Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e35312e302f32342d3332203d3e203531313637.roa
File: 38352e3230382e35312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: XOlNHmtUFvaHeWVb+voPswkuiCeDdzDsJRhnpFhVTlg=
Subject key identifier: 54:88:32:98:00:C4:57:89:D4:E5:69:B8:C9:E6:CC:2B:72:33:E3:DC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 62BF25553A908A5667FCEAAB8C0C1146B5A0F0AA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e35312e302f32342d3332203d3e203531313637.roa
Signing time: Fri 20 Sep 2024 14:04:57 +0000
ROA not before: Fri 20 Sep 2024 13:59:57 +0000
ROA not after: Fri 19 Sep 2025 14:04:57 +0000
asID: 51167
IP address blocks: 85.208.51.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:bf:25:55:3a:90:8a:56:67:fc:ea:ab:8c:0c:11:46:b5:a0:f0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:57 2024 GMT
Not After : Sep 19 14:04:57 2025 GMT
Subject: CN=5488329800C45789D4E569B8C9E6CC2B7233E3DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:19:48:0b:01:28:49:54:6e:9b:64:fb:2b:
f4:1e:17:aa:de:7f:b6:2f:b2:ea:93:28:dc:a5:57:
f3:b3:99:a3:fd:83:e7:0b:6d:95:32:3e:2f:53:79:
eb:7e:e1:2a:21:17:86:1e:68:f3:1e:f1:e0:96:4f:
4e:d1:2a:f2:9e:a5:d0:3c:95:1b:36:c8:d0:d3:b2:
38:69:99:83:71:49:e1:14:a8:c8:07:4b:31:df:68:
e5:4e:4f:08:57:52:95:7a:13:16:8e:0f:9e:2a:c8:
2d:d3:0c:9d:c8:35:99:69:b3:e1:38:9b:39:71:c2:
54:8e:55:bf:36:cd:27:b0:a0:30:63:3e:5b:2f:88:
42:eb:67:2f:68:ec:26:31:98:ea:12:89:fb:b0:07:
17:2c:95:38:83:05:5e:d6:2b:9d:25:de:6a:f7:d1:
10:1a:29:32:46:af:6d:ee:48:5e:89:fc:8e:0f:0b:
22:b5:bd:52:8f:41:b4:59:0a:57:64:85:55:4f:93:
32:6e:fe:81:45:9e:a9:9a:c4:0d:c5:8e:4f:bb:85:
b3:cf:3f:1f:fb:53:65:85:11:cc:d3:89:ea:a7:7c:
0d:a4:3c:cb:dc:1a:28:2a:fd:18:ce:3b:8f:2b:63:
80:5b:77:75:85:c9:e2:b4:da:05:53:7b:75:f2:80:
50:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:88:32:98:00:C4:57:89:D4:E5:69:B8:C9:E6:CC:2B:72:33:E3:DC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e35312e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.51.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e9:39:ca:4f:5b:c2:7a:9b:61:ab:f2:d8:b6:fc:8e:4d:a2:
e4:4b:31:23:89:a4:d1:f1:b6:b0:78:8d:c1:1b:32:85:b3:be:
d3:71:12:dc:f6:4b:6e:c3:b2:ed:d5:39:b5:7e:a5:1a:7e:59:
fa:b6:26:c4:7a:49:42:f3:2f:10:c3:e3:01:0e:df:91:fb:b9:
b1:49:fa:62:bf:7c:5f:71:a9:bb:61:01:ff:fd:13:02:e3:6e:
05:49:16:fd:f7:24:fe:c6:21:e3:b2:4a:4d:44:64:93:45:37:
d5:8a:e3:75:40:e1:3f:c3:99:fe:6d:29:27:de:de:15:25:b3:
20:f8:7b:2e:b7:3d:40:82:4b:6f:aa:e6:d5:11:9f:56:2b:3a:
cb:f2:21:92:5f:3c:27:4d:45:ab:46:df:50:6a:d3:2c:f7:ca:
2b:fd:ba:97:94:4a:94:02:7f:b7:d1:26:18:25:2e:c3:97:55:
2b:96:9a:2b:ff:fb:0f:6e:e7:cc:e7:1f:93:6c:77:cc:ff:43:
53:22:58:e9:9e:85:be:77:28:fb:59:21:91:77:2b:95:e9:cd:
fd:ac:d2:78:7d:2c:34:18:a0:6f:8c:ed:18:be:50:4d:cd:94:
20:58:2d:90:9a:56:ba:60:f8:a8:37:47:ae:af:65:2c:a6:85:
96:c3:ef:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:04 2024 by rpki-client on console-fra.rpki-client.org