Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3233362e302f32342d3234203d3e20313336373837.roa
File: 38352e3139302e3233362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: cGfsafvH2usbTtqa5qYPJPKLwWG58iW+LqbnlPrbsts=
Subject key identifier: E4:93:A4:13:81:5F:DD:79:F7:A7:CE:DA:60:15:B4:75:32:76:16:89
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 400075724195B52ACE08EA5EA3706B335D821391
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3233362e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 27 Oct 2024 20:05:15 +0000
ROA not before: Sun 27 Oct 2024 20:00:15 +0000
ROA not after: Sun 26 Oct 2025 20:05:15 +0000
asID: 136787
IP address blocks: 85.190.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:00:75:72:41:95:b5:2a:ce:08:ea:5e:a3:70:6b:33:5d:82:13:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 27 20:00:15 2024 GMT
Not After : Oct 26 20:05:15 2025 GMT
Subject: CN=E493A413815FDD79F7A7CEDA6015B47532761689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:24:9e:ad:bd:b4:0c:ff:32:d6:bb:71:a5:65:
95:8a:af:45:60:0a:40:9e:fe:3a:25:c3:2e:20:fb:
d2:da:82:74:4b:e5:38:cb:b7:3b:65:60:13:8c:26:
43:4f:63:1c:8a:41:32:cc:46:c8:52:30:f9:1b:f7:
28:d2:1d:fc:d3:87:9c:ce:4f:cb:a1:1c:ab:c3:d7:
3b:8f:69:38:1f:f2:0c:62:f2:db:9b:8e:5d:23:88:
24:e0:51:fc:6c:93:8d:f9:fd:e4:09:e2:71:76:73:
16:34:86:fc:76:37:7e:78:59:44:3d:97:0e:9d:51:
ea:dc:0d:f8:35:1b:ea:22:6b:65:05:87:d0:14:e1:
b3:a4:c5:42:3e:6f:8d:60:00:2f:58:08:24:c6:d5:
1a:18:e9:d2:3c:e3:94:9f:06:e0:e7:51:dc:1a:cc:
7f:77:92:73:46:90:76:63:b7:eb:35:6c:e1:d9:d5:
2b:84:af:f1:e1:3b:a4:23:6a:85:54:a1:aa:d4:77:
0d:05:7e:a9:21:d3:69:ce:a3:07:2e:0d:0d:9f:fa:
ad:02:4a:ff:a3:03:a8:a4:99:94:5a:b2:a2:ec:44:
d5:64:a0:14:9c:c0:12:83:4d:03:d6:8d:03:88:45:
d1:1b:9f:ec:c3:ca:88:be:74:57:0e:02:c9:24:c1:
db:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:93:A4:13:81:5F:DD:79:F7:A7:CE:DA:60:15:B4:75:32:76:16:89
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3233362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.190.236.0/24
Signature Algorithm: sha256WithRSAEncryption
55:71:36:85:a2:c9:eb:72:da:0d:63:d7:c5:97:a9:1f:a9:ff:
6f:f0:ec:36:db:d8:b0:d6:87:31:0d:79:1f:25:6d:d2:4f:8b:
34:3a:27:77:d7:83:a8:f0:6d:f4:8f:dc:92:6a:45:29:3b:4b:
e9:12:5a:9b:5a:de:01:d1:6e:43:f0:d9:d1:92:61:e0:0f:3b:
c9:26:b9:d2:39:97:28:21:d6:49:82:ff:52:39:b2:16:d6:ac:
da:8a:5b:38:4c:60:02:f5:1b:75:15:93:90:0a:62:da:ce:24:
7a:d3:63:97:ae:24:3d:19:3c:df:7f:1d:d7:17:f8:37:a2:f3:
97:4c:6a:7a:20:87:4e:56:d0:35:ed:99:c5:52:d7:73:34:d3:
64:74:4c:55:4c:1e:e6:55:87:bc:13:5d:56:84:57:cf:0e:5c:
04:9d:2e:86:9f:d0:ff:3c:fb:c7:1e:5e:68:5c:6b:3e:30:68:
26:19:fe:97:35:90:e1:46:bb:6a:89:f7:f3:8f:c7:fd:36:53:
cb:d7:71:38:76:88:fe:c9:75:da:4f:fc:cc:71:d2:e8:a2:04:
d3:d8:3c:a3:8c:8d:20:2d:d1:7e:ce:a4:da:e5:00:70:63:28:
7d:55:ba:25:67:91:b7:7c:b7:7c:3d:8e:3f:f6:8b:d2:74:ce:
1a:74:d1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:04 2024 by rpki-client on console-fra.rpki-client.org