Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e32312e302f32342d3234203d3e20323036323833.roa
File: 38302e37352e32312e302f32342d3234203d3e20323036323833.roa (raw, json)
Hash identifier: eBlw5dMjR+XU/0Miyd00BH4zDZV6pSTYj3BffvvneNQ=
Subject key identifier: 8C:32:35:23:B1:A4:1B:FC:E1:DA:AC:B6:43:97:9E:C7:69:46:FD:1A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 40C48983BA37657B9BBBA0819B1E0F7A73F5668D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e32312e302f32342d3234203d3e20323036323833.roa
Signing time: Tue 02 Apr 2024 09:27:58 +0000
ROA not before: Tue 02 Apr 2024 09:22:58 +0000
ROA not after: Tue 01 Apr 2025 09:27:58 +0000
asID: 206283
IP address blocks: 80.75.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:c4:89:83:ba:37:65:7b:9b:bb:a0:81:9b:1e:0f:7a:73:f5:66:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 2 09:22:58 2024 GMT
Not After : Apr 1 09:27:58 2025 GMT
Subject: CN=8C323523B1A41BFCE1DAACB643979EC76946FD1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a3:45:d8:54:eb:a6:fd:cb:3f:b0:ca:cd:f5:
58:e6:2c:57:b9:97:24:9a:53:48:04:54:fe:8e:78:
96:c0:a7:0a:a1:25:db:46:93:e5:d2:13:50:6e:86:
ad:50:02:58:f0:de:ee:59:c9:38:a3:25:90:2d:fb:
42:75:d1:19:2e:e1:5a:ca:95:dc:1e:e7:af:19:84:
f5:06:e3:ac:4b:b9:50:8c:d8:0d:a0:af:4d:98:bf:
53:5b:b6:ab:81:6d:a5:57:59:57:f4:bb:24:26:06:
8d:50:0c:86:98:8c:4d:48:6e:ca:00:3b:e2:d8:2c:
7c:7b:dc:4e:40:ff:4b:d7:c7:3d:86:41:a5:a7:55:
fa:8f:fe:bd:4d:37:e9:1d:a1:1b:41:7a:2c:7d:e1:
c5:e7:6b:50:fb:a8:26:47:18:39:8a:60:85:de:10:
7f:5c:ba:29:14:a3:7d:f8:1a:a5:06:15:26:37:36:
d6:0d:5f:10:d4:ba:21:10:16:44:69:63:ea:ac:32:
d8:5d:a2:19:47:b2:d5:4e:be:9b:f0:5f:39:8c:e7:
30:8d:37:ba:98:40:8d:2f:df:4a:a4:91:da:75:8d:
3c:7f:85:fc:e3:de:01:6b:5f:69:cd:80:56:4f:b4:
e4:c9:be:22:95:72:3e:d5:20:69:26:f5:7c:31:a3:
56:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:32:35:23:B1:A4:1B:FC:E1:DA:AC:B6:43:97:9E:C7:69:46:FD:1A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e32312e302f32342d3234203d3e20323036323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.21.0/24
Signature Algorithm: sha256WithRSAEncryption
19:74:97:98:e9:df:1f:db:66:af:d1:dc:4b:11:d0:3a:c8:09:
40:93:89:2a:83:58:a5:51:88:bb:eb:31:fe:fa:4d:aa:41:8a:
61:19:16:a2:0a:69:30:55:f6:b2:99:f4:f8:98:c1:f9:96:0a:
a1:2e:68:98:37:a9:a7:b8:1d:21:91:0f:64:31:23:cc:2d:61:
3e:6e:13:87:e6:db:c4:47:a2:cf:3e:48:80:e7:8f:96:d2:fa:
35:2a:a1:dc:b6:c0:4f:20:fc:90:99:e6:e7:10:c7:29:5f:bf:
cb:98:3d:fd:b0:c3:fc:be:bf:4a:96:f1:6d:6d:59:ad:01:34:
72:4b:2b:90:1c:9b:17:e0:66:06:94:d2:3b:12:7d:22:8e:b8:
5c:a4:a6:73:3b:f5:fb:08:07:54:de:01:f8:40:41:91:ab:4c:
53:d4:98:c6:7c:b5:b3:86:c2:94:f8:f7:de:ca:4a:cc:08:d0:
a7:af:fe:06:6e:95:93:2b:9d:50:06:7e:17:83:b1:75:04:6a:
f5:8a:ca:49:46:c6:1b:85:44:31:fd:bf:5f:e2:d2:8a:ef:cf:
7c:f5:5a:96:da:c4:af:69:0e:0b:0b:af:4e:6b:ce:1f:3d:4e:
ca:4b:c6:c7:eb:c1:b3:f3:8e:c2:4c:92:04:54:34:2d:0c:9f:
e8:07:22:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:35:07 2024 by rpki-client on console-fra.rpki-client.org