Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e33342e302f32332d3234203d3e203437353833.roa
File: 36322e37322e33342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: yHWo2RETlKrq7meOQWtH3mxQOV1JCluxywx68NzPS0A=
Subject key identifier: 0B:52:F0:BB:F4:7B:28:67:E1:00:40:AB:2E:B5:4B:8D:32:1D:0E:2D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5D81ECE2062CF21FADE6AC2D6D89C6110793102F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e33342e302f32332d3234203d3e203437353833.roa
Signing time: Thu 25 Jul 2024 12:04:25 +0000
ROA not before: Thu 25 Jul 2024 11:59:25 +0000
ROA not after: Thu 24 Jul 2025 12:04:25 +0000
asID: 47583
IP address blocks: 62.72.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:81:ec:e2:06:2c:f2:1f:ad:e6:ac:2d:6d:89:c6:11:07:93:10:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 25 11:59:25 2024 GMT
Not After : Jul 24 12:04:25 2025 GMT
Subject: CN=0B52F0BBF47B2867E10040AB2EB54B8D321D0E2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6f:af:13:be:de:88:6d:74:84:94:e6:9e:6f:
d0:6b:b6:97:c0:bf:20:b4:b8:7d:8f:61:16:7a:e0:
c4:c9:c5:ee:b3:f3:9a:79:4d:66:ad:b7:f3:4e:0b:
94:ad:a7:66:5a:75:98:eb:ea:88:05:87:4b:50:54:
8a:cc:54:b4:31:53:02:f2:9d:32:91:95:c5:37:0e:
2b:f9:c0:b5:9c:66:cb:da:fa:f3:ae:47:f9:fd:ad:
7f:ec:f0:6d:bf:5c:e1:be:e3:62:67:37:1c:8b:db:
d3:a7:7e:a1:bd:7f:7e:7d:51:2c:8e:a3:63:30:5a:
96:2c:92:8d:fd:d6:56:06:36:09:7f:aa:15:a6:f1:
79:10:ac:9c:5b:a5:69:37:a0:7f:40:2b:24:fc:98:
9d:fd:b8:04:fc:7b:b5:78:4a:d0:52:8a:f9:8c:6f:
cf:ab:23:d4:89:89:5a:70:4d:7c:cd:49:ec:3c:43:
2a:92:e9:99:8f:59:e6:54:c0:dd:4a:5a:0b:13:07:
16:22:84:de:2a:c3:68:88:22:cc:87:16:01:d9:ef:
c1:be:b4:49:0c:a9:5a:0b:e6:0a:fa:82:a8:fc:a6:
f0:1d:b0:e0:18:4d:c7:f9:a4:58:c2:98:7b:61:a6:
35:98:33:70:e7:fa:87:e4:f1:3a:24:fc:b5:96:c7:
76:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:52:F0:BB:F4:7B:28:67:E1:00:40:AB:2E:B5:4B:8D:32:1D:0E:2D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e33342e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.34.0/23
Signature Algorithm: sha256WithRSAEncryption
23:9b:60:02:3a:4c:bf:6c:09:7e:de:95:b7:80:49:28:d6:b4:
d1:38:9d:bf:03:bc:9e:de:e7:44:ca:9c:f6:88:17:b4:c8:bf:
c0:35:9d:40:57:91:a8:5b:37:1e:e6:0d:42:6e:e2:d5:f1:3d:
41:01:7d:29:c0:dc:97:df:39:4d:53:65:92:7b:69:9f:b5:ea:
65:1e:1a:aa:5e:49:49:da:0f:80:42:dc:4c:f6:72:22:77:12:
96:34:4a:dc:ec:3c:9d:15:60:2b:35:76:d2:c5:d0:81:cf:58:
d1:c7:92:99:96:1a:a1:86:f0:5a:7e:ad:ad:57:cc:c4:48:6a:
5e:3f:08:04:4f:31:cd:09:fd:e8:86:5a:c0:7e:5a:bb:04:de:
56:f9:c0:ed:17:88:1c:30:ad:42:cb:d3:f7:5f:cf:ed:de:88:
63:bc:c1:6a:de:5d:9f:0a:3b:59:cb:10:75:46:b2:80:70:f2:
3a:ba:6c:13:a6:2e:2c:d4:0a:97:2d:5a:a0:c2:dd:0c:c7:b8:
d1:09:56:dc:9c:e4:d2:fe:16:fe:c1:b2:70:e6:cf:01:27:9f:
e5:1b:0d:7a:b8:5e:7c:04:c6:1d:93:ff:00:35:9a:59:9c:d3:
82:b9:a8:3a:0a:a7:25:74:cf:2e:36:ac:c4:f2:17:13:b3:8b:
d7:5a:1f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:04 2024 by rpki-client on console-fra.rpki-client.org