Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3136382e302f32322d3234203d3e203437353833.roa
File: 38322e3138302e3136382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: cDq29V7akeRCrwzmhjeDbkGKtZT2WW7+wx0IrroYLEM=
Subject key identifier: 94:35:BC:BF:5C:BA:3A:45:B7:0E:28:B7:F3:F5:EF:EB:95:2E:6B:95
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5F9145D87E94B3D56A3AB22496CB6442287262D0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3136382e302f32322d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:14 +0000
ROA not before: Mon 26 Feb 2024 08:48:14 +0000
ROA not after: Mon 24 Feb 2025 08:53:14 +0000
asID: 47583
IP address blocks: 82.180.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:91:45:d8:7e:94:b3:d5:6a:3a:b2:24:96:cb:64:42:28:72:62:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:14 2024 GMT
Not After : Feb 24 08:53:14 2025 GMT
Subject: CN=9435BCBF5CBA3A45B70E28B7F3F5EFEB952E6B95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:63:61:3c:99:24:22:0e:57:0c:4a:b4:4a:f3:
98:3c:4e:ff:de:9d:15:4c:8a:89:fb:53:8f:1d:06:
50:a7:e6:b3:d2:80:86:2b:a4:85:aa:86:2a:24:6b:
28:9b:88:44:65:c0:32:5f:42:d2:2d:ed:a7:3b:d8:
f3:61:a1:cd:1d:c7:5f:82:b8:d7:26:95:76:65:05:
ca:07:8e:a6:d8:32:cf:46:bb:83:98:5f:99:c9:ad:
f3:dc:e4:43:cd:c5:c6:00:a3:8e:0f:d6:cf:24:56:
c9:4a:b1:ef:33:0a:f6:7b:dc:ce:ae:1e:d7:cf:59:
03:6a:c9:4e:80:9f:73:4f:23:34:19:93:12:1f:31:
38:1a:8a:c1:b7:7a:2b:3c:9e:6f:6f:17:71:cd:f1:
e3:1c:0a:ec:10:e8:df:59:d0:d9:4c:97:c0:b6:52:
4f:25:86:0c:41:e2:c4:51:17:6e:4f:47:9d:1f:33:
9d:ab:36:ff:5c:74:da:4e:48:83:2d:af:d7:99:df:
fa:0a:ec:40:64:44:4a:0b:35:cf:e9:6b:87:6f:3b:
17:f8:f0:14:6c:79:39:d8:5d:76:07:d4:1e:ba:8e:
51:4d:b4:21:12:d5:21:c7:41:2b:f6:d9:00:a3:11:
85:3b:fe:eb:bc:fa:13:be:25:9e:b7:cf:be:47:6d:
24:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:35:BC:BF:5C:BA:3A:45:B7:0E:28:B7:F3:F5:EF:EB:95:2E:6B:95
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3136382e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.180.168.0/22
Signature Algorithm: sha256WithRSAEncryption
57:10:21:8b:09:bd:3a:7e:75:d2:9e:08:a0:68:85:9d:75:d3:
57:45:d4:d4:a5:e2:70:8e:d4:a8:dd:81:e0:a6:ed:a2:6e:e4:
cf:bd:2c:22:20:a6:61:d3:87:eb:d5:1f:d8:3b:1a:90:39:f6:
cd:53:11:3e:75:33:1d:e0:6c:40:17:8f:f3:c9:2b:6a:00:86:
0d:26:22:ed:47:ed:8b:68:eb:6a:ef:04:36:d4:31:55:52:59:
06:60:5d:6c:2f:f9:0e:b4:69:e3:f1:0a:00:fa:b5:86:25:d7:
44:71:54:b1:d1:9b:b3:2f:5d:f8:a3:59:e0:c8:04:03:bf:06:
61:19:f4:a5:98:43:5e:00:b9:59:f2:e5:c9:8f:f1:bd:74:c5:
80:8a:d8:b4:26:cc:9d:83:b5:11:ce:81:ab:8b:8b:f8:4b:5b:
3c:57:ae:da:eb:88:b1:c7:bd:cb:10:f5:c4:ed:4c:7e:b3:eb:
e2:1a:c8:ee:4a:e6:c2:2b:0b:75:af:cd:ba:f9:ab:70:22:67:
3e:e1:c3:72:78:8f:4a:1f:ab:d3:db:3a:f7:f6:aa:a6:f8:f5:
25:52:93:a5:06:2f:d1:b3:ed:8f:dd:29:eb:2f:81:ad:30:42:
a1:2c:94:04:92:8f:55:dd:30:a3:86:f0:bd:4d:b0:45:58:b5:
0a:d9:10:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:12:37 2024 by rpki-client on console-fra.rpki-client.org