Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37392e302f32342d3234203d3e20313336373837.roa
File: 38322e3139372e37392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: DTeq1es30nTVf/my9b6r94OBrMznPu55b7eruyViLNQ=
Subject key identifier: 76:B5:36:F1:18:06:95:66:C4:19:85:EA:9A:F1:45:0F:37:7C:96:9C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 442AADF098531E38CC2E0495BBE1B8399660AD56
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 26 Jan 2024 19:02:47 +0000
ROA not before: Fri 26 Jan 2024 18:57:47 +0000
ROA not after: Fri 24 Jan 2025 19:02:47 +0000
asID: 136787
IP address blocks: 82.197.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:2a:ad:f0:98:53:1e:38:cc:2e:04:95:bb:e1:b8:39:96:60:ad:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 26 18:57:47 2024 GMT
Not After : Jan 24 19:02:47 2025 GMT
Subject: CN=76B536F118069566C41985EA9AF1450F377C969C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:22:2e:1e:ca:7a:c4:af:e9:ea:8a:bf:29:
54:2a:f3:3e:3c:ab:5f:e4:ad:56:b6:68:a3:a7:66:
04:fe:5a:2a:72:6b:ff:17:7b:3a:f6:09:ae:2a:a3:
8e:41:f8:80:63:91:f8:e2:c5:84:74:e1:98:32:36:
6f:23:53:42:ed:c8:a1:6d:f2:eb:0a:c9:21:6d:3e:
38:e6:15:16:50:d1:3c:33:13:61:9b:73:59:a9:a9:
98:7a:1f:b5:61:c1:93:49:25:51:6c:f4:16:44:7c:
2d:fd:7b:0b:24:f2:4d:ca:05:cd:4a:b5:07:17:26:
02:9e:3c:87:51:08:47:d0:47:a4:d8:40:fb:d6:46:
f9:89:09:e8:c2:bc:02:0b:6d:be:c6:75:f4:14:e1:
07:08:b6:95:52:8d:65:5a:10:1b:69:31:0e:3b:a8:
a8:3d:f6:30:e5:7f:a1:9b:89:d9:2e:7d:b0:a7:d0:
b6:ae:c6:e4:76:f0:83:93:ff:78:ff:f9:d8:0b:4b:
75:74:28:a6:13:69:67:5f:f7:8c:a5:27:42:3c:cf:
86:67:b6:a7:ea:41:ab:3f:12:fc:76:64:52:cc:c9:
94:36:ff:96:7c:0a:ee:f7:88:18:4f:07:1c:a2:a2:
6a:17:b7:49:7e:ba:75:1f:36:72:25:0a:15:71:47:
83:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B5:36:F1:18:06:95:66:C4:19:85:EA:9A:F1:45:0F:37:7C:96:9C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.79.0/24
Signature Algorithm: sha256WithRSAEncryption
94:b4:38:af:5f:37:87:a7:1b:5d:4a:09:14:b6:fc:b5:b0:78:
f3:e3:c8:c3:13:af:81:98:a9:0e:9c:d0:67:c1:77:07:0d:44:
06:2c:bb:81:ff:40:ad:47:83:e9:48:21:b9:79:1a:9a:a8:e2:
f8:89:aa:e3:24:8f:66:27:71:bd:8a:37:99:91:75:ce:57:3c:
29:de:32:ce:01:5c:62:ef:cd:4d:e9:ad:a3:d5:fa:b7:8b:72:
0c:ce:55:a8:a8:6b:1c:3d:41:5f:ea:3a:6c:06:36:ec:c2:bb:
2e:2a:6c:0b:cf:7c:72:4b:7c:77:39:92:24:54:b2:89:8b:cb:
2f:df:fb:94:49:43:1b:2b:76:e6:86:d1:64:e9:5a:13:a7:ca:
e5:98:d8:2c:bb:b2:ae:4b:83:97:9b:b0:d1:eb:0b:23:58:5a:
59:b8:12:c4:08:bd:c6:c5:9d:db:df:8f:96:46:13:43:49:85:
b2:ca:09:c4:17:37:22:32:58:85:70:74:82:23:52:29:3e:5e:
76:64:d2:7a:99:52:2a:84:d4:60:4a:8c:5c:7c:b8:0a:01:b0:
b8:22:fb:16:df:ce:88:e0:be:40:0e:68:f5:07:dc:b6:a8:87:
92:86:f2:cc:b8:c1:80:3b:3f:74:86:6f:e7:ca:a1:f9:31:82:
fb:45:df:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:32:59 2024 by rpki-client on console-ams.rpki-client.org