Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3232382e302f32322d3234203d3e203437353833.roa
File: 38352e33312e3232382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: AZQ9gXs7CnQFxo1/61lfKTIamGlcFAIXNKTOcWHS2k8=
Subject key identifier: 79:F2:E6:59:FB:49:43:EF:87:2C:02:12:84:2D:6F:58:A8:D9:0E:14
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1CC423CEBA46EC6B7643E4C09FC93F04EFA515AD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3232382e302f32322d3234203d3e203437353833.roa
Signing time: Fri 19 Jul 2024 07:04:15 +0000
ROA not before: Fri 19 Jul 2024 06:59:15 +0000
ROA not after: Fri 18 Jul 2025 07:04:15 +0000
asID: 47583
IP address blocks: 85.31.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:c4:23:ce:ba:46:ec:6b:76:43:e4:c0:9f:c9:3f:04:ef:a5:15:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 19 06:59:15 2024 GMT
Not After : Jul 18 07:04:15 2025 GMT
Subject: CN=79F2E659FB4943EF872C0212842D6F58A8D90E14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:17:63:93:2e:05:d0:f8:7a:46:2d:96:ac:
75:27:bc:83:72:c7:83:cc:61:c3:a7:3f:60:8b:59:
81:79:11:86:3d:ab:e6:b1:34:e6:d5:6e:93:65:e3:
41:79:5c:d0:1a:05:28:9c:27:28:da:0a:24:25:69:
60:ea:44:30:c6:1b:33:28:18:7f:03:78:b3:4c:ea:
81:cf:78:e1:db:e9:b4:27:97:19:58:a0:05:fb:06:
0e:29:aa:16:f3:bd:9d:b4:14:c1:75:a9:c4:a7:a0:
2d:5d:5e:61:c9:86:07:f5:7c:92:bd:bc:67:0a:98:
fb:b8:46:8a:df:b0:de:09:ac:32:21:cc:89:e3:57:
78:50:67:39:4a:98:7c:04:02:2c:ac:08:af:e5:ce:
98:c4:10:1c:7b:1e:64:0c:b1:37:4d:96:b0:12:8b:
92:1d:94:46:c1:ee:05:1a:cb:7b:48:73:2a:87:3f:
64:0c:20:e0:14:7d:f0:26:45:c1:f3:fc:9d:5c:85:
ea:5a:14:e9:2d:8d:9f:34:c1:65:6b:15:15:5f:23:
bf:e5:81:41:99:51:7b:dd:f2:01:5c:ca:a4:70:0e:
03:53:c8:d4:8d:f6:63:6c:8a:1e:4c:74:38:fe:f5:
4e:0f:59:27:28:ed:ca:96:8a:f6:5f:8e:e8:15:b0:
2c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F2:E6:59:FB:49:43:EF:87:2C:02:12:84:2D:6F:58:A8:D9:0E:14
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3232382e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.228.0/22
Signature Algorithm: sha256WithRSAEncryption
12:01:6b:2f:a0:56:1d:08:15:e3:1c:83:22:0d:04:ad:9b:04:
ae:3b:84:53:f7:c2:ce:07:48:71:46:e6:a2:25:97:bd:73:aa:
d3:92:f7:65:3c:ed:da:d2:33:ef:49:93:6e:a2:3d:20:88:6e:
85:56:3a:f3:f1:0e:c7:a0:84:22:d1:7d:ca:18:25:71:5b:af:
94:23:fc:c0:4f:bb:a0:ff:06:a0:77:a4:db:79:39:72:8f:ae:
ad:ec:c3:2a:32:bf:1a:74:a2:9f:1d:c1:26:24:65:25:34:f3:
51:e9:4a:7c:9c:bd:88:c9:04:43:9e:2f:0a:21:8a:fc:18:ae:
8e:30:01:d0:c6:c3:6f:9a:58:be:71:2f:10:a1:ef:e5:03:eb:
35:d5:6c:ab:19:a5:f3:9e:81:48:38:0d:86:df:a4:c5:13:fa:
97:c0:99:f2:03:56:f9:cf:2e:c7:30:93:85:5f:dd:f4:fb:c3:
20:98:f2:8a:a6:86:31:a5:4a:dd:8b:c6:89:10:22:ce:8a:4a:
bf:8b:d7:10:3f:1c:00:c4:aa:19:4e:02:d5:89:de:d0:c2:a9:
52:3e:6c:de:7e:16:55:cf:d8:b5:3c:9a:a7:83:17:f8:f3:91:
8d:f1:37:c9:e2:e9:e6:93:5d:fa:ab:9a:ed:ec:5c:81:9b:5c:
ea:c4:2e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:04 2024 by rpki-client on console-fra.rpki-client.org