Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e352e302f32342d3332203d3e203531313637.roa
File: 38362e34382e352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: rLs7HI43ZsWcBIJy/w3Xbk/coZCXzZDX99CybYJ00Eg=
Subject key identifier: EA:2D:17:DE:7F:BB:2D:99:CE:6D:ED:B8:1F:98:78:0F:FD:D3:AA:59
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 32D391C356AE9431226C086B45D947D844EA5485
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e352e302f32342d3332203d3e203531313637.roa
Signing time: Mon 26 Feb 2024 08:52:58 +0000
ROA not before: Mon 26 Feb 2024 08:47:58 +0000
ROA not after: Mon 24 Feb 2025 08:52:58 +0000
asID: 51167
IP address blocks: 86.48.5.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:d3:91:c3:56:ae:94:31:22:6c:08:6b:45:d9:47:d8:44:ea:54:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:47:58 2024 GMT
Not After : Feb 24 08:52:58 2025 GMT
Subject: CN=EA2D17DE7FBB2D99CE6DEDB81F98780FFDD3AA59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:c5:17:fd:d8:46:73:27:24:3a:75:eb:22:
ed:96:09:a9:d5:61:0a:fc:d3:3d:de:b3:cd:ee:1d:
03:e5:92:d6:1d:94:2d:d5:af:d2:58:6a:ae:2a:3c:
68:6d:31:8f:d8:ba:f3:5e:18:b4:7e:e8:b5:b1:b1:
0d:a1:26:8c:4e:f1:93:a0:f8:14:99:d2:52:e9:f4:
ed:46:8d:da:91:81:94:e1:2e:47:4e:30:0c:7d:b2:
2e:45:f2:22:bd:4a:26:30:bb:49:3f:17:c1:e9:c9:
90:d0:de:0a:8f:bb:b3:17:8f:43:ab:e1:8f:97:fd:
2e:39:67:10:3c:c5:a3:40:f4:61:e1:07:33:11:75:
32:42:32:77:e7:bf:ad:98:eb:a4:d4:b1:f3:06:ff:
18:8f:46:05:7e:ae:8a:23:62:01:db:a8:7b:9e:8c:
96:0f:81:03:a1:80:c1:1b:13:b6:df:56:8a:f1:ce:
88:be:7c:80:65:38:6b:ab:2d:61:fc:6d:a5:27:d6:
51:8c:f2:55:1d:21:a6:d6:53:93:2a:ec:1c:a6:db:
23:74:6b:b3:b5:6e:c0:50:77:5d:2f:f2:6a:35:0c:
27:bc:60:e8:fd:12:75:19:d0:2d:d8:54:b7:af:5b:
ce:60:57:f2:ca:ee:b0:d3:27:db:a6:a4:26:67:7e:
2f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2D:17:DE:7F:BB:2D:99:CE:6D:ED:B8:1F:98:78:0F:FD:D3:AA:59
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e352e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.48.5.0/24
Signature Algorithm: sha256WithRSAEncryption
01:03:03:15:a9:55:00:6f:79:4d:2c:80:a3:9d:a1:ea:0d:91:
5c:e1:55:72:dc:25:97:55:c2:12:20:92:53:b1:4d:4a:23:16:
3c:e3:66:32:92:75:8e:14:97:4e:b5:75:99:b0:bf:3f:60:03:
31:ca:eb:90:21:a5:51:49:65:a2:02:c9:ed:5d:f7:53:62:10:
aa:1c:54:c4:17:d3:11:3e:4e:b1:37:da:bd:d8:c3:5b:91:4f:
c0:cf:e0:80:9d:bd:cb:e2:e8:20:94:63:5b:dd:76:78:c8:d2:
3a:9e:a7:7f:75:19:83:7f:1b:26:4b:fe:28:67:c3:74:41:12:
2f:92:0b:fd:be:dd:47:70:77:8a:b6:73:d0:e9:30:9e:a1:e3:
c2:02:66:9a:1a:a1:77:89:88:7b:3a:21:c0:b4:f2:a2:a4:02:
b9:13:be:38:14:bf:c7:4d:6f:e8:cb:10:78:ab:1c:c9:d8:1b:
64:36:52:91:b6:6f:7c:be:09:20:4b:94:73:aa:a0:d0:bf:0d:
e6:74:d6:97:79:fb:da:d9:22:aa:4c:07:26:7c:ca:f2:02:23:
c9:b7:e5:d9:0c:77:6f:92:60:a0:6c:6b:1e:c0:95:5a:fb:8f:
ce:3d:6b:3f:79:fe:f7:c2:08:0f:d1:0f:75:9e:c9:2c:a8:89:
7e:bd:ce:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:12:37 2024 by rpki-client on console-fra.rpki-client.org