Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e332e32352e302f32342d3234203d3e20323031333431.roa
File: 36322e332e32352e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: YyBY7pmz8JSFCdC4LfYRsLCrAeUzL8RTyZWB0NRM/vg=
Subject key identifier: 90:D7:60:4F:DF:BB:08:5F:E4:F1:77:9E:90:14:F8:DE:E1:18:59:99
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6EE6D1132717B2D545A3ACB7C81971772DCD7972
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e332e32352e302f32342d3234203d3e20323031333431.roa
Signing time: Fri 20 Sep 2024 14:04:55 +0000
ROA not before: Fri 20 Sep 2024 13:59:55 +0000
ROA not after: Fri 19 Sep 2025 14:04:55 +0000
asID: 201341
IP address blocks: 62.3.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:e6:d1:13:27:17:b2:d5:45:a3:ac:b7:c8:19:71:77:2d:cd:79:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:55 2024 GMT
Not After : Sep 19 14:04:55 2025 GMT
Subject: CN=90D7604FDFBB085FE4F1779E9014F8DEE1185999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:2e:2a:c1:ff:52:28:18:23:78:42:5a:4d:
c1:91:92:76:06:48:36:03:5f:8f:78:3c:42:5b:f1:
43:86:38:22:19:45:a1:d1:7a:c7:75:ca:4a:09:87:
50:35:db:e5:46:4a:ef:6c:9c:0a:62:a3:9b:49:26:
f0:98:cd:7a:bb:31:4b:ff:46:4a:49:e4:2f:00:73:
08:55:28:03:36:19:3a:20:5f:26:e9:cb:96:c6:63:
a0:f4:14:b6:5f:f4:04:6e:4e:66:af:d4:8b:f7:f6:
bd:0e:ba:15:e8:87:99:b3:d4:5e:f1:d6:00:b1:ed:
99:2d:8a:25:04:51:06:c0:ac:8f:09:47:e2:10:c4:
65:26:24:96:3c:6b:63:6c:36:12:97:29:7f:29:ce:
83:c3:c2:fc:03:bf:75:e1:af:06:7d:2c:87:fd:85:
11:ca:b4:61:71:fd:38:9b:8b:5b:a0:dd:e2:a5:a7:
d6:40:01:91:35:4d:75:d9:fa:8c:65:6d:df:be:97:
9f:8f:83:cd:32:37:90:10:32:4e:93:88:0f:42:04:
01:b7:49:12:f9:23:10:81:84:5d:b4:62:17:ad:32:
90:16:fc:a7:fc:c6:4c:70:dc:14:c3:55:39:7e:b2:
00:07:61:66:b0:e9:34:58:1f:8f:58:f2:2f:8a:3f:
35:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D7:60:4F:DF:BB:08:5F:E4:F1:77:9E:90:14:F8:DE:E1:18:59:99
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e332e32352e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.25.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e6:47:76:d5:f3:95:1d:b1:0d:a8:b8:3f:90:73:9a:c8:f6:
fa:84:b5:72:a4:bd:b5:6a:69:c6:8c:bc:1c:fc:40:ce:f7:c0:
ca:e6:7e:c0:3c:98:db:f4:74:c8:8e:76:b6:d6:1f:7b:7b:7b:
73:bb:19:1d:04:23:87:92:67:4d:4f:23:26:4d:79:1f:b3:52:
4f:1e:4a:b8:b2:13:7c:1b:b0:91:50:81:94:de:57:4f:77:93:
28:76:ab:74:bb:ce:5d:b3:44:7f:d0:f2:15:39:52:af:63:b9:
8d:06:5c:a1:8d:1d:a3:ff:88:88:79:c8:6c:a0:eb:46:56:f2:
50:1a:c0:a5:cb:c8:27:86:37:97:8b:16:94:3e:2d:40:38:1c:
19:06:b5:4c:6c:0b:ac:04:37:03:2d:2d:d3:75:13:66:fb:42:
1c:9a:6e:4c:1a:1a:e3:e9:eb:4a:2a:f7:4a:e7:4a:9d:24:58:
c2:26:91:46:c4:86:94:48:a3:77:a9:63:1a:b1:e3:58:50:75:
84:c9:bc:13:d8:17:45:a5:fa:de:11:c9:0d:fe:57:47:56:c0:
71:8c:6a:09:d6:5c:4c:3d:1d:c3:49:8d:b9:b3:c7:b7:49:af:
6d:79:61:bb:07:10:7e:40:ff:d0:b8:bb:65:af:7b:14:93:5e:
04:7b:b6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:26 2024 by rpki-client on console-ams.rpki-client.org