Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e31352e302f32342d3332203d3e20313336373837.roa
File: 38362e34382e31352e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: FdC8B0mtogBtWKRiTa0xzQzc7MBfbJNqmjM0VLyMiuU=
Subject key identifier: 3F:3E:08:A6:72:57:83:6D:4D:FD:2A:6C:9B:03:F9:59:A1:9F:D5:BB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 13CB50DE1059F40DB276323182A18541832D9166
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e31352e302f32342d3332203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:13 +0000
ROA not before: Mon 26 Feb 2024 08:48:13 +0000
ROA not after: Mon 24 Feb 2025 08:53:13 +0000
asID: 136787
IP address blocks: 86.48.15.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:cb:50:de:10:59:f4:0d:b2:76:32:31:82:a1:85:41:83:2d:91:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:13 2024 GMT
Not After : Feb 24 08:53:13 2025 GMT
Subject: CN=3F3E08A67257836D4DFD2A6C9B03F959A19FD5BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:79:a7:ef:dd:63:25:55:7f:1a:6d:b9:99:
0d:dc:e5:c6:4f:a8:63:c7:c4:b5:51:57:46:26:e6:
ef:51:b5:5f:e4:91:8e:73:93:43:5d:32:43:9d:f6:
88:b1:9e:60:0c:78:ae:9d:18:47:a4:38:13:c2:80:
0d:40:26:18:08:0a:51:5d:a3:c9:4e:aa:7c:af:68:
dc:a4:06:2c:00:f2:59:aa:22:77:3c:74:c8:65:42:
fb:db:eb:32:2f:a1:3a:57:db:72:fd:74:19:6b:a5:
f0:c1:0f:2e:3a:ee:dd:ff:6d:81:fb:93:f2:5a:26:
12:6b:85:5a:88:4c:65:e2:b9:48:8d:ca:35:0b:d8:
0f:c1:55:c3:de:fc:e4:3a:15:32:7d:29:a2:da:c6:
b4:a1:2c:be:01:1e:08:7b:e9:75:90:10:32:73:b9:
40:59:92:cf:5f:85:7f:b0:89:25:fd:7a:bf:5f:3e:
c4:f7:7a:62:86:8e:64:09:78:9f:b4:f6:a6:3c:9a:
cc:b5:a8:32:bd:9c:71:0a:bc:b1:70:57:c0:9d:d9:
8e:7d:8d:72:26:a9:5e:e6:5c:64:25:15:6f:c6:a9:
4d:d2:d4:84:41:86:cf:84:ff:af:78:8f:09:6c:0e:
c8:df:09:20:e7:00:77:46:1a:22:04:37:95:2c:3e:
c8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3E:08:A6:72:57:83:6D:4D:FD:2A:6C:9B:03:F9:59:A1:9F:D5:BB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e31352e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.48.15.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:fc:46:4d:ea:f8:a2:33:1f:56:bb:7a:00:cd:5b:a4:d2:ec:
6b:d0:af:ac:64:b0:65:5d:4f:0c:fe:d0:64:6e:56:76:4a:3e:
a3:7e:01:67:13:c2:7e:18:b2:94:50:0b:dc:ef:90:8e:85:f6:
62:b0:3a:04:92:fb:49:91:58:49:80:36:2a:78:a0:b7:de:b5:
8b:c3:73:c9:8b:e6:8a:61:d9:d4:0e:dd:bc:a4:cd:e0:0c:15:
96:76:12:30:52:91:10:df:2e:00:55:f6:07:85:07:4e:18:71:
8c:3b:b8:f3:6e:65:f7:c1:7f:58:e9:10:be:99:74:c7:ec:93:
fd:5b:21:03:48:e3:f8:c7:c5:40:1a:59:0b:a9:ae:e2:3b:7a:
97:64:74:0f:9e:ba:ae:13:f8:86:b3:57:04:05:4a:c6:de:c9:
b7:ea:51:f8:ee:a9:35:dc:9b:6e:ad:9f:93:fc:4c:e1:36:bd:
76:f5:59:94:a2:1a:c9:6a:67:5c:96:6e:22:5e:6b:f6:fa:41:
f4:4c:36:ea:c2:68:98:b1:35:fc:83:28:58:c8:cc:d9:2c:96:
8c:2b:de:db:9e:fa:78:9b:a8:4e:2e:0e:f2:7c:b7:b0:45:f3:
47:fd:98:c9:b7:67:fe:c6:37:de:7a:57:b6:82:c7:5a:86:df:
54:17:03:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:32:59 2024 by rpki-client on console-ams.rpki-client.org