Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34362e3138332e3130392e302f32342d3234203d3e20313336373837.roa
File: 34362e3138332e3130392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: EPKPqiA5J/NY1yu7jyl8Tb//IMFt3b0a3RWQKQUQq4s=
Subject key identifier: 6A:C3:3A:9F:37:B1:D7:BD:0B:FE:41:BE:23:EF:AD:AE:02:E2:84:E8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3308BB41E414FF71646B6498E57CC94269249D57
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34362e3138332e3130392e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 12 Oct 2024 12:42:09 +0000
ROA not before: Sat 12 Oct 2024 12:37:09 +0000
ROA not after: Sat 11 Oct 2025 12:42:09 +0000
asID: 136787
IP address blocks: 46.183.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:08:bb:41:e4:14:ff:71:64:6b:64:98:e5:7c:c9:42:69:24:9d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 12 12:37:09 2024 GMT
Not After : Oct 11 12:42:09 2025 GMT
Subject: CN=6AC33A9F37B1D7BD0BFE41BE23EFADAE02E284E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:73:d2:f9:19:6b:3b:5e:78:27:c8:ab:82:94:
c8:63:32:3a:2a:85:d5:68:0c:06:4e:32:a5:9a:fb:
3d:0d:bb:59:46:44:e9:db:8f:67:dd:95:e6:11:f1:
47:57:99:51:0d:e0:92:48:ec:9a:eb:96:1e:93:31:
2b:39:7a:37:88:d6:11:f5:95:15:25:a7:e1:5c:71:
ea:5d:b9:80:87:54:70:62:79:f6:0d:20:6b:72:4d:
cc:b6:77:b2:b2:48:23:fa:c3:c0:dd:8c:02:00:9c:
ae:e3:12:0e:67:c5:a2:4c:5c:c2:04:ee:7c:4f:e4:
41:ab:ca:5c:1f:d3:6e:c2:79:b0:3e:2a:fb:4b:64:
81:2f:e9:2d:41:64:d4:fb:a1:ad:43:a1:bf:5a:82:
1b:b4:06:21:62:12:83:05:a6:d7:db:4f:c7:ab:6b:
62:f0:f9:ac:ea:03:77:e0:2d:49:da:32:7a:c4:1d:
ac:76:90:4b:17:ee:14:6a:ea:fa:1e:9d:92:0c:41:
23:6d:33:e6:75:58:c7:d4:09:88:c8:e6:0c:a1:50:
db:95:30:49:bd:61:b9:31:50:13:d1:ed:b2:72:ad:
e5:82:ab:dc:98:34:13:4a:75:f8:5e:21:f4:37:8c:
ed:c5:ef:1c:dd:ff:84:d0:b3:b5:c8:97:3a:b5:4e:
ba:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C3:3A:9F:37:B1:D7:BD:0B:FE:41:BE:23:EF:AD:AE:02:E2:84:E8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34362e3138332e3130392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.109.0/24
Signature Algorithm: sha256WithRSAEncryption
91:33:bb:17:dc:47:09:5f:38:c3:c9:2a:d9:34:8a:d9:f7:3f:
f3:64:a4:3d:09:3d:d9:8a:a7:83:08:dc:6c:e7:36:24:a1:bd:
73:8d:b7:94:94:57:ce:72:95:9a:60:e3:f6:3e:64:9a:1f:4b:
e5:1a:ad:b1:5a:e9:b4:3b:80:ba:4a:d3:cf:c7:ba:27:42:40:
1f:bd:18:0b:f6:08:4f:26:3b:a6:87:08:92:a7:c8:16:6a:04:
41:d3:45:91:4a:48:fc:0d:da:a5:78:0a:16:88:21:72:6c:52:
8c:f0:26:78:41:6c:1a:ca:38:87:95:d4:eb:dc:e8:0c:e5:45:
a1:d3:9f:55:df:0a:83:b2:26:31:7c:db:19:c2:dc:32:c2:6f:
41:3c:db:15:de:39:fa:0f:0c:2d:2a:90:b8:c1:4e:d9:a1:1c:
a5:bd:f0:c7:25:21:78:04:0c:88:6d:3b:11:02:15:31:d9:6e:
9e:6b:e2:50:54:39:c6:1f:8e:cc:21:52:5b:5d:bd:61:ba:be:
5e:1f:ff:20:28:28:d7:7e:99:7f:fe:32:6e:a5:80:6a:b3:c7:
cc:7c:36:0b:94:a3:9d:b5:f0:b3:46:0c:7a:be:84:87:c7:46:
06:40:2b:6e:b2:52:49:f3:5d:fc:37:95:05:42:0c:56:74:22:
3b:73:50:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:42:58 2024 by rpki-client on console-fra.rpki-client.org