Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e31362e302f32342d3234203d3e20323036323833.roa
File: 38302e37352e31362e302f32342d3234203d3e20323036323833.roa (raw, json)
Hash identifier: MOStl3x97C3H93bO8QdaDiP2MAmV3DED82AZcCIwIww=
Subject key identifier: E1:82:A6:C9:39:16:3C:38:E3:7B:BA:76:3A:70:6E:2A:B5:EE:21:83
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 20B73B21B378A774985FAC8C81E65202F5ECE5C8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e31362e302f32342d3234203d3e20323036323833.roa
Signing time: Tue 02 Apr 2024 09:27:07 +0000
ROA not before: Tue 02 Apr 2024 09:22:07 +0000
ROA not after: Tue 01 Apr 2025 09:27:07 +0000
asID: 206283
IP address blocks: 80.75.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:b7:3b:21:b3:78:a7:74:98:5f:ac:8c:81:e6:52:02:f5:ec:e5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 2 09:22:07 2024 GMT
Not After : Apr 1 09:27:07 2025 GMT
Subject: CN=E182A6C939163C38E37BBA763A706E2AB5EE2183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:68:f9:24:6e:fe:5b:46:2b:01:6b:c4:52:9f:
26:fe:52:44:62:60:73:d2:ed:88:23:38:2d:9e:2c:
01:7e:92:86:64:1f:38:b1:6b:fb:bb:4f:07:45:37:
14:09:cb:32:8c:7c:b3:cd:50:0f:57:75:84:a7:e6:
12:33:24:fc:a6:b3:a9:53:07:84:0a:96:99:15:18:
b5:3c:20:60:d4:0f:9f:8e:53:07:1c:4d:e1:1f:8b:
73:74:09:fe:1d:8d:b6:e2:b9:1c:bf:f2:29:1c:51:
3b:d8:20:ef:60:02:3f:9b:b0:46:9f:42:55:79:cd:
79:d6:7d:5c:eb:83:77:6a:86:d2:e4:08:0b:9c:97:
64:61:2c:6c:39:8c:12:4a:cf:78:c9:07:e5:3a:6f:
93:75:61:4c:64:c5:c7:8d:17:71:6d:1c:ab:13:02:
d2:a3:69:9a:a7:70:f8:87:53:49:40:72:7f:ec:08:
96:e6:55:b2:87:6a:f9:f3:42:c4:a0:86:cc:c9:17:
2a:fd:f8:33:cf:7c:f1:fa:a5:55:15:03:fb:80:c7:
38:7e:6c:92:91:2e:19:b9:94:93:f9:77:49:63:98:
c5:bd:e9:81:da:01:ee:94:e8:ed:44:35:31:62:3d:
1b:3d:d7:55:55:c5:0c:30:b4:45:11:7e:11:ed:2d:
49:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:82:A6:C9:39:16:3C:38:E3:7B:BA:76:3A:70:6E:2A:B5:EE:21:83
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e31362e302f32342d3234203d3e20323036323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.16.0/24
Signature Algorithm: sha256WithRSAEncryption
69:a7:e6:c2:32:fa:64:fe:b4:1f:09:da:ac:1b:1d:0d:2f:14:
d2:df:a0:72:03:46:e6:bd:fb:4a:fc:b9:6a:81:8f:60:e0:d2:
6b:9f:15:04:fe:fa:b6:d2:75:04:26:6b:1e:f5:ee:83:f3:3f:
82:81:37:20:c3:9f:5f:ba:f0:03:3f:13:51:c2:16:18:a9:20:
12:97:4f:df:0b:65:73:4a:da:2e:39:f4:99:fb:36:fb:b8:42:
73:8e:da:ab:26:60:4b:10:84:6e:2a:f5:4e:c9:12:0a:6a:ca:
12:2d:72:fb:9b:ac:f6:7d:e1:3c:74:49:88:0b:a4:ef:ae:62:
44:61:2a:4b:39:4d:5a:66:70:ab:e6:4c:38:1e:eb:47:72:ce:
d8:49:d9:c9:70:89:d1:d1:c1:9b:4d:bd:1c:c5:51:1b:c6:fd:
7b:c3:32:e7:cb:b4:c0:2b:61:d7:bc:db:c2:d0:07:05:d0:3d:
7f:af:7e:84:ec:c4:44:2a:cb:1d:c8:90:5e:c6:7a:dd:d9:08:
0c:73:1b:72:cf:74:3d:f7:08:d1:fb:61:06:1e:b6:78:e0:c3:
54:96:db:2c:8f:36:26:ff:12:60:fb:e6:f6:79:fa:6e:34:48:
a6:1e:9e:ae:78:cc:15:af:86:a0:d7:83:19:2c:16:46:47:51:
c8:4a:3f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:35:07 2024 by rpki-client on console-fra.rpki-client.org