Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e38322e302f32342d3234203d3e20313336373837.roa
File: 38322e3134392e38322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: SJoW0OTQHvP0uL5DnY19OSo2JrlSpdBJWpjY6fny4I8=
Subject key identifier: A5:21:B9:71:36:F4:2A:B8:B3:9F:A5:65:9B:0F:66:79:48:E8:26:50
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 76B7A07B3D6889642DB771EC0F6DFA95D1C00E2C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e38322e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 26 Jan 2024 19:02:39 +0000
ROA not before: Fri 26 Jan 2024 18:57:39 +0000
ROA not after: Fri 24 Jan 2025 19:02:39 +0000
asID: 136787
IP address blocks: 82.149.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:b7:a0:7b:3d:68:89:64:2d:b7:71:ec:0f:6d:fa:95:d1:c0:0e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 26 18:57:39 2024 GMT
Not After : Jan 24 19:02:39 2025 GMT
Subject: CN=A521B97136F42AB8B39FA5659B0F667948E82650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:b6:1c:fd:c1:13:c1:75:c8:9e:17:91:45:
11:aa:4f:b0:5d:6c:ed:4c:6a:8a:bb:9c:a7:19:b4:
1c:03:f7:0d:c9:1e:a2:f9:d3:1c:95:6f:dd:b2:6d:
5d:fc:b2:38:57:59:84:20:27:80:53:5e:cf:96:9f:
bd:52:62:05:5f:af:64:2f:05:a0:c1:de:0d:f6:95:
46:e7:cb:07:04:44:1f:26:1e:5b:ee:72:04:38:16:
05:58:f9:8e:58:c5:f9:cf:7a:aa:63:27:07:24:05:
17:ab:dc:c6:4a:b9:f4:f2:6f:e5:33:3a:1c:69:9b:
2f:04:c7:77:57:6d:63:33:6a:5f:6b:a9:a1:61:b1:
66:ab:ae:5e:e8:56:ea:fe:99:5c:cf:f2:86:e9:1c:
9c:bc:23:8a:76:e1:c2:b7:5c:1b:ba:ea:43:58:6a:
b7:95:0f:b2:ee:1b:f9:a5:0f:e4:a4:77:00:68:29:
32:9e:f5:32:8a:2b:e7:d2:24:d4:9a:90:7c:b3:00:
5b:bf:82:23:df:4a:ea:36:64:32:bf:31:80:14:20:
66:a0:e5:4d:da:a8:09:df:c2:ba:92:0b:5b:49:92:
5b:eb:ab:50:a7:10:c6:da:e3:4d:7e:6a:51:41:72:
a1:76:de:c0:8a:05:f7:fd:75:8e:c4:fb:09:91:50:
2e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:21:B9:71:36:F4:2A:B8:B3:9F:A5:65:9B:0F:66:79:48:E8:26:50
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e38322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.149.82.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f0:99:83:51:86:79:b5:b5:7e:3f:75:aa:3a:45:95:b2:79:
b2:33:fa:1d:be:ba:1a:b7:4d:99:b5:c7:ed:45:bf:8d:c9:8e:
03:fe:09:e3:93:81:02:b6:95:da:a2:53:73:b0:cd:99:a3:d7:
82:a1:c8:61:d1:8d:d7:32:40:4a:94:14:08:59:73:05:bd:aa:
cb:e6:0f:87:42:3e:16:39:5e:c1:50:7c:b2:61:e1:cd:54:b5:
7a:94:7d:53:fa:70:3e:63:c4:dd:b0:3d:95:2c:a8:bf:7d:80:
ba:72:6f:fd:ec:2b:f8:ee:cc:0f:c7:40:68:3e:f4:f4:1f:67:
1c:d4:e0:04:35:1b:e4:c4:0f:37:36:a4:06:af:55:90:9b:ef:
30:46:15:7b:2a:0c:7c:c0:d9:b3:d5:f2:82:c7:68:ae:c2:61:
16:bb:17:c6:ea:e9:d9:68:fb:d6:81:c4:32:d4:ad:c7:32:e1:
83:a9:b9:63:a2:bc:32:37:fd:a3:f4:21:84:32:86:f2:f9:b2:
0a:0f:84:88:f2:ea:56:e1:c1:1d:d8:1b:08:5f:d1:57:8f:be:
51:16:ba:3b:17:18:eb:d7:87:80:9a:9a:14:69:12:53:bf:d2:
e2:13:b7:a5:8e:bb:c8:74:d5:f7:0c:12:0d:53:e8:bc:27:54:
b4:a3:0c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:49:16 2024 by rpki-client on console-ams.rpki-client.org