Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e342e302f32342d3234203d3e20313336373837.roa
File: 38362e34382e342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: nq9S0Rxz53bnr34VLQ/ixTpC8fWh/zWe7vH8tm5y3dY=
Subject key identifier: D1:90:3E:09:1A:3F:A4:86:4C:1F:F7:8D:61:91:26:76:ED:11:8F:DC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 218F0DF3107D0212EC898022A69D2A9C8268B69A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e342e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:33 +0000
ROA not before: Mon 26 Feb 2024 08:48:33 +0000
ROA not after: Mon 24 Feb 2025 08:53:33 +0000
asID: 136787
IP address blocks: 86.48.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:8f:0d:f3:10:7d:02:12:ec:89:80:22:a6:9d:2a:9c:82:68:b6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:33 2024 GMT
Not After : Feb 24 08:53:33 2025 GMT
Subject: CN=D1903E091A3FA4864C1FF78D61912676ED118FDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:4b:a2:2b:d8:3e:89:37:37:07:57:0c:a9:
43:2a:05:7f:85:af:40:1e:b8:07:bf:ae:44:88:91:
2c:2e:56:12:7f:ff:fa:29:08:81:d1:a3:ac:6e:e7:
54:d7:d8:c0:8b:b6:f8:1c:07:17:83:14:6d:00:b0:
1e:4b:f8:8d:35:d6:94:20:89:b8:90:24:3f:27:eb:
28:bb:90:27:29:a0:50:0f:a5:df:b7:9e:f9:f6:b6:
7f:ff:44:06:46:0f:5c:6e:dd:17:0f:b5:17:2e:21:
6d:e2:3f:77:45:6c:21:b9:2c:fa:8e:18:01:b7:ce:
e3:74:77:5f:81:83:13:e9:e9:3d:2f:a7:25:45:8d:
10:9d:ed:8c:83:dc:f3:0c:9d:24:ad:61:1f:e4:eb:
7c:b6:64:1f:02:3a:3a:df:22:d6:6e:6e:d4:67:e3:
79:43:ea:4b:ee:4e:5b:82:c8:e2:de:48:b5:ee:66:
dd:75:8e:7d:a7:bf:7c:8a:f7:33:18:3b:38:0e:19:
39:9d:f9:d2:23:e4:ed:13:9e:ce:52:98:7e:05:ba:
de:52:a5:3c:ba:10:ec:9a:57:ed:ee:43:1c:6d:62:
13:d5:c2:39:21:fe:f6:95:57:01:fe:6d:7b:82:50:
c5:8f:ea:ab:39:fa:31:e8:83:84:ab:91:23:6f:1c:
ea:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:90:3E:09:1A:3F:A4:86:4C:1F:F7:8D:61:91:26:76:ED:11:8F:DC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.48.4.0/24
Signature Algorithm: sha256WithRSAEncryption
83:6d:43:6e:e0:75:52:6f:e2:72:28:4b:ae:98:7c:c6:7b:b8:
5a:63:71:76:81:04:07:78:71:6f:81:9f:cd:e3:4f:89:03:1e:
a1:18:9f:8f:07:59:6b:25:32:de:63:0c:57:de:7f:e5:f7:6c:
d4:81:72:12:54:da:90:f5:5e:b1:4c:c0:2b:bc:2f:d4:4e:bd:
e5:88:3a:24:81:b6:ac:5e:ad:11:9a:97:73:a1:e8:ba:24:b9:
7e:6b:68:3d:84:6c:71:59:94:28:18:f5:60:5a:63:4b:24:88:
33:b9:a9:14:19:a3:8d:34:ec:a6:06:cd:5b:62:76:74:f1:4d:
c8:cb:e5:3a:09:f3:45:0f:de:9f:b1:43:0c:8a:85:f8:84:92:
cd:0f:1a:b5:92:83:2c:b4:6b:24:73:eb:34:d7:91:7c:48:ca:
db:43:95:19:ec:82:e3:6c:ec:56:15:e7:3e:87:1d:19:13:68:
fd:e8:54:37:49:92:1b:a8:fc:3d:05:ea:5e:29:02:bd:92:33:
f0:3b:18:5f:3a:4d:76:34:4b:86:53:9d:4d:ae:3d:c0:1d:89:
26:d3:dc:42:ec:7e:ea:ad:3c:51:4f:45:c8:49:1f:b3:08:07:
5d:44:af:ac:39:d1:d6:ac:63:02:12:aa:0f:8f:15:db:57:42:
9d:0c:ff:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:21:26 2024 by rpki-client on console-fra.rpki-client.org