Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3235302e302f32342d3332203d3e203531313637.roa
File: 38352e3233392e3235302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: vfjBTBEzxRdrySU0mnjk+5qQrLKhfUz2/AC6FK4VLn4=
Subject key identifier: AB:2A:60:CD:36:87:65:F9:18:C6:E4:CD:A0:9F:95:11:20:10:21:D3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1599088347A06B18385DCD4B437AB53EC9DEAA1A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3235302e302f32342d3332203d3e203531313637.roa
Signing time: Fri 21 Jul 2023 07:20:13 +0000
ROA not before: Fri 21 Jul 2023 07:15:13 +0000
ROA not after: Fri 19 Jul 2024 07:20:13 +0000
asID: 51167
IP address blocks: 85.239.250.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:99:08:83:47:a0:6b:18:38:5d:cd:4b:43:7a:b5:3e:c9:de:aa:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 21 07:15:13 2023 GMT
Not After : Jul 19 07:20:13 2024 GMT
Subject: CN=AB2A60CD368765F918C6E4CDA09F9511201021D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c4:69:a7:f0:3e:ed:5f:39:31:4e:70:9b:ab:
bb:a3:44:44:9a:fb:88:25:2a:d8:fd:ac:42:11:dc:
2f:fc:a7:d6:e1:d0:93:2b:06:30:58:b9:c5:02:c4:
69:fa:de:da:19:41:ff:5e:5c:cc:44:9d:a4:34:ce:
36:e7:b5:d7:f0:d2:7b:05:26:0c:fa:31:27:dc:53:
cc:4d:14:fe:5d:46:11:10:0d:3e:db:72:ff:0d:99:
a3:7e:dd:22:34:d5:51:28:a2:69:ce:d4:ed:50:c9:
9d:3d:a3:83:24:a9:b0:0a:d5:a7:71:a1:5b:5f:f3:
b0:6f:b2:89:ce:1e:73:fe:c5:39:64:fa:8a:ea:f9:
dc:9e:e2:0b:b0:a5:51:50:20:1a:de:6c:7d:95:04:
84:1b:3e:a1:86:10:a6:d9:02:63:36:fa:9e:1d:1c:
ec:0a:eb:c6:9b:bc:e8:43:f3:ea:02:a7:e5:bb:29:
21:50:7f:1a:73:98:c1:c1:c6:b9:9d:1f:93:e6:1c:
aa:a1:ce:cd:6e:a2:59:11:56:23:e9:2a:10:c7:57:
3e:76:f9:e0:f9:63:27:71:ee:d8:8e:b9:23:b4:c1:
66:20:4a:0a:41:4d:af:39:a9:92:f5:a1:e5:15:4e:
8c:b5:55:5e:30:44:56:2d:16:b7:28:78:54:c7:1c:
b4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2A:60:CD:36:87:65:F9:18:C6:E4:CD:A0:9F:95:11:20:10:21:D3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3235302e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.250.0/24
Signature Algorithm: sha256WithRSAEncryption
54:77:f2:76:69:5d:e7:b9:cf:02:28:47:ae:fb:b7:89:2f:1e:
f9:b0:d3:19:51:53:0a:a2:59:96:ad:80:57:27:b1:8c:f6:99:
bc:9d:31:1b:ca:b5:11:6b:c0:87:24:1e:2d:91:9a:e7:49:e7:
f4:12:b5:5a:fd:42:79:cc:ad:c2:3b:b5:b9:e0:2c:d8:1e:ba:
23:d9:9e:cc:92:12:b3:3e:47:35:85:c2:7e:97:90:12:99:9b:
c2:aa:a7:81:39:a6:11:46:22:00:4a:cd:eb:4f:a6:4e:7c:7d:
56:ea:1a:ec:75:ef:54:61:07:53:f9:40:fa:1f:1b:72:ac:d1:
80:a6:c5:3e:5f:6a:92:82:ee:d9:9d:ea:07:a4:0a:df:df:63:
88:f7:10:f2:37:d5:f8:d6:c7:c0:7e:2b:ad:f5:f7:82:49:e1:
33:23:f7:47:33:1a:b6:11:79:1f:a7:61:4b:33:77:8c:f3:08:
5b:c1:94:8d:e8:86:7b:01:39:cd:8b:d7:bd:27:ad:c8:a9:17:
a3:26:1b:f1:f9:06:5c:65:27:ec:59:5a:ab:69:8b:30:cc:44:
62:c1:f1:0e:36:9f:80:d6:d0:2d:68:56:8d:30:7e:43:9b:f2:
a5:5c:c9:ec:8f:a2:74:d5:da:36:d6:67:8e:ab:49:33:02:ad:
2d:7f:4b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 09:23:50 2024 by rpki-client on console-ams.rpki-client.org