Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3235302e302f32342d3332203d3e203430303231.roa
File: 38352e3233392e3235302e302f32342d3332203d3e203430303231.roa (raw, json)
Hash identifier: AnbTRExrAomWpA87aWyERf5ZJoukosUvcoLlHy0dVrI=
Subject key identifier: D6:6B:4F:89:1B:B5:E6:57:4D:6D:8A:BB:AB:5F:F9:DA:5E:E6:04:E5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 45FEEEBA209584EF3A9636242DD997325B521694
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3235302e302f32342d3332203d3e203430303231.roa
Signing time: Mon 26 Feb 2024 08:53:00 +0000
ROA not before: Mon 26 Feb 2024 08:48:00 +0000
ROA not after: Mon 24 Feb 2025 08:53:00 +0000
asID: 40021
IP address blocks: 85.239.250.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:fe:ee:ba:20:95:84:ef:3a:96:36:24:2d:d9:97:32:5b:52:16:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:00 2024 GMT
Not After : Feb 24 08:53:00 2025 GMT
Subject: CN=D66B4F891BB5E6574D6D8ABBAB5FF9DA5EE604E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:28:33:c5:09:24:67:f0:74:c4:76:23:86:1f:
e7:f3:3f:73:e5:4f:d3:df:f4:b1:05:dd:19:d1:01:
aa:5c:86:fa:8c:77:c4:c7:a4:3f:ee:4f:78:79:7c:
8f:5d:ce:80:e9:f2:67:f7:0f:0d:84:5d:d2:37:16:
b0:5c:8c:78:43:25:99:85:b9:25:69:e5:a2:b5:4f:
fb:21:e3:43:c3:54:61:ff:66:a8:13:4d:f7:78:6a:
8e:b4:4d:45:a4:a6:ca:5b:88:70:91:58:45:d1:da:
94:f9:c0:53:70:d0:a8:47:65:78:0a:f9:22:f4:39:
c8:d4:da:61:c3:1c:64:56:9a:db:d8:5f:89:4f:60:
2a:3e:9e:6d:29:b8:04:5e:9c:65:5e:7d:d7:71:09:
a6:58:c8:94:7d:95:1f:12:12:ee:36:58:90:b8:3d:
66:29:1d:64:fb:35:16:f8:19:95:c9:dd:56:5b:82:
3a:18:c3:bd:c7:48:b8:1c:ae:0a:dc:dc:01:fb:0a:
48:d1:72:c1:e5:b0:83:06:7a:03:8a:68:c2:f5:d7:
85:de:a9:4a:28:e6:ce:69:5a:f9:36:45:d8:c7:cb:
24:37:b2:fd:39:0f:6c:34:e3:83:ed:c0:30:30:0a:
49:a8:92:6a:13:f9:7f:df:8c:00:5b:88:d3:13:b7:
29:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6B:4F:89:1B:B5:E6:57:4D:6D:8A:BB:AB:5F:F9:DA:5E:E6:04:E5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3235302e302f32342d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.250.0/24
Signature Algorithm: sha256WithRSAEncryption
40:34:36:9b:85:40:d3:54:e9:60:4b:1c:0b:f6:d5:21:2a:ea:
7f:72:9f:9c:51:3f:0a:77:22:6e:5e:30:fc:4a:48:90:2e:29:
9b:91:6d:83:1a:ef:54:92:89:bf:88:2b:d9:bf:18:be:e6:55:
59:2c:48:4f:d2:84:a5:da:f7:2a:a0:85:a4:66:be:05:52:17:
76:07:93:81:fc:06:51:26:d5:fe:e6:4d:ee:52:e3:e5:a8:90:
bf:fb:58:bc:7e:db:41:14:0b:d2:90:92:c8:fa:1c:fe:30:ee:
df:cb:83:11:94:1a:e6:85:63:2b:09:98:ca:d3:41:20:2c:f8:
1c:ec:6d:83:33:be:f0:7a:9c:6b:94:3d:ae:f9:68:6a:36:24:
78:ab:ac:8d:5a:56:97:d0:4f:bc:e3:1f:19:0d:3d:90:5a:33:
d7:dd:0b:7e:98:5c:0e:d9:7a:2a:f5:20:dc:66:50:8f:78:ae:
6f:d6:38:0f:05:88:99:3e:80:72:b8:18:f9:34:14:84:bf:67:
a6:e2:ec:5f:c0:ca:15:71:2c:cb:ac:55:70:d5:11:52:88:64:
d0:73:7d:4f:12:50:b5:a1:c1:2d:1f:9d:c9:33:a6:54:b0:51:
bd:53:c3:28:1c:b9:f8:96:fb:ce:3f:9a:83:fc:99:8f:4e:69:
c5:e3:a3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 08:01:46 2024 by rpki-client on console-fra.rpki-client.org