Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3134302e302f32322d3234203d3e203437353833.roa
File: 38322e3138302e3134302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: ENOaoA2lmv34LeyfBnzDB6QzsGMuN65UXAYgZQT17NU=
Subject key identifier: 1A:A3:62:54:2E:CE:F6:81:E7:F3:C8:7C:FE:6A:6B:AE:43:5F:DA:4E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 440DB505CB3D791F98C64A6B4050EA25C1BDE08D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3134302e302f32322d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:30 +0000
ROA not before: Mon 26 Feb 2024 08:48:30 +0000
ROA not after: Mon 24 Feb 2025 08:53:30 +0000
asID: 47583
IP address blocks: 82.180.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:0d:b5:05:cb:3d:79:1f:98:c6:4a:6b:40:50:ea:25:c1:bd:e0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:30 2024 GMT
Not After : Feb 24 08:53:30 2025 GMT
Subject: CN=1AA362542ECEF681E7F3C87CFE6A6BAE435FDA4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:4b:a9:5a:8d:e6:a7:33:73:a2:4f:94:4c:
f4:ef:bc:d0:a5:35:d6:cf:ed:db:e7:1c:70:4b:a1:
3a:0c:2f:84:de:14:9c:d1:01:69:5c:63:15:df:24:
8d:cb:ec:28:2c:1e:41:35:21:66:fb:74:a5:63:5a:
49:0f:d3:fd:f1:b5:f5:eb:8e:05:42:a4:78:5a:fd:
ea:b4:3e:d6:ce:0e:33:0c:bd:06:cc:a6:8a:1b:c9:
c2:7b:56:32:c8:63:90:54:2d:31:67:b9:5c:bf:51:
fd:19:59:81:00:dd:8b:b2:6c:be:1d:31:65:00:e3:
98:12:d4:b0:a1:4f:72:f8:01:cf:66:fc:2a:03:e4:
a0:7b:26:94:90:0f:8b:75:cc:cb:d9:8c:5c:cc:53:
23:cc:bc:1c:da:d3:60:3d:94:6e:de:99:48:30:99:
c9:cb:17:87:83:39:c1:d0:dd:40:69:c0:83:f0:c4:
3b:ca:c2:8d:d1:89:49:5f:80:6d:b7:2f:f7:30:cf:
66:88:41:ce:6a:d6:2f:25:4b:b0:3f:cc:b2:6b:7b:
cc:65:6f:05:a0:10:4a:1c:cf:2d:48:af:41:06:f1:
1f:ca:50:d5:62:7a:3a:ee:14:ff:37:aa:3d:da:ed:
56:6a:56:f3:00:08:68:0e:c1:15:42:fc:74:08:ab:
49:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A3:62:54:2E:CE:F6:81:E7:F3:C8:7C:FE:6A:6B:AE:43:5F:DA:4E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3134302e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.180.140.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:a3:25:9e:bd:25:1e:39:b8:1d:9d:7e:43:a2:4d:59:0a:bf:
4a:98:53:72:4a:47:88:3f:92:26:cf:9c:40:e3:12:61:c1:a0:
d4:64:a3:cb:68:c5:c7:c9:b0:f3:0c:ab:b0:b5:d7:3e:a7:ba:
5b:42:a3:b3:64:df:c7:7c:ef:3d:13:00:f8:d7:ad:91:1d:18:
51:cb:33:a1:72:2c:bc:cd:88:13:82:bd:04:2e:fd:b8:d7:c7:
2e:5a:c2:bb:27:8b:6e:fe:8c:2d:df:74:53:c2:65:56:32:b5:
86:27:fc:a3:a3:d4:cc:ea:f1:e4:3e:09:41:14:93:41:99:80:
6f:db:30:d3:f3:5d:37:69:4d:99:bc:15:0f:f9:dd:d9:1c:d9:
f9:b4:70:44:04:ea:b0:4a:3e:64:17:20:92:04:ea:af:70:ea:
1b:68:18:97:31:c6:f4:96:f5:52:f4:92:5d:f0:fa:c1:d1:d5:
20:2f:31:bb:4d:13:87:c5:ca:9d:c0:e9:ca:de:6c:c8:3b:6e:
3a:1a:48:11:98:04:3a:82:4b:f2:42:41:89:88:d2:37:ba:6e:
d6:4a:79:da:1e:b2:73:08:89:34:80:98:45:fc:ac:33:0d:d1:
c3:7a:3f:ea:11:cf:ea:81:f3:40:31:01:b6:37:a7:2b:74:86:
05:83:8e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 09:23:50 2024 by rpki-client on console-ams.rpki-client.org