Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39302e3130382e302f32322d3234203d3e203437353833.roa
File: 34352e39302e3130382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: PZwxfdR7HEsHPSMvQSp1AmeiomxLfLsW8m2+BeU1KBI=
Subject key identifier: 49:AB:AE:92:13:6B:DD:86:6B:5E:12:AE:D7:B9:0C:18:1D:75:0C:CF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4BBC86042BFDF057CC0FC6AC9667BEFD429FA98A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39302e3130382e302f32322d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:22 +0000
ROA not before: Mon 26 Feb 2024 08:48:22 +0000
ROA not after: Mon 24 Feb 2025 08:53:22 +0000
asID: 47583
IP address blocks: 45.90.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:bc:86:04:2b:fd:f0:57:cc:0f:c6:ac:96:67:be:fd:42:9f:a9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:22 2024 GMT
Not After : Feb 24 08:53:22 2025 GMT
Subject: CN=49ABAE92136BDD866B5E12AED7B90C181D750CCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9b:1c:36:20:fe:37:e2:74:77:81:48:58:69:
7d:2d:5a:71:1b:5a:7b:82:88:fb:b1:5b:ee:50:44:
dc:d1:77:84:ca:42:23:88:54:9f:3b:59:84:47:d2:
65:21:3c:29:46:d7:7f:2c:4b:37:d9:fe:0c:94:ac:
a9:6c:cf:69:61:b5:55:72:e5:04:1c:d4:eb:04:62:
bd:11:e7:9d:ee:b4:34:e3:4a:a0:1d:ea:b5:65:2f:
20:fc:82:d9:c2:43:35:5a:b4:a9:91:92:e7:f5:b1:
d0:ae:af:99:b7:ca:a5:f7:52:4d:62:31:6b:92:0e:
62:89:29:3f:61:47:a4:10:7b:29:63:0e:88:9f:c9:
6a:33:2d:42:ae:5e:43:c4:eb:c9:14:00:2a:23:49:
36:cb:90:20:22:32:ac:20:31:e5:c4:64:89:fb:60:
61:82:f2:aa:fa:1a:cd:46:57:0a:e6:bb:71:62:e0:
30:c7:c0:20:67:ee:0d:0a:75:b7:25:c6:1f:26:da:
7f:4c:11:62:09:4b:5f:7b:e1:59:c0:c4:af:54:90:
98:38:f8:07:3b:65:e1:e1:87:f6:3a:64:38:89:51:
da:c6:dc:4a:cb:38:8a:fb:4d:03:2b:7f:b4:e0:1e:
b2:fa:f3:76:ee:54:45:72:ac:30:65:c7:a5:14:6c:
60:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AB:AE:92:13:6B:DD:86:6B:5E:12:AE:D7:B9:0C:18:1D:75:0C:CF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39302e3130382e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.108.0/22
Signature Algorithm: sha256WithRSAEncryption
79:98:a2:e4:62:4b:6d:6d:0a:56:ab:0e:e1:4c:30:7a:3c:0f:
22:d8:f0:25:f0:e7:05:1c:8b:9a:4e:ad:29:93:11:7d:b6:17:
5c:24:89:02:b7:98:e3:11:1c:f7:17:55:33:42:75:21:d6:97:
b1:29:00:f0:b2:b1:71:f1:1a:f6:bc:2f:e4:cd:9d:72:00:ce:
f9:df:5d:f1:68:07:f8:bf:ee:1b:24:2e:ce:cd:a3:15:b3:63:
1b:24:b3:1f:de:39:7d:d6:ad:27:f0:b2:3b:e0:ce:3f:38:e2:
dd:e1:0b:75:cd:27:ad:4e:72:18:77:3b:40:f3:96:e5:42:0c:
58:3c:b7:91:0c:a1:ea:61:30:96:4e:7c:cd:0b:3f:68:b7:a3:
cb:e7:80:f4:c0:69:4c:1f:0e:23:db:78:ec:31:42:57:46:51:
2b:a5:8f:68:7b:a9:4d:50:e0:b5:da:db:7a:f0:8e:52:0b:b1:
3b:c9:31:66:3b:47:1b:8f:22:69:16:ca:c8:5d:fa:a8:9e:0a:
69:a8:9f:d0:de:75:99:0b:72:50:9a:c2:03:a9:7f:08:78:21:
7e:1a:f6:48:4d:5c:45:2d:f3:02:d8:7e:b7:3d:f1:4d:18:06:
ca:5f:bc:82:14:41:e1:e4:c9:fe:4e:fb:70:c0:a4:4c:04:02:
b9:f7:be:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 08:01:45 2024 by rpki-client on console-fra.rpki-client.org