Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37362e302f32342d3234203d3e20313336373837.roa
File: 38322e3134392e37362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: sSMwx8IuLAugK1kdlPTXAjp5vKvOWfMtd5xynTbx77A=
Subject key identifier: 42:64:D6:61:98:84:CD:27:21:76:82:D7:BC:25:A6:4A:B5:32:49:8E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 60588BBF68E3D07FFCFCCA81333FA024F48F1C98
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37362e302f32342d3234203d3e20313336373837.roa
Signing time: Tue 30 Jan 2024 19:25:44 +0000
ROA not before: Tue 30 Jan 2024 19:20:44 +0000
ROA not after: Tue 28 Jan 2025 19:25:44 +0000
asID: 136787
IP address blocks: 82.149.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:58:8b:bf:68:e3:d0:7f:fc:fc:ca:81:33:3f:a0:24:f4:8f:1c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 30 19:20:44 2024 GMT
Not After : Jan 28 19:25:44 2025 GMT
Subject: CN=4264D6619884CD27217682D7BC25A64AB532498E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:5c:8d:f4:7c:9f:23:b0:fa:50:5f:0c:f1:
89:ff:ac:ff:d9:2b:54:51:45:9d:6d:50:30:b2:6e:
91:52:8e:ff:5a:c1:0a:0e:f2:27:7e:fa:bc:82:70:
4f:be:a0:20:42:f5:27:c4:d0:fd:89:6a:61:65:ed:
d4:9d:79:17:60:4b:23:7f:4c:20:d6:2f:b1:5e:49:
d3:b7:86:f8:22:73:23:0b:63:76:b7:c5:5a:ef:39:
54:bc:8c:ac:bc:1b:15:9e:db:e6:93:55:90:f9:af:
6c:85:b5:77:6c:f1:b1:6d:55:a8:f7:fb:ab:e7:af:
c2:19:f1:64:4d:a4:c4:09:50:8b:4e:a9:b1:a2:92:
c0:76:17:84:03:46:21:fe:c9:09:df:a1:91:6b:9f:
77:c4:f7:76:ff:c5:40:9c:52:a3:24:e4:cb:69:70:
45:87:fe:0b:1c:58:9c:f8:fe:7e:d1:8f:7f:7f:16:
05:4d:08:16:89:7b:8e:b5:86:5a:28:b9:1c:89:a0:
d7:bb:53:16:6b:35:7f:4c:99:f1:dc:4e:ff:f7:c0:
b0:40:76:4c:fb:20:e1:e3:a7:26:29:f7:5c:78:51:
74:39:53:2d:e3:ae:38:f1:34:ba:33:20:34:b1:79:
5c:45:fd:8f:2f:f2:06:9a:57:25:9e:e5:5c:bf:cc:
9a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:64:D6:61:98:84:CD:27:21:76:82:D7:BC:25:A6:4A:B5:32:49:8E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.149.76.0/24
Signature Algorithm: sha256WithRSAEncryption
82:52:31:ad:82:b9:41:47:b8:c7:db:bb:25:1c:fa:eb:05:e7:
6b:d3:c5:f3:db:58:93:be:7b:29:cf:fd:cf:6d:67:09:6a:a1:
e5:a4:5d:0f:0c:d9:08:7d:e3:9f:12:2c:bd:28:39:e4:4a:82:
1a:b3:7b:56:d6:3c:fe:c7:c2:30:83:83:63:b5:9e:b7:9e:9f:
53:3f:fc:8b:04:2a:05:5b:cc:6e:b4:b1:2b:88:bd:43:91:33:
72:64:26:14:a2:f6:63:84:8e:d2:43:76:7b:3a:36:06:a5:b9:
1c:b6:2c:02:ce:6a:58:8e:53:ff:16:e3:1b:fb:9a:99:ab:b2:
58:c4:b6:76:71:df:de:45:7e:ae:07:d0:7c:3e:17:31:16:21:
a8:b5:d9:0e:9c:d6:89:66:96:2c:43:e4:5b:e2:2b:a7:2b:6f:
41:08:43:39:8e:c4:68:3b:ce:c7:0e:ee:84:29:29:d2:96:fb:
9e:48:c9:3a:c3:19:68:6e:9a:2e:c0:7e:f4:fd:b0:ec:b4:ac:
c1:68:ec:25:ee:33:62:c1:5f:75:58:65:0f:39:db:fb:a9:fe:
1f:c4:1d:31:56:68:f8:9e:b8:03:cd:80:8c:b0:01:4d:79:00:
e2:40:ed:74:05:30:67:46:af:14:d6:f2:dd:83:4c:5c:01:8f:
a0:b8:10:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:21:54 2024 by rpki-client on console-ams.rpki-client.org