Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3131322e3234302e302f32322d3234203d3e203437353833.roa
File: 38322e3131322e3234302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: CRcLCclH4+AyfDflX3bv1aKa8/w6v9ReW19hKWCwG1U=
Subject key identifier: 7A:8E:45:12:23:BA:84:D4:CA:80:F1:47:49:F6:97:9F:9C:CC:56:D0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 13BE564A2D2E501D23F78098EBDE46C3637654D3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3131322e3234302e302f32322d3234203d3e203437353833.roa
Signing time: Wed 26 Jun 2024 19:51:04 +0000
ROA not before: Wed 26 Jun 2024 19:46:04 +0000
ROA not after: Wed 25 Jun 2025 19:51:04 +0000
asID: 47583
IP address blocks: 82.112.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:be:56:4a:2d:2e:50:1d:23:f7:80:98:eb:de:46:c3:63:76:54:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 26 19:46:04 2024 GMT
Not After : Jun 25 19:51:04 2025 GMT
Subject: CN=7A8E451223BA84D4CA80F14749F6979F9CCC56D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:65:54:55:1d:cd:55:68:d8:ed:55:ae:0a:4f:
87:05:fb:af:8d:40:73:e4:1e:3c:dd:91:63:35:89:
c2:00:11:ad:cd:8e:f9:06:9c:03:8f:3b:8e:41:75:
6e:fb:4d:8f:d3:24:fd:52:a9:c3:3a:7e:70:4a:25:
60:ee:ff:24:eb:8d:95:18:a2:2e:a7:8b:fa:35:64:
f1:3d:f0:21:2d:5b:76:3a:37:2b:6f:75:10:ad:17:
0c:95:36:20:3f:6a:8a:b4:ae:77:20:75:75:95:8a:
17:58:c2:c6:bc:80:65:f2:b0:1c:c2:27:70:4e:2b:
8a:01:82:35:f6:2f:d6:2d:39:df:bd:e3:54:0b:e3:
d1:39:bf:d8:d4:a2:2b:0c:5b:49:76:df:14:98:6a:
36:dc:b3:55:2f:0c:e6:e4:74:51:07:bb:e7:f5:1c:
3e:2a:32:09:8c:a8:30:69:c6:af:a8:ba:c0:3b:b4:
e6:99:b5:fb:21:f0:15:e5:a2:5c:18:e0:78:aa:f3:
f7:72:30:0f:42:48:a6:51:5c:da:cf:ae:7d:47:b3:
90:27:9f:d6:15:87:5c:73:be:02:9c:46:23:54:65:
34:af:c2:cb:12:e1:51:34:c7:98:1e:de:2a:0b:8d:
09:b9:db:9e:f8:7b:77:c7:40:4a:e2:44:99:04:1c:
39:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8E:45:12:23:BA:84:D4:CA:80:F1:47:49:F6:97:9F:9C:CC:56:D0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3131322e3234302e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.112.240.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:48:d5:7e:d7:94:27:4d:44:3a:c3:26:de:a1:3e:b4:37:3b:
50:6c:70:df:e0:f4:f3:80:2c:03:82:69:9d:0f:75:b8:36:ea:
b0:15:4c:ee:ff:bb:a6:f4:30:d3:21:11:47:0e:6d:78:a5:49:
67:e8:50:35:aa:0c:d5:92:2a:c3:53:b4:53:e5:f2:4d:4a:2b:
90:23:f1:04:39:6e:d4:b0:61:92:a4:98:5d:01:b1:df:b8:ab:
bd:4d:a0:e2:97:36:a4:18:b2:40:3b:4a:c4:7f:59:49:10:cf:
f8:6e:72:8f:24:e9:13:3c:ac:d0:6f:e5:b5:24:e5:d4:87:31:
71:b2:d3:87:9c:00:8e:91:83:cc:dc:86:81:48:45:a8:9d:37:
da:94:16:38:cf:df:97:5c:4c:0e:84:5f:07:5d:e0:84:2a:a9:
fe:74:b3:f0:c3:be:d2:d4:6b:83:ec:68:08:b4:0c:d2:e4:11:
e7:68:bc:3a:45:da:e6:81:ec:4e:46:f6:4a:a1:f2:da:d5:e4:
bc:14:b1:ae:39:fb:69:93:e9:7f:93:8e:28:e9:3c:c8:25:e2:
0d:6b:00:01:f3:b3:5e:74:fe:be:10:14:dc:fb:be:16:68:c8:
fe:dc:07:40:2d:c0:72:13:51:ff:09:e6:3a:46:f9:25:94:ad:
39:98:6f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:06:16 2024 by rpki-client on console-fra.rpki-client.org