Sep 2023 13:40:11 +0000
ROA not before: Wed 27 Sep 2023 13:35:11 +0000
ROA not after: Wed 25 Sep 2024 13:40:11 +0000
asID: 141039
IP address blocks: 45.88.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ac:52:8b:df:fb:20:4c:e3:30:5b:1c:ba:65:10:20:cf:bb:96:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 27 13:35:11 2023 GMT
Not After : Sep 25 13:40:11 2024 GMT
Subject: CN=FEB12E8E9BAD395E10AF33CBAC1937BF6F2E16FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:91:7d:c9:ce:1a:1f:62:c5:a3:c2:ba:f4:
07:34:00:0d:c8:02:7a:ba:9a:3b:df:93:8c:29:54:
59:ee:6e:8d:4a:6a:67:b9:75:a3:d4:96:3c:45:ae:
e4:54:00:c2:2e:a7:09:b0:bd:6a:78:7b:de:15:92:
da:0d:3e:30:5b:19:97:7c:d1:2b:b7:b2:4d:22:7f:
d8:ab:68:00:b2:db:e2:ba:06:df:85:0b:e8:e9:f3:
2c:4f:f2:29:31:58:aa:b1:49:ee:b9:77:23:44:82:
e8:6d:c4:62:4d:4c:ba:a0:71:b4:bb:a2:aa:74:19:
5a:17:25:34:7c:6f:35:83:a6:25:7e:25:9f:0f:d7:
24:32:1f:79:ee:a8:8f:05:d1:b9:00:0f:00:5f:37:
1e:61:38:b6:33:3d:44:47:35:8f:59:65:e9:a7:81:
98:57:13:46:da:33:29:80:f9:44:b2:62:6b:1a:b9:
9c:39:85:26:bf:d1:0c:a7:d6:9f:ac:ff:9a:14:17:
63:2a:78:e3:c1:b7:a9:55:21:73:48:f5:28:da:36:
d1:8e:dd:ed:49:c5:72:29:fd:da:e9:37:07:46:9d:
99:3f:3f:57:cf:4f:31:76:f2:fd:4f:e5:66:c9:02:
f7:95:cb:d8:1f:ab:3d:f7:ee:8e:ef:c1:3d:13:89:
51:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B1:2E:8E:9B:AD:39:5E:10:AF:33:CB:AC:19:37:BF:6F:2E:16:FD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38382e3232302e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.220.0/24
Signature Algorithm: sha256WithRSAEncryption
82:60:98:12:44:b1:15:30:ee:7e:e7:3a:52:02:b4:9a:9a:7e:
d4:a4:fe:db:d7:43:66:77:bc:0e:62:26:e4:f3:1d:a4:56:47:
4d:ec:4d:a8:5d:0a:07:ee:a7:d2:19:e1:82:a5:da:91:9d:23:
55:05:50:4b:27:c0:4e:49:cc:e5:e3:9d:3b:95:44:f6:5f:36:
57:d3:f6:a5:97:90:ec:eb:0a:b7:a9:df:0f:00:4f:28:37:87:
49:5b:e4:d6:63:94:03:bd:27:10:4c:35:48:a9:e3:58:d0:ea:
1d:00:b3:3f:e1:d0:1f:0f:8c:2c:8a:fd:c3:42:34:f8:ef:62:
35:f7:43:95:d1:ad:f6:23:70:3c:42:ca:11:91:06:de:86:2a:
b1:72:2e:ff:71:bb:ac:b1:79:49:14:b7:86:e4:15:5b:e1:a2:
c3:26:4e:a1:fb:e2:d8:39:85:f4:eb:db:17:6e:4f:54:3b:49:
4d:46:46:25:c6:62:b3:66:04:b9:28:29:40:2c:4f:7f:24:e5:
06:d3:ea:30:5a:fd:3a:fa:cb:d9:9e:3c:d1:55:a4:19:93:7a:
9e:dd:5d:bb:39:08:d4:5a:98:56:be:db:bb:32:d7:6b:9a:2d:
08:9d:ae:9b:76:16:ff:80:96:ba:ce:ba:92:ab:5d:a8:f0:d4:
ab:3e:fd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 08:01:45 2024 by rpki-client on console-fra.rpki-client.org