Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3137362e302f32312d3231203d3e20323036323833.roa
File: 38322e3138302e3137362e302f32312d3231203d3e20323036323833.roa (raw, json)
Hash identifier: Am5ey+D+OrM6waqTJ1KvwYpmbtiHnghnIWWtAFrdVTk=
Subject key identifier: BB:93:E4:9F:E6:92:2B:78:B0:12:5E:7B:0E:D2:08:E9:D2:6F:2E:D5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0626E85AA088318C098D4BA735C62AF2927C91DC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3137362e302f32312d3231203d3e20323036323833.roa
Signing time: Tue 02 Apr 2024 09:28:40 +0000
ROA not before: Tue 02 Apr 2024 09:23:40 +0000
ROA not after: Tue 01 Apr 2025 09:28:40 +0000
asID: 206283
IP address blocks: 82.180.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:26:e8:5a:a0:88:31:8c:09:8d:4b:a7:35:c6:2a:f2:92:7c:91:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 2 09:23:40 2024 GMT
Not After : Apr 1 09:28:40 2025 GMT
Subject: CN=BB93E49FE6922B78B0125E7B0ED208E9D26F2ED5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:85:0e:74:f7:03:0a:95:a1:be:8d:6b:eb:
ed:b0:22:8d:41:10:7b:cc:b3:7b:5e:d6:98:fc:1b:
57:e3:2b:32:6f:7d:1d:1a:43:63:86:36:1b:e7:8e:
f4:ce:e3:99:ba:74:fe:eb:94:52:09:e4:b1:ef:19:
e1:7c:de:e2:1e:b6:4b:be:1c:df:19:56:f0:03:17:
df:cc:d9:a9:82:71:86:52:71:cf:dd:d0:47:38:d6:
ab:b8:6e:d4:c1:a5:18:f7:50:ca:1a:19:fb:b1:9f:
a3:78:c7:fa:aa:89:b2:e2:bd:92:10:87:93:f0:4f:
ec:6e:50:78:8a:f3:da:ad:9b:42:94:bb:0f:ae:70:
0f:4c:cc:77:3f:c2:9d:99:e4:f5:d2:ac:de:03:d5:
e3:bd:d1:a1:ba:18:64:c5:a2:9f:12:d9:40:d8:16:
cd:26:09:64:cc:8f:71:32:c3:ce:89:29:3a:c5:07:
98:79:c2:17:dc:6d:e7:8e:6b:76:63:c0:37:d5:03:
17:b8:94:28:97:1e:c7:17:52:21:5f:cb:6b:77:77:
21:17:08:54:f8:74:35:68:12:3b:f3:8b:4e:bc:ad:
cb:b7:13:94:34:a0:24:95:72:12:f2:91:f4:f2:36:
af:42:5a:8e:14:7c:89:b7:83:7a:37:ec:13:4e:30:
ce:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:93:E4:9F:E6:92:2B:78:B0:12:5E:7B:0E:D2:08:E9:D2:6F:2E:D5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3137362e302f32312d3231203d3e20323036323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.180.176.0/21
Signature Algorithm: sha256WithRSAEncryption
70:b8:d5:28:e5:e4:cf:ca:83:84:e9:d1:6d:e9:04:9d:b0:d8:
1a:c9:7f:1b:03:27:0f:4b:d8:d3:ef:f5:92:13:5a:2c:8a:a3:
60:94:81:84:c7:00:66:60:ef:0c:28:e1:5c:62:6a:ff:06:20:
d7:d3:29:97:11:57:99:28:19:7b:d2:4d:fa:ac:45:ae:f4:83:
e4:1d:f6:eb:9f:5c:e5:70:b7:b2:a7:35:af:09:ea:c0:01:23:
28:9e:06:72:92:11:fc:ce:9a:13:a1:38:c9:d6:45:99:aa:4a:
9e:b0:66:07:8b:76:6c:9e:5a:54:17:3d:c1:1d:24:ad:f1:f4:
c6:b7:2d:21:f6:4b:80:82:c0:ce:51:b2:75:92:54:18:ab:ab:
e8:ee:92:18:cc:b8:b9:d0:a7:00:50:1b:24:3a:cc:85:97:2e:
de:dd:03:6f:e0:e4:37:1c:c7:d7:64:81:ef:47:0d:6c:2f:08:
61:3e:c1:b2:92:1e:bf:df:09:bc:07:a7:48:a3:28:c8:a0:4a:
16:20:6b:88:ff:45:72:2a:7b:d8:6c:12:e1:ee:7e:50:89:0f:
d0:1e:d7:99:47:6d:70:c3:c2:2e:f6:da:ca:c3:a7:3e:cb:69:
1d:20:5a:8e:25:ee:00:a0:e6:d4:d5:26:f4:b5:b7:e8:8b:1a:
09:85:22:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:15:41 2024 by rpki-client on console-ams.rpki-client.org