Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37362e302f32342d3234203d3e20313336373837.roa
File: 38322e3139372e37362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: QWZnO0RYykPG3ROYmpaPYenxh2P1zd1Ru3is9MR6aMw=
Subject key identifier: 6D:1E:64:DA:0B:37:F5:1C:3D:3F:2A:96:38:98:E9:E8:3E:D0:67:2A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0EE4E5178B9388AF5C36CAE9F1849098FF2A4CC3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 26 Jan 2024 19:02:42 +0000
ROA not before: Fri 26 Jan 2024 18:57:42 +0000
ROA not after: Fri 24 Jan 2025 19:02:42 +0000
asID: 136787
IP address blocks: 82.197.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:e4:e5:17:8b:93:88:af:5c:36:ca:e9:f1:84:90:98:ff:2a:4c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 26 18:57:42 2024 GMT
Not After : Jan 24 19:02:42 2025 GMT
Subject: CN=6D1E64DA0B37F51C3D3F2A963898E9E83ED0672A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:24:d5:22:49:02:d8:59:38:2c:fa:ed:e8:c9:
55:0d:d9:d8:cf:8d:c2:90:6e:93:0f:42:63:dd:46:
8f:e7:f4:9e:ba:88:62:26:f0:b7:e5:85:28:06:b0:
ff:1d:3e:cb:ec:cb:76:90:50:ce:75:fd:ee:33:7c:
46:c1:0f:e0:d8:7b:f9:8c:c3:d8:26:cb:62:74:57:
07:a2:e1:96:a1:cc:1f:1a:fa:c6:98:d0:79:3b:fa:
94:8c:6f:c6:86:79:9c:28:9a:27:e0:6e:44:19:c4:
71:ba:7f:1b:50:16:60:13:91:4d:19:dc:40:ce:82:
46:d1:bd:3d:04:87:28:af:5c:06:65:5f:a8:bc:70:
c9:57:1b:bb:5e:5d:25:27:93:48:f7:7a:1f:64:20:
e6:8b:43:1b:56:08:87:f2:cb:1d:fb:ef:d9:70:03:
fb:29:58:b1:ad:75:10:c2:3c:ed:ac:89:40:e1:3c:
27:52:0f:ee:9d:04:6f:e1:2d:3c:de:87:ea:01:ff:
41:71:5e:a7:e9:d8:f2:85:b4:ee:7c:ec:a5:44:5c:
24:82:b9:be:4a:11:f7:a2:f5:49:28:44:5e:a2:42:
12:10:81:aa:b9:bd:9c:ac:77:d9:ad:4b:57:4b:0d:
4d:aa:70:a3:75:61:e6:d4:ea:9a:57:ed:69:f6:ce:
2c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1E:64:DA:0B:37:F5:1C:3D:3F:2A:96:38:98:E9:E8:3E:D0:67:2A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.76.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:ec:a5:bd:78:6c:92:86:62:88:0e:90:84:ee:50:21:26:3d:
2c:06:74:af:0c:34:74:89:6c:9f:ae:51:f1:57:07:f0:a4:fd:
71:6a:15:10:c1:b6:1f:95:46:bc:a0:10:41:63:f0:f1:43:62:
2e:3c:46:c2:d6:d3:cb:16:96:44:80:f7:d5:83:fd:a1:93:f2:
21:7e:a2:eb:90:1e:fa:4d:a2:4d:39:5a:58:2c:5a:4e:9e:0b:
2c:21:61:68:e8:d6:39:ac:d4:46:9e:42:4a:4f:5e:c1:77:e0:
6d:55:3f:d9:8c:0a:67:28:d7:6e:f3:2a:8c:4c:85:5d:6d:5f:
74:b9:99:24:2f:ab:07:6e:9e:b8:4a:da:9e:c4:ed:92:1d:da:
3f:9d:fb:2e:95:48:5b:7d:ef:0f:3b:70:ab:ae:27:77:cd:ba:
88:37:4b:11:fa:5a:1d:1a:da:8e:cc:b4:be:00:4b:3c:e9:5e:
d7:ba:f3:4e:2d:14:db:23:11:9a:9c:b4:40:40:c8:23:b9:a2:
3a:7c:2b:e8:0c:5f:c4:26:2f:80:21:3e:74:a0:a6:9c:fe:4d:
75:7c:c8:8d:38:5d:91:09:20:ce:6c:81:49:2d:dd:c4:5b:80:
c8:3d:0e:fc:a5:78:c2:d9:a0:65:f1:ad:99:45:c1:dd:db:20:
d6:b7:4c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:32:59 2024 by rpki-client on console-ams.rpki-client.org