Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3135312e302f32342d3234203d3e20313336373837.roa
File: 38322e3138302e3135312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: DM+cky22yx0/nzKwHUQl7wAd+/6xnLEUvkYXgpr1oqI=
Subject key identifier: 85:EC:3A:7F:F7:A9:4F:1B:99:57:67:CF:25:D2:79:A5:F7:88:FC:32
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 32CB963337801FE0FC0D99EECEDF9D2B4F2F2B2F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3135312e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:13 +0000
ROA not before: Mon 26 Feb 2024 08:48:13 +0000
ROA not after: Mon 24 Feb 2025 08:53:13 +0000
asID: 136787
IP address blocks: 82.180.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:cb:96:33:37:80:1f:e0:fc:0d:99:ee:ce:df:9d:2b:4f:2f:2b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:13 2024 GMT
Not After : Feb 24 08:53:13 2025 GMT
Subject: CN=85EC3A7FF7A94F1B995767CF25D279A5F788FC32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f8:3b:db:96:f3:84:f9:77:ae:41:04:6c:9e:
10:a8:8b:24:b6:4a:27:6c:db:70:17:15:f9:b1:6e:
ca:13:84:29:b1:a7:ce:90:54:a4:c2:86:33:b9:cc:
48:4e:14:af:86:c1:4b:7c:ae:df:05:90:a7:18:6d:
8f:c7:67:8d:40:a7:4d:99:bb:03:69:4c:81:4e:76:
d2:a2:ec:d0:1c:49:e4:cb:72:82:40:da:ec:ec:ba:
04:a4:cb:0d:b1:4d:b8:96:90:d8:d9:7a:1f:db:77:
1d:dd:59:0a:55:98:a0:b8:2b:c8:ba:15:62:5d:fb:
31:d5:a3:f5:ca:c4:1b:a3:1d:93:ef:8b:47:13:26:
f2:10:1b:fe:79:35:96:87:f5:41:9d:b8:d4:52:e1:
f2:2d:fa:f3:03:95:ca:ea:68:62:17:dd:e4:ed:87:
39:39:50:cf:9b:2a:f0:7e:53:94:93:ac:e3:89:5f:
e0:36:c3:d6:6d:bb:2a:c7:74:52:9d:6a:be:8e:f2:
3c:f7:d1:6d:85:f3:c1:ef:3f:59:db:c3:9c:0b:f6:
a9:28:0e:fc:ef:28:e9:be:0a:b1:ff:0e:86:af:70:
41:a1:95:c0:35:4f:f9:fb:e4:7a:c5:df:28:ab:e0:
08:dc:a7:7e:b0:c2:e1:2e:fd:ef:c2:56:d1:e9:07:
71:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EC:3A:7F:F7:A9:4F:1B:99:57:67:CF:25:D2:79:A5:F7:88:FC:32
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3135312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.180.151.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:b6:ee:7b:6c:27:1a:f4:7d:a3:48:7e:2f:57:8e:cd:2a:8e:
7e:5c:2c:ab:cb:5a:59:ff:1d:31:5a:44:32:04:e3:96:21:b3:
6f:19:b3:73:5d:c0:ca:f6:16:9f:0f:6f:c7:43:b8:bc:2a:f3:
de:75:88:bc:6d:8c:88:22:73:ae:3e:75:0e:07:5c:18:0b:e8:
9b:d2:41:77:c4:9a:35:cf:a0:52:33:fd:c1:78:6d:88:da:6e:
df:3f:c0:d8:61:fd:20:0d:57:ec:60:4a:1b:cd:ab:da:88:7b:
04:c0:e2:6e:79:79:f0:59:dd:49:4e:b9:98:30:30:78:56:c7:
d1:cd:4a:eb:8b:b8:22:70:24:ae:b9:9b:a0:9e:78:52:a5:b0:
aa:7e:08:ee:d5:10:72:a2:5a:4d:8d:90:cb:de:9c:80:d6:a1:
74:26:64:1f:43:ed:0d:05:ff:19:fa:77:c2:60:29:10:0b:60:
c5:09:e0:09:4c:f4:ca:ee:97:63:47:32:3b:81:b2:e1:dd:92:
0e:12:f8:ca:a7:04:e5:b8:5d:17:84:37:3d:4c:50:25:1b:f4:
a7:75:9e:f7:5e:9b:fd:9b:24:cc:90:69:d2:f2:75:06:25:20:
95:78:04:56:68:be:11:f7:0b:a0:41:0b:75:bc:ad:3c:8d:75:
1a:00:ac:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:04:28 2024 by rpki-client on console-fra.rpki-client.org