Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3135352e302f32342d3234203d3e203437353833.roa
File: 38322e3138302e3135352e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: 60rDJhZao25RoUfGP0Wwy6tx+w9Lgf27oCravAQ3VMs=
Subject key identifier: 0B:FB:E8:00:D9:00:17:41:EC:85:DD:7F:AA:9E:2B:89:DF:78:5D:40
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 29790E58DA01CCAECB258518AA47384963C3213C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3135352e302f32342d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:24 +0000
ROA not before: Mon 26 Feb 2024 08:48:24 +0000
ROA not after: Mon 24 Feb 2025 08:53:24 +0000
asID: 47583
IP address blocks: 82.180.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:79:0e:58:da:01:cc:ae:cb:25:85:18:aa:47:38:49:63:c3:21:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:24 2024 GMT
Not After : Feb 24 08:53:24 2025 GMT
Subject: CN=0BFBE800D9001741EC85DD7FAA9E2B89DF785D40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bb:a1:a7:7a:39:91:c6:9f:d8:8a:b6:6a:56:
8b:d3:19:42:bc:7f:e0:fc:2d:fc:a8:b4:e1:88:85:
89:69:08:00:c5:62:37:69:80:52:39:0c:b9:9d:53:
db:7d:fb:75:e1:2d:b9:0e:ff:3d:66:7d:b5:09:dc:
1f:7b:6e:14:a1:93:1e:69:93:e4:fb:7f:9f:44:c1:
8a:ea:6d:7a:0f:b2:15:bf:a1:0e:38:8e:cc:ae:27:
a2:96:39:80:b4:ea:29:aa:28:5d:90:f4:7a:f0:70:
8d:f8:8d:0e:e2:42:42:dc:c7:e6:3c:e1:30:4d:e7:
14:dd:1c:fe:13:62:53:58:96:3a:2d:eb:64:0f:2c:
4f:c6:b6:d8:9c:8b:7a:5d:f7:be:eb:f0:4f:74:33:
41:23:9e:ae:5a:6b:94:75:80:f9:5b:16:a5:49:2a:
e5:35:ec:d7:5e:51:79:1a:c5:9f:ca:80:c4:78:41:
be:94:ce:cf:dc:3a:60:8c:0e:e9:43:19:a7:15:ce:
72:37:84:b5:65:c9:29:92:21:fd:59:df:da:da:76:
e4:a3:ec:94:81:34:f3:dd:94:db:6c:89:9a:b7:38:
07:ca:ba:9a:5f:8b:fe:f7:96:3f:8c:8c:19:3a:dd:
55:ad:4d:7f:fa:3a:68:44:47:f5:b5:22:0d:f9:1c:
6d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FB:E8:00:D9:00:17:41:EC:85:DD:7F:AA:9E:2B:89:DF:78:5D:40
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3135352e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.180.155.0/24
Signature Algorithm: sha256WithRSAEncryption
36:fc:24:72:eb:89:7a:b1:8b:49:2b:cd:36:9f:9f:67:81:66:
dc:12:ab:d1:e4:f0:31:a4:f1:9d:cb:9e:0a:22:98:36:15:34:
d2:c7:b0:12:65:18:f8:e1:4f:c9:b3:05:cd:13:d5:05:ad:3f:
c3:14:ab:c0:b2:c5:d2:8c:e6:5c:cc:21:6f:f4:0c:1a:5d:7a:
53:b9:78:ab:be:1a:6d:e4:2d:50:eb:bc:09:3f:c4:c9:3f:5f:
92:db:be:09:0f:b1:33:81:32:89:95:85:45:a1:bd:37:3a:6e:
41:ea:bd:5a:14:80:e8:67:1c:43:f5:fb:d1:c9:e8:0b:0a:e5:
60:57:ee:4b:fe:cf:8d:4c:38:46:14:6d:22:88:50:5d:a2:3f:
a6:6a:ef:27:21:49:9c:8a:fd:44:8b:28:5f:fc:16:3b:5f:c1:
30:57:83:47:92:3b:d6:f7:a0:ab:5f:23:40:1f:61:3e:73:ce:
b3:30:f4:99:37:13:e5:1a:c6:42:db:bd:18:6e:d9:fc:f5:4d:
3a:c4:ab:de:76:6f:bb:92:c6:56:6e:f2:e1:1b:c9:9d:b7:00:
54:ad:bb:9b:59:3d:81:95:ec:c3:fe:ab:ff:b5:29:20:a6:2f:
7d:34:e2:d5:bd:fc:2c:1c:60:74:58:bf:39:db:8c:f0:e5:03:
b9:eb:1b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 09:23:50 2024 by rpki-client on console-ams.rpki-client.org