Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e32332e302f32342d3234203d3e20323036323833.roa
File: 38302e37352e32332e302f32342d3234203d3e20323036323833.roa (raw, json)
Hash identifier: 6B7uxI2gPrDCkw8iAGnpwEvh1p+YV03KL5eR23QrJbw=
Subject key identifier: D7:6E:9C:D8:36:75:73:80:A5:0C:19:CB:45:18:90:F4:3E:41:AA:AA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4D0601FB9B076E1DC1FC5A59DAF390B36CCFC9F7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e32332e302f32342d3234203d3e20323036323833.roa
Signing time: Tue 02 Apr 2024 09:28:07 +0000
ROA not before: Tue 02 Apr 2024 09:23:07 +0000
ROA not after: Tue 01 Apr 2025 09:28:07 +0000
asID: 206283
IP address blocks: 80.75.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:06:01:fb:9b:07:6e:1d:c1:fc:5a:59:da:f3:90:b3:6c:cf:c9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 2 09:23:07 2024 GMT
Not After : Apr 1 09:28:07 2025 GMT
Subject: CN=D76E9CD836757380A50C19CB451890F43E41AAAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7b:28:0a:fe:2d:39:52:b2:db:96:59:31:26:
9d:b7:72:0a:83:94:72:f4:63:f4:ed:31:a6:ce:37:
47:04:45:0d:85:ec:df:d2:bf:9b:ab:a1:89:32:09:
e5:55:49:d9:3b:59:fc:dd:11:b1:23:42:91:a5:19:
2b:31:b2:c0:5f:36:77:5e:62:bc:12:43:a2:3c:de:
f1:9d:ae:eb:ac:b4:08:fb:ca:25:59:4a:7a:42:ee:
01:58:9d:d8:d2:1f:bc:83:04:07:ed:1a:47:f6:12:
9a:b8:95:5e:e7:f9:f9:ab:b1:74:61:dc:5d:84:38:
30:4e:93:82:c4:c1:91:ce:83:ae:fd:44:cc:64:5a:
f0:77:6d:5e:a2:33:3a:6c:c9:dd:bb:4d:b2:7c:19:
67:2b:2a:f2:bc:de:e3:b2:d1:6d:22:e3:00:5c:74:
f7:99:b7:67:c1:f3:04:6b:92:7f:16:90:93:93:fd:
b7:91:77:fa:e5:3b:09:55:2a:79:55:84:e5:b4:f1:
7b:ca:f3:47:98:5b:71:b9:f6:7c:5b:4c:cf:13:eb:
d6:a7:f2:a6:f5:d7:6d:d3:a4:c8:6c:51:f7:d0:0c:
b4:c3:52:ed:37:c0:a7:f2:16:42:eb:d6:6d:3d:8e:
69:04:a6:93:3d:81:b3:04:77:7b:47:d1:38:ee:a6:
78:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6E:9C:D8:36:75:73:80:A5:0C:19:CB:45:18:90:F4:3E:41:AA:AA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e32332e302f32342d3234203d3e20323036323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.23.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:9a:c6:5c:f1:9e:ad:78:bd:6d:8a:07:e7:29:89:84:9f:9b:
ba:83:93:97:bb:aa:23:ef:e1:67:c8:cc:83:f4:ac:73:54:40:
ef:73:c2:86:c8:15:96:1c:9c:51:89:52:7d:f0:05:f9:70:3c:
92:6b:20:43:14:48:35:e9:32:0d:60:84:ae:03:ec:f1:30:36:
14:32:60:e8:85:df:6d:53:b4:54:03:da:b4:18:aa:d5:21:82:
f0:79:0c:ff:10:71:66:50:d6:e4:90:e6:af:21:b1:e4:16:47:
50:31:a2:68:4e:30:ea:ec:0a:22:09:dc:35:6f:ee:df:ef:2d:
ee:0b:42:ad:d3:92:1a:f1:a0:86:f4:35:95:6e:35:db:85:9b:
3e:69:3a:58:6a:c2:ba:b5:2a:04:6a:26:0c:07:66:fe:ed:10:
8f:65:fe:45:20:7f:01:a8:b3:12:76:61:c9:62:ba:16:87:69:
1c:27:ec:c1:05:4b:a7:87:62:a0:fc:4b:f5:b8:e7:68:4a:d0:
c2:53:ef:1d:a1:45:63:13:03:75:76:48:53:d1:37:d6:a7:27:
bc:0f:26:43:e9:de:73:80:f1:bc:31:29:7f:ee:76:d8:4c:fa:
8b:f2:36:ae:66:3e:4a:11:dd:53:14:16:c2:8e:59:86:a6:80:
b0:15:bb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:29:46 2024 by rpki-client on console-fra.rpki-client.org