Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e37382e37332e302f32342d3234203d3e20313336373837.roa
File: 37372e37382e37332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 6YDGY63Qu6+ThTkB4ezxw2p/AGyUBJY56DjBsWdHdGg=
Subject key identifier: B7:46:6A:D7:BD:58:2C:F1:89:0A:E4:6C:9B:1C:E4:60:AF:01:2D:F8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4612C8A456CDED4A33E9447071E36E5651BD3EEC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e37382e37332e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:27 +0000
ROA not before: Mon 26 Feb 2024 08:48:27 +0000
ROA not after: Mon 24 Feb 2025 08:53:27 +0000
asID: 136787
IP address blocks: 77.78.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:12:c8:a4:56:cd:ed:4a:33:e9:44:70:71:e3:6e:56:51:bd:3e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:27 2024 GMT
Not After : Feb 24 08:53:27 2025 GMT
Subject: CN=B7466AD7BD582CF1890AE46C9B1CE460AF012DF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:46:b8:bf:c5:40:86:29:0b:2a:d5:07:30:de:
a5:37:f7:2b:92:23:51:93:24:20:56:0a:f6:04:0a:
f3:a0:8c:de:7b:a0:19:b1:c0:36:fa:d2:15:10:ba:
46:45:f7:74:cc:df:e3:e2:76:e6:53:b8:ea:e6:06:
0e:78:18:f7:cd:d9:5c:dc:74:18:5f:5d:32:58:1c:
33:79:e3:cc:3a:d4:0f:52:d7:eb:93:a8:4f:82:10:
48:f4:32:09:b8:d5:fc:f8:6d:25:16:3d:c2:94:25:
e6:1a:f7:0b:60:ac:df:8a:ca:c7:e3:78:c5:ee:de:
e9:6b:9f:3c:c8:2f:85:56:35:50:a9:67:8a:77:ab:
ba:42:b2:2c:4f:2a:df:bc:ac:eb:91:b7:4a:d7:b5:
29:05:5e:87:73:48:f9:d8:2e:87:79:d0:13:1b:05:
1a:40:e6:7d:52:0e:bb:1b:b0:42:7c:01:40:86:97:
67:33:0b:a8:32:c6:a1:e3:82:96:a2:5d:6d:5e:eb:
08:d6:46:4d:b5:80:b5:33:17:ce:77:f4:79:83:2f:
1a:1f:77:47:94:e2:40:c5:35:eb:d4:14:91:2d:5d:
34:81:db:db:eb:25:ef:e6:ac:03:99:52:9c:0e:b2:
25:bc:d1:1d:60:40:36:31:91:3f:95:30:07:a0:f7:
7b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:46:6A:D7:BD:58:2C:F1:89:0A:E4:6C:9B:1C:E4:60:AF:01:2D:F8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e37382e37332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.73.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:6f:d9:73:24:22:f7:47:6b:0f:eb:61:f2:fb:5f:41:99:35:
89:82:40:86:79:d6:d9:99:29:d3:5d:c0:7d:19:93:19:6e:0b:
41:92:75:3e:2a:7b:e1:0f:06:1d:63:64:39:c4:d2:b9:f9:cc:
1c:77:91:6f:f1:24:0d:2c:2b:e6:91:20:a7:c8:42:5b:ba:67:
8f:3b:0b:9e:39:ea:c9:c2:ad:29:74:c3:21:93:df:46:c3:07:
1a:4c:15:9c:85:02:72:a2:3e:7f:35:c1:54:5f:ec:72:d2:16:
72:7f:40:4d:43:2b:8b:85:27:c0:fb:2f:d6:46:6d:76:c3:6e:
2a:38:81:13:84:32:97:51:99:15:49:94:9c:e4:83:c2:2f:23:
a1:6f:92:6a:9a:51:8f:b7:81:97:3f:b7:ea:da:06:06:5a:ba:
c9:06:e0:2a:a5:a0:7c:9b:d9:55:17:86:dc:40:90:4e:19:9d:
9c:b1:58:67:3b:32:19:a0:88:cb:16:e2:9a:1a:23:d0:0c:1b:
5c:d5:53:10:d6:92:d8:28:ec:4a:c5:db:32:7d:08:2a:ff:c6:
3a:8b:43:4f:ca:3d:16:b2:00:4e:19:c7:3e:30:4f:40:ce:80:
b4:38:71:f7:41:a0:06:c6:d6:02:a6:f7:f1:e2:10:21:c2:31:
86:7d:0a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:04:28 2024 by rpki-client on console-fra.rpki-client.org