Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/352e3138312e3231382e302f32342d3234203d3e203437353833.roa
File: 352e3138312e3231382e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: GNqrs1tG0T3KuyslrhoTBvXtxkfrjqLHbZErh0xvGC4=
Subject key identifier: 9E:C2:18:F0:3C:65:FA:2A:12:BC:52:B1:46:33:64:F8:62:B5:6F:62
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 12CDD89D9B9ED6FF9F355A9456F7D9D639F56E00
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/352e3138312e3231382e302f32342d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:13 +0000
ROA not before: Mon 26 Feb 2024 08:48:13 +0000
ROA not after: Mon 24 Feb 2025 08:53:13 +0000
asID: 47583
IP address blocks: 5.181.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:cd:d8:9d:9b:9e:d6:ff:9f:35:5a:94:56:f7:d9:d6:39:f5:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:13 2024 GMT
Not After : Feb 24 08:53:13 2025 GMT
Subject: CN=9EC218F03C65FA2A12BC52B1463364F862B56F62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:7f:d7:26:c5:44:96:63:3a:96:86:fb:7f:
02:da:fe:4c:77:33:c2:b9:c1:dc:89:d8:0f:05:0e:
b8:0a:4e:8f:e0:e5:6d:a9:56:ca:c4:3c:41:a2:49:
ac:7e:c4:12:a3:ed:52:f8:9d:8e:41:25:64:1a:33:
55:1a:20:e5:a3:a0:13:5d:4a:24:07:a6:af:86:33:
15:b7:ed:3c:cc:e9:8b:a9:a9:ea:ef:6a:44:83:43:
eb:a1:48:3c:7b:f3:33:c0:10:f5:de:b9:6f:a9:31:
62:02:75:af:54:50:ab:32:6f:55:42:2b:cb:b1:ea:
c6:34:dc:8f:91:f4:da:35:43:c2:45:66:c4:f0:e5:
a4:da:44:20:07:37:8e:c1:82:67:8d:54:a1:59:97:
b9:a7:26:91:ac:2a:82:7b:cc:87:03:df:f9:eb:75:
6e:eb:9b:e6:60:6b:0a:fa:8d:cc:15:e8:d6:5b:7c:
35:45:52:33:50:89:e3:0c:63:dd:7b:5d:03:7e:70:
6e:c1:38:c1:26:3c:ff:49:7d:58:4d:c0:3a:1d:8d:
80:a2:26:b7:aa:a7:57:17:6f:50:30:e7:82:e5:d2:
54:51:5d:46:3a:e9:f9:9d:a8:2b:11:c1:35:12:47:
22:f8:a1:f2:b7:7b:f6:fe:64:a2:3a:a6:a5:e6:34:
c4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C2:18:F0:3C:65:FA:2A:12:BC:52:B1:46:33:64:F8:62:B5:6F:62
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/352e3138312e3231382e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.218.0/24
Signature Algorithm: sha256WithRSAEncryption
39:aa:47:6f:51:f1:14:8c:48:37:c0:7a:c9:21:ae:15:72:bb:
98:ae:07:c3:28:d1:3c:e0:1f:4e:1c:f2:d2:83:dc:8b:84:52:
5e:ae:01:ab:c0:63:56:08:e4:bd:fa:a1:44:29:a3:e7:8a:74:
3f:eb:e6:a3:c2:69:6b:cf:dd:88:cc:15:f8:02:38:5d:09:92:
a2:05:50:53:78:08:f2:37:f1:c9:ce:2d:d9:ff:df:00:85:7d:
2b:af:92:0a:67:e6:f3:e3:9c:78:6f:b2:46:a0:67:87:02:26:
c3:90:a2:0e:c7:fc:85:8c:27:94:cb:97:36:26:8e:b5:46:bf:
be:ed:a0:f0:4f:83:34:fa:b8:50:ec:45:d9:69:97:93:0f:70:
80:2e:39:e8:54:1b:35:db:ae:57:2c:e7:d3:bb:a2:e6:01:87:
cf:bd:8a:45:b3:55:2b:2a:f2:6a:4b:4e:fe:81:d3:20:a2:7a:
35:24:de:03:fa:69:67:56:ac:42:df:07:32:f2:5c:c1:58:f8:
04:27:48:bf:de:c1:7b:4b:67:f1:2d:56:f5:15:26:05:f1:4b:
c6:2b:d9:80:d5:3e:e2:97:15:e2:cb:d3:e6:2a:a9:6a:a2:f7:
fd:71:65:7c:26:72:03:8f:a0:bf:9f:79:0c:e6:dd:fb:18:fb:
da:25:57:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 08:01:45 2024 by rpki-client on console-fra.rpki-client.org