Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/352e3130342e38342e302f32322d3332203d3e20313431393935.roa
File: 352e3130342e38342e302f32322d3332203d3e20313431393935.roa (raw, json)
Hash identifier: 5Av3luF3ookZtaZKxkhDeVSgk++PXD44qAZWJcvSXbc=
Subject key identifier: 04:34:33:61:C7:64:CB:F3:33:B5:C1:6E:43:E4:75:02:42:84:7A:F8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 27B3001A3C0896F3DA71F5AABB8F16D0AD9AADFD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/352e3130342e38342e302f32322d3332203d3e20313431393935.roa
Signing time: Fri 01 Mar 2024 08:55:29 +0000
ROA not before: Fri 01 Mar 2024 08:50:29 +0000
ROA not after: Fri 28 Feb 2025 08:55:29 +0000
asID: 141995
IP address blocks: 5.104.84.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:b3:00:1a:3c:08:96:f3:da:71:f5:aa:bb:8f:16:d0:ad:9a:ad:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 1 08:50:29 2024 GMT
Not After : Feb 28 08:55:29 2025 GMT
Subject: CN=04343361C764CBF333B5C16E43E4750242847AF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:44:84:99:94:83:d1:e1:59:bd:d9:fe:38:6f:
f2:ed:8a:d9:50:b0:db:29:1c:66:8f:bc:af:8c:89:
7f:f6:cb:07:8c:4b:1f:c5:c0:0a:69:27:06:0f:83:
fa:d8:f4:41:91:d8:ea:8b:6b:02:e0:99:a3:35:7a:
c3:f2:cf:0e:9a:a0:1e:02:07:31:6c:fe:30:73:11:
e3:a4:2d:5c:88:10:0d:9e:d2:39:d5:03:99:8a:31:
86:f9:4c:45:52:88:0c:b9:eb:c2:20:23:86:e7:f3:
d1:cd:0c:b6:4c:ba:51:3e:a1:4a:be:89:9a:b9:4e:
e4:d4:02:03:05:db:56:f6:a1:dc:c9:87:0a:bd:94:
2d:61:73:b0:fd:5d:6f:f5:40:e6:1f:51:c5:3d:1d:
2c:9f:c8:1b:a4:b9:a9:ab:70:aa:5f:32:25:e2:de:
22:f3:6d:9a:f5:1b:e9:3e:2d:25:1a:23:0f:45:cb:
b1:ed:64:18:2c:94:0b:19:30:88:50:21:6c:c1:ee:
9d:47:90:fd:c1:20:e9:3e:8d:d5:a7:86:ec:d8:6b:
57:90:d5:ca:5f:d6:e1:3d:a4:5e:32:f0:23:fb:90:
88:1c:39:19:ac:f1:90:f7:5b:52:e2:82:56:b4:14:
03:39:fb:3a:42:94:54:b8:54:50:7c:b0:68:b6:61:
6a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:34:33:61:C7:64:CB:F3:33:B5:C1:6E:43:E4:75:02:42:84:7A:F8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/352e3130342e38342e302f32322d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.84.0/22
Signature Algorithm: sha256WithRSAEncryption
75:b7:19:c0:ff:db:1c:6a:cb:b9:4f:a5:58:43:62:f3:4f:50:
60:14:85:4f:78:f6:ae:ea:a7:46:33:24:f9:45:60:e3:07:61:
15:73:f2:25:1b:05:37:9b:31:2e:8f:de:79:b2:55:b9:12:27:
03:e4:ea:df:f1:30:4b:6a:dc:0c:41:7b:58:f2:e4:ea:03:0d:
00:ed:51:e9:58:64:3e:1f:5c:e2:62:45:8a:c9:da:80:96:66:
05:07:ca:c3:5d:06:c1:bb:fe:df:d1:18:f3:8c:41:59:68:25:
88:7e:7e:7e:f5:a7:91:2e:b5:eb:62:28:df:76:c4:11:f3:32:
49:f8:9a:03:10:56:53:1a:19:23:03:ed:81:9a:d0:18:b9:47:
dd:3c:ee:4e:56:3f:42:2c:a5:01:59:b6:d1:3c:68:c7:57:3f:
c1:26:69:f4:08:c4:11:c6:aa:6e:7e:41:35:e8:4e:ad:0e:f1:
f0:40:ac:08:ba:3c:9a:83:06:91:a6:d3:4b:cd:8a:59:cb:71:
cf:f4:99:8e:54:d2:7f:51:74:be:b8:04:b0:44:0a:ae:23:34:
fa:d5:c4:74:1d:09:3d:75:10:f8:60:0c:14:a3:4c:58:b0:2c:
64:b9:38:74:fe:23:f9:96:86:53:1e:60:4e:b4:a7:fe:9c:15:
bd:b6:eb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 09:23:50 2024 by rpki-client on console-ams.rpki-client.org