Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3131322e3235322e302f32322d3234203d3e203437353833.roa
File: 38322e3131322e3235322e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: grJkSC6w30+q/wwU+ZwwowsgUv3SucTFR9+yrEaO12E=
Subject key identifier: 1B:32:17:3C:5D:0B:47:99:88:1A:D8:8B:66:8D:14:82:0A:CE:F7:99
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7193047C5D678F036588BD5566009B25B326BE70
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3131322e3235322e302f32322d3234203d3e203437353833.roa
Signing time: Thu 04 Jul 2024 16:35:28 +0000
ROA not before: Thu 04 Jul 2024 16:30:28 +0000
ROA not after: Thu 03 Jul 2025 16:35:28 +0000
asID: 47583
IP address blocks: 82.112.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:93:04:7c:5d:67:8f:03:65:88:bd:55:66:00:9b:25:b3:26:be:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 4 16:30:28 2024 GMT
Not After : Jul 3 16:35:28 2025 GMT
Subject: CN=1B32173C5D0B4799881AD88B668D14820ACEF799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:a6:15:1c:89:a2:a7:0d:de:8e:39:bb:1c:
bd:90:4b:fc:2b:e4:8d:ec:1c:b8:36:c3:d7:60:e2:
f4:51:66:c4:8a:ce:8e:75:f2:9d:6a:37:b4:4c:fc:
17:c4:5b:a2:54:a5:76:ff:4f:94:54:e1:30:8d:85:
38:39:f9:27:52:d5:01:3a:56:06:1e:35:13:df:e8:
4b:e2:16:d1:1e:c5:18:bc:a5:a3:47:ea:29:e2:61:
84:75:00:2c:08:8b:94:31:cd:04:ca:55:58:e6:22:
61:21:12:55:70:08:bd:56:1d:c2:7b:a2:38:1b:72:
51:fb:b5:82:e9:57:1b:46:ff:c5:74:27:f4:cc:d6:
a2:34:a0:7f:2e:74:b0:f0:ff:10:93:bb:69:4f:5a:
ae:7e:29:5e:66:fa:5c:f3:b8:b5:59:3a:77:65:49:
ba:15:d2:82:7b:47:a4:cf:a8:f6:39:9a:ea:a3:a9:
0d:fe:ef:d7:d3:fb:16:2d:91:c4:e8:cc:6c:bd:c0:
80:71:c5:7d:bd:e8:8d:29:c1:b7:e4:72:8f:5a:a3:
a8:3a:c6:34:54:db:e6:86:19:13:2a:79:48:be:be:
65:7f:b6:02:df:70:69:fc:31:1e:66:53:10:d9:6a:
8d:cd:cf:da:ca:a4:1c:cd:be:e4:f5:1f:de:fd:95:
a9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:32:17:3C:5D:0B:47:99:88:1A:D8:8B:66:8D:14:82:0A:CE:F7:99
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3131322e3235322e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.112.252.0/22
Signature Algorithm: sha256WithRSAEncryption
82:5c:30:6a:7e:b2:77:e8:1d:29:94:db:8a:de:6c:c6:cc:9a:
6f:10:47:4d:0c:e4:46:46:3a:1e:5e:b2:fd:b3:70:ef:de:a5:
76:85:c6:0b:7d:9b:8f:a1:35:75:9d:9d:9f:5e:4b:68:2b:f8:
d6:a9:6e:50:35:92:e6:ab:bb:dc:18:0c:d2:0d:47:77:44:d0:
00:84:b5:0c:5d:33:30:78:31:73:8b:4a:5b:93:1d:c6:1e:66:
00:d7:ce:64:81:86:05:e5:f2:32:eb:0f:50:71:b2:8a:5e:d7:
81:60:9d:a5:f7:a1:b4:61:6e:bc:c8:04:ae:15:85:90:48:54:
21:67:7a:34:85:bb:3b:7b:87:71:9b:68:02:de:9d:e6:81:d7:
91:c5:76:5e:4c:23:9f:22:49:d7:e2:6f:41:d6:12:c9:70:bd:
d0:34:ce:a9:8f:10:af:7d:5a:07:09:ab:17:5c:c7:62:c3:87:
4d:c7:b2:6a:0b:5c:d4:83:57:49:66:a2:d6:d8:53:1f:04:9c:
36:a0:a2:b5:e9:bf:10:c1:ef:b3:3f:c5:94:99:23:e6:99:57:
1c:36:a4:8d:6a:76:d7:da:b1:08:c0:35:36:95:2c:da:ef:4a:
7b:2d:19:e4:12:9b:9d:5b:48:23:08:a0:a4:fd:9f:fb:e9:6c:
1b:4f:67:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:48 2024 by rpki-client on console-ams.rpki-client.org