Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136312e302f32342d3234203d3e20313336373837.roa
File: 34352e39352e3136312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: FnVGpVyZwg0+CQPIe4ZB/jBkEkV1Gp3uHy/rhPkmuUU=
Subject key identifier: 43:98:BE:00:1F:87:6C:48:CC:84:BD:86:2B:9E:D4:7D:C0:96:60:47
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1DEBB485D532CE9079B47943A6015796FE5F1064
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136312e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 26 Jan 2024 19:05:08 +0000
ROA not before: Fri 26 Jan 2024 19:00:08 +0000
ROA not after: Fri 24 Jan 2025 19:05:08 +0000
asID: 136787
IP address blocks: 45.95.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:eb:b4:85:d5:32:ce:90:79:b4:79:43:a6:01:57:96:fe:5f:10:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 26 19:00:08 2024 GMT
Not After : Jan 24 19:05:08 2025 GMT
Subject: CN=4398BE001F876C48CC84BD862B9ED47DC0966047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ad:d3:03:fa:97:8b:be:76:1c:29:7b:dd:9e:
62:4d:f5:50:4c:60:cf:66:77:01:f2:f6:8a:05:64:
de:07:1c:ce:64:40:33:95:8a:b1:17:8b:90:73:ae:
d1:66:60:22:ee:92:d6:39:b8:b0:0e:37:2e:07:6e:
87:5e:5f:8f:14:e3:42:70:0e:e8:49:17:02:48:43:
a7:7c:b2:3e:f4:95:29:c9:69:8b:bf:69:00:2e:b8:
30:dd:3b:00:d1:42:ca:49:e8:a1:bb:fe:fc:c3:b5:
22:a5:6a:42:ed:7c:6e:92:f2:bf:52:18:d6:34:d8:
e3:11:ca:43:15:d9:bb:01:ec:f0:1b:46:12:ed:fd:
a5:b2:ae:7b:57:a8:3a:85:d4:8e:7b:74:a8:94:1d:
25:54:b6:39:16:04:70:65:4f:66:57:30:c7:82:23:
e3:e5:1f:66:33:bb:e9:6f:2a:a9:be:80:47:2e:17:
e1:e0:de:59:4e:4d:9b:58:2d:07:cd:81:cd:6d:13:
40:0d:31:bf:2a:fb:15:3e:24:bc:9c:45:fb:16:c3:
cf:4a:a2:40:dc:5b:4e:6a:85:82:23:69:9a:61:18:
16:59:3b:2d:54:6c:86:55:48:3b:0c:62:1c:14:69:
e9:77:7a:a3:d3:7b:2c:42:64:07:18:c7:cb:a1:97:
3a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:98:BE:00:1F:87:6C:48:CC:84:BD:86:2B:9E:D4:7D:C0:96:60:47
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.161.0/24
Signature Algorithm: sha256WithRSAEncryption
49:92:ed:be:c4:c8:5e:71:ad:ea:45:d9:9b:e7:bb:cc:75:cb:
41:18:77:ca:1e:3a:9f:f5:fd:b5:e6:ac:67:74:d6:9b:15:88:
ae:ec:2a:33:cf:ff:15:d5:7a:e3:70:2d:63:bf:32:6a:cc:85:
ff:29:8b:51:fd:34:2e:dd:76:c7:0d:c1:07:7e:89:9b:e0:50:
54:f2:2a:7e:9a:29:5d:f4:f2:2e:cd:22:31:00:e7:34:19:b0:
99:a1:13:de:b2:ab:fc:53:ec:2d:44:a5:73:0c:29:ab:e4:29:
bb:f1:7b:bf:af:39:18:83:2e:11:7f:fa:32:c6:18:d9:07:42:
fd:bf:db:b7:8c:da:b4:61:e3:29:de:4a:39:a1:3d:d0:1e:a9:
26:f0:52:5b:94:bd:22:97:21:58:e6:44:1f:23:f6:8c:1a:dc:
66:e6:fb:0d:2b:09:ca:2a:e7:d2:5d:72:13:7f:09:b0:0d:72:
66:d3:78:61:e4:51:99:c4:dc:7c:ad:32:39:9d:7e:1e:47:d1:
f6:d2:2d:08:af:aa:bf:29:b4:cc:f2:8a:7d:40:e1:b1:2c:6d:
5e:9a:4c:02:05:aa:50:a3:5b:7e:3b:e4:fc:fa:2b:52:3c:3a:
cd:a3:f1:44:84:2c:24:b0:85:08:86:33:4c:f4:56:8e:9c:29:
59:f6:3d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:21:53 2024 by rpki-client on console-ams.rpki-client.org