Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e33322e302f32332d3234203d3e203437353833.roa
File: 36322e37322e33322e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: aUoayT9WibtV1xM1oe+xCLphQF8HHBPUnTgAmGXBp/U=
Subject key identifier: 89:4B:BA:BF:63:65:F0:EE:1C:FA:F8:89:12:90:98:53:E7:9A:06:B9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 663E9D5F467058D7BE120FC39E525D859CC1107A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e33322e302f32332d3234203d3e203437353833.roa
Signing time: Thu 13 Jun 2024 10:41:40 +0000
ROA not before: Thu 13 Jun 2024 10:36:40 +0000
ROA not after: Thu 12 Jun 2025 10:41:40 +0000
asID: 47583
IP address blocks: 62.72.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:3e:9d:5f:46:70:58:d7:be:12:0f:c3:9e:52:5d:85:9c:c1:10:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 13 10:36:40 2024 GMT
Not After : Jun 12 10:41:40 2025 GMT
Subject: CN=894BBABF6365F0EE1CFAF88912909853E79A06B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:f4:94:a2:f4:53:c0:5a:08:c6:86:8c:a2:
b0:14:77:5a:c1:04:40:43:eb:b2:85:81:8b:ce:8d:
81:1c:75:10:ef:ed:9f:4a:e8:bf:cd:ab:7c:ac:98:
05:24:f3:99:43:18:e9:48:6c:29:1d:47:e2:29:03:
9f:be:6e:99:f0:6b:6b:bb:6a:72:4b:8a:3f:72:e0:
15:7d:b8:54:4e:24:8e:f4:10:4f:b9:c0:dd:fc:bd:
6a:90:f8:25:33:a0:30:1d:13:60:fa:66:6d:b9:1b:
01:d8:7e:9e:cd:c3:50:30:36:b2:74:ea:7a:96:91:
49:b9:c3:fc:ef:e1:02:c4:77:7e:a2:09:b1:18:a2:
93:fd:dc:c0:09:62:cf:5d:6c:95:7f:d6:2c:86:f0:
81:31:dd:b9:9d:3c:5c:5d:68:ca:fb:dc:f0:dd:ab:
2f:63:07:44:50:63:29:d5:15:8e:d8:e9:f1:77:8c:
4d:42:50:d0:8c:5f:8b:02:03:3f:88:a1:e9:26:cb:
5b:69:9d:b0:f3:cf:c3:dc:bc:65:91:cf:51:14:fc:
0c:ce:7f:9a:6c:be:49:7c:ac:a5:18:e6:69:fe:69:
3c:9d:e8:4d:73:44:20:e2:84:de:ce:9f:38:f6:1a:
2e:e8:5e:a1:8b:c2:7a:3e:e0:0e:e1:ad:fb:fc:25:
1c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4B:BA:BF:63:65:F0:EE:1C:FA:F8:89:12:90:98:53:E7:9A:06:B9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e33322e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.32.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:14:3c:f4:29:f9:57:87:8f:cf:1e:4a:29:9c:52:38:ba:23:
c1:61:91:18:44:ee:6e:5d:cc:97:8b:60:a4:3b:95:25:c9:f6:
64:af:60:be:7d:f1:fc:f4:b7:95:d7:26:74:84:27:0c:a7:58:
3a:a1:ac:7a:19:bc:6a:bf:4c:dc:df:87:c9:b0:be:9c:49:1a:
d7:34:3d:60:9d:06:c9:eb:ad:15:73:6d:83:dc:7c:d7:e4:3a:
6a:20:a7:a8:9c:3e:30:7a:be:70:50:dd:35:61:25:b2:e9:fc:
2b:c9:40:ac:40:48:e3:a0:dc:29:38:c5:40:4e:f9:b2:ac:48:
69:01:bf:65:75:ea:61:04:cd:f7:f6:e1:f8:54:9a:cf:2b:65:
42:98:39:5c:fa:04:a4:f7:69:c1:14:64:d9:d9:e3:64:47:48:
d0:9a:ee:83:1d:46:fe:b1:df:2f:59:ad:70:31:ca:56:07:71:
b0:04:44:9d:a9:9a:70:56:b5:ca:c9:60:42:9a:1e:cf:68:a5:
f8:5c:30:47:46:b7:d7:4f:70:6c:f2:49:bc:bd:24:6b:93:6e:
d2:d0:f0:58:8a:6c:c4:c6:e0:54:97:f0:71:99:3f:79:d0:71:
a7:28:bf:aa:58:87:33:92:c9:22:72:00:36:bb:1d:80:e2:ac:
48:6a:92:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:04 2024 by rpki-client on console-fra.rpki-client.org