Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31362e302f32322d3234203d3e203437353833.roa
File: 36322e37322e31362e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: /5YBEHofDKs2ijPbLOHP9MqKnp+S7gB1f3UCsHZMZ9M=
Subject key identifier: 11:72:C4:AD:BD:B5:7C:B0:B5:B4:F8:32:F3:99:6F:94:A7:8B:23:FD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 06E0AB322CE086915EEF81547AD9C1C21AF4B369
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31362e302f32322d3234203d3e203437353833.roa
Signing time: Thu 13 Jun 2024 10:41:17 +0000
ROA not before: Thu 13 Jun 2024 10:36:17 +0000
ROA not after: Thu 12 Jun 2025 10:41:17 +0000
asID: 47583
IP address blocks: 62.72.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:e0:ab:32:2c:e0:86:91:5e:ef:81:54:7a:d9:c1:c2:1a:f4:b3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 13 10:36:17 2024 GMT
Not After : Jun 12 10:41:17 2025 GMT
Subject: CN=1172C4ADBDB57CB0B5B4F832F3996F94A78B23FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:85:7f:ff:57:78:fd:e2:a2:59:44:92:4b:
89:22:5c:e6:1e:e4:28:39:80:87:4f:e4:a9:4d:a5:
a6:74:de:d4:24:dd:10:8a:ba:94:b5:d4:d7:44:45:
ed:f0:04:17:5f:cf:5c:d8:d9:a2:3a:1f:21:81:20:
d3:a3:56:63:d2:13:14:4f:e4:a1:a4:eb:11:7f:a1:
72:f2:80:2b:6c:f7:d4:31:29:95:75:98:88:58:8d:
b1:47:b7:24:c4:22:82:f6:36:dc:42:6e:c7:2d:67:
cc:5b:0d:d2:9c:bc:1d:c2:4d:4d:76:8b:19:f6:46:
98:f9:91:91:30:17:bd:ef:f0:38:9d:a2:a1:c2:13:
61:9d:1c:5e:e1:7c:b1:1b:c6:93:ad:ab:2e:16:1f:
35:91:d8:c9:05:bd:cd:37:3d:a1:dd:7a:3e:df:86:
7d:42:93:bf:0c:b6:83:bf:a3:53:97:29:d9:87:be:
97:bd:eb:e4:9d:62:8f:d0:7c:3e:30:9e:e3:38:ee:
91:25:3c:bb:dd:5e:fc:61:1d:c6:13:8b:3b:24:b8:
30:a7:60:ba:a3:43:8f:95:ff:a3:43:44:6a:6b:55:
e5:e7:0a:97:f2:f1:f0:fc:4d:0f:48:da:71:7a:69:
ff:83:52:52:78:60:40:b2:96:7b:73:9d:78:b5:37:
3e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:72:C4:AD:BD:B5:7C:B0:B5:B4:F8:32:F3:99:6F:94:A7:8B:23:FD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31362e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.16.0/22
Signature Algorithm: sha256WithRSAEncryption
81:be:67:c7:9e:b3:42:3d:c8:9a:1f:81:76:a6:f5:dc:e1:d1:
5f:f8:32:11:fb:0e:bf:2c:d2:6e:7d:22:57:a0:56:69:b4:3b:
ba:48:c9:c5:48:e5:1d:7c:74:09:66:3b:e4:5c:3a:84:a1:40:
69:57:d0:f9:0a:52:5c:5e:4c:64:ff:62:41:9b:b9:73:72:58:
02:46:62:27:67:e6:26:0b:1d:5e:f7:7f:6d:55:d4:52:e0:a4:
96:37:00:a4:8b:e6:50:fc:79:c1:07:83:50:44:02:b9:99:8d:
db:fe:d7:4c:fc:12:61:39:04:cc:d4:aa:ab:e2:08:94:a4:1c:
2f:e0:5c:54:c4:2f:e9:00:57:10:f0:41:a4:5a:38:5f:4b:77:
aa:48:04:31:9d:af:07:5d:c2:21:d1:fc:9c:5a:a7:77:81:38:
f5:6d:99:91:92:9f:bd:be:22:07:33:20:45:d0:f0:e5:22:ef:
a0:c1:f4:d3:fb:c8:fa:18:06:52:b5:e3:81:79:0c:57:e5:4e:
9b:e3:ea:e3:85:85:28:4a:93:48:3f:d6:56:0e:b6:d3:b1:cc:
17:d9:91:af:c7:c2:e6:7b:27:62:1f:6c:7c:bd:5f:8a:90:ec:
fc:4d:a6:bd:b2:91:ab:b6:45:28:11:9c:0c:63:b2:a4:9e:37:
91:8f:85:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:48 2024 by rpki-client on console-ams.rpki-client.org