Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3232342e302f32322d3234203d3e203437353833.roa
File: 38352e33312e3232342e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: uOuocOeclrVwiG3BBxQ/3nKJUqdjNwzrT0SDDQGXILA=
Subject key identifier: D7:AC:06:AA:03:F3:CC:FD:C9:8B:C6:DC:3B:AB:82:64:ED:41:46:C7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7ADD9BB716A44776B2BEFF22E5363B7DB5EF77C8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3232342e302f32322d3234203d3e203437353833.roa
Signing time: Mon 22 Jul 2024 16:04:21 +0000
ROA not before: Mon 22 Jul 2024 15:59:21 +0000
ROA not after: Mon 21 Jul 2025 16:04:21 +0000
asID: 47583
IP address blocks: 85.31.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:dd:9b:b7:16:a4:47:76:b2:be:ff:22:e5:36:3b:7d:b5:ef:77:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 22 15:59:21 2024 GMT
Not After : Jul 21 16:04:21 2025 GMT
Subject: CN=D7AC06AA03F3CCFDC98BC6DC3BAB8264ED4146C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:81:86:1a:9a:3d:58:9e:d1:ab:7f:6f:a4:d9:
95:3a:00:d6:28:41:68:04:e0:5c:7c:63:13:95:2b:
83:4e:2c:96:bd:77:05:7b:75:18:af:62:e8:c5:e7:
b4:0c:a2:59:16:32:b9:14:60:2f:1b:d3:d6:2e:bd:
b4:b9:42:96:68:67:03:e7:78:e3:d0:38:a4:06:e1:
33:ce:ee:6d:ca:fb:37:c4:72:06:8a:6a:60:01:49:
c7:99:16:3b:9c:44:07:e5:15:97:41:4d:c4:a0:2a:
49:70:5d:ad:92:95:58:b5:94:0d:a5:40:f7:18:7d:
40:65:7f:f6:16:6c:5c:84:b6:54:28:1d:9c:ab:1f:
87:f3:82:eb:14:b5:01:44:8f:ed:a0:31:6b:e0:6e:
4d:de:85:67:4e:ad:98:9e:85:1c:d2:3c:d7:1d:a3:
87:b6:09:51:8f:d8:29:53:b1:d7:9d:ae:06:fa:f0:
6e:f0:2c:69:a2:83:0e:13:9d:61:11:59:00:32:fa:
05:a5:8f:b3:23:a7:2a:31:b8:6b:f5:43:d4:88:29:
d4:88:4a:d5:5e:d3:da:38:13:4a:66:c0:b1:0d:d3:
8f:5d:3c:d5:ae:c1:e6:7c:27:a6:8e:3d:5e:2c:cf:
11:2e:f4:3d:47:95:d6:53:3b:74:24:87:d6:41:af:
60:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AC:06:AA:03:F3:CC:FD:C9:8B:C6:DC:3B:AB:82:64:ED:41:46:C7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3232342e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.224.0/22
Signature Algorithm: sha256WithRSAEncryption
41:1c:30:ba:1a:fa:42:fd:c2:25:c9:69:d8:f8:23:2a:08:71:
d6:bd:49:df:31:1c:15:4c:33:a6:33:f9:3f:b8:d3:26:5e:56:
f0:8a:72:24:cf:86:cf:cb:7c:95:b1:8c:ef:ff:89:7d:ae:f7:
01:23:d5:e1:e2:18:ba:c3:8b:e0:a5:06:2a:e5:0d:6e:a6:50:
f3:72:2f:75:cb:58:6f:21:11:7e:ff:34:91:ae:05:29:8b:69:
be:64:28:c3:16:c9:28:c9:ab:da:18:e6:01:8b:8b:56:a8:cb:
e8:2b:f3:d4:a0:6a:63:0e:5f:95:de:6e:a8:b2:f8:5c:d6:7c:
50:67:10:44:bc:c0:0d:da:84:d0:34:c5:10:4a:6c:43:83:9a:
c8:0b:e3:71:32:c7:1d:e2:81:8e:09:87:4a:04:a5:ef:b4:00:
0f:a5:dc:28:8b:46:4a:77:f8:92:70:02:c6:58:84:ab:6c:9b:
4c:38:76:de:9f:3d:69:04:83:3a:b4:3e:cc:fd:69:42:64:51:
30:6a:ac:d1:49:f1:12:6e:4d:9a:94:8d:36:92:e8:d2:26:cc:
28:90:ee:9e:fb:8a:8d:eb:b7:d3:cb:be:40:1f:d1:18:32:1d:
04:49:e0:bf:62:32:87:58:6d:f2:6a:10:e1:5e:16:4a:84:ab:
d6:43:bb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:26 2024 by rpki-client on console-ams.rpki-client.org