Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37382e302f32342d3234203d3e20313336373837.roa
File: 38322e3134392e37382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: bRVggbdePZAReFHlLGvCVA2/ufMgDqccFwQGDMFA1E4=
Subject key identifier: CC:70:3D:0E:A8:01:28:22:94:1B:62:20:6D:52:D9:D1:47:A3:4A:A5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 49C54033EF1E18972B7FECEA21F46E7BFD9C0EA9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37382e302f32342d3234203d3e20313336373837.roa
Signing time: Tue 30 Jan 2024 19:25:47 +0000
ROA not before: Tue 30 Jan 2024 19:20:47 +0000
ROA not after: Tue 28 Jan 2025 19:25:47 +0000
asID: 136787
IP address blocks: 82.149.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:c5:40:33:ef:1e:18:97:2b:7f:ec:ea:21:f4:6e:7b:fd:9c:0e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 30 19:20:47 2024 GMT
Not After : Jan 28 19:25:47 2025 GMT
Subject: CN=CC703D0EA8012822941B62206D52D9D147A34AA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:38:b9:15:38:55:42:d8:4e:0f:4b:8e:64:
63:17:86:7a:1d:fa:af:81:95:d2:eb:64:da:a8:11:
31:69:d5:c2:66:08:40:96:9c:6f:ee:3b:6e:17:fc:
9e:12:62:2d:02:41:7e:58:fb:d4:dd:5e:96:59:37:
dc:3b:da:1c:4c:62:ea:dd:6d:0c:e4:33:4b:38:56:
de:4f:c7:13:6f:65:bd:56:42:49:bd:aa:41:c8:01:
48:d4:81:2c:0b:8c:e5:aa:36:79:b6:72:95:80:68:
78:bc:d2:27:19:ea:ef:cc:36:65:4c:06:3a:fc:60:
20:0a:d0:d2:c0:ba:3c:e0:70:2b:aa:31:30:e6:12:
4e:b7:3c:79:43:8b:53:28:55:5e:0b:bf:ad:c5:4d:
0a:6f:ae:e0:80:a8:0b:05:4e:b8:21:22:05:a7:23:
af:5c:23:80:c4:fe:0a:78:c1:58:ef:54:51:30:fa:
dd:52:e1:46:ac:bd:f3:fb:2a:09:77:6f:52:03:de:
0d:7f:8a:6c:be:38:62:dc:42:7e:ae:84:62:11:2f:
f5:49:b5:19:6f:14:42:83:99:4a:c7:34:0a:c8:e5:
ad:70:0a:ba:b9:40:f4:42:b6:b4:dd:87:99:98:14:
8a:ee:df:15:d0:13:68:60:4f:a7:e1:f2:90:9d:b3:
10:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:70:3D:0E:A8:01:28:22:94:1B:62:20:6D:52:D9:D1:47:A3:4A:A5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.149.78.0/24
Signature Algorithm: sha256WithRSAEncryption
69:06:ae:d6:07:af:3d:ec:da:ba:c4:8f:3d:ae:bb:82:b3:5f:
fc:f3:fa:42:3e:13:6c:fa:a9:b3:62:a8:26:73:bf:91:e2:76:
13:4b:5c:7b:61:23:1e:83:9d:9c:8c:e1:d7:e6:e8:f5:da:3a:
3e:4d:62:15:b8:d7:9a:6e:68:64:17:ad:fa:1c:68:11:b2:5d:
2e:ec:fe:27:84:81:85:95:b9:be:04:23:63:b1:09:b3:03:f8:
ee:e8:47:8d:2e:48:7e:3c:7e:65:4e:39:27:be:52:e8:00:7f:
81:6b:31:4b:62:76:a8:2f:70:fb:55:10:82:f9:03:18:9f:04:
32:f1:b2:21:4b:a6:db:c0:73:e3:6f:5e:0c:1b:d6:ec:e5:0b:
50:22:e8:a6:d6:b8:01:71:a6:ee:5e:69:a5:cc:52:e5:08:39:
64:8d:cc:c4:6c:0f:45:bc:ef:f1:8d:19:ba:8f:d0:6e:6d:e5:
40:82:06:d3:84:c8:f7:76:00:09:3b:dd:69:34:7f:96:51:63:
e2:bd:40:f0:6a:d7:dc:32:00:9b:c6:dd:ca:b7:a9:03:46:d1:
22:10:c5:26:67:3f:4c:03:7b:5e:84:97:95:4c:ae:b4:90:b8:
26:de:c0:cd:57:6d:ad:75:87:61:e8:e3:70:c6:73:dd:ce:ca:
a6:a4:ce:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:04:28 2024 by rpki-client on console-fra.rpki-client.org