Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e3231382e3230312e302f32342d3234203d3e20323034313730.roa
File: 38382e3231382e3230312e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: h4TJOzFr2vuil8tl3Y75a/ALyAaxbLKCo9Ev5Hci6YM=
Subject key identifier: A0:A8:23:D7:78:9B:84:69:CB:82:E2:EA:6C:E6:C1:A2:3E:10:92:26
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5AD1447592E97EE2F6844B6AE576ADF54801FBCF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e3231382e3230312e302f32342d3234203d3e20323034313730.roa
Signing time: Fri 20 Sep 2024 14:04:58 +0000
ROA not before: Fri 20 Sep 2024 13:59:58 +0000
ROA not after: Fri 19 Sep 2025 14:04:58 +0000
asID: 204170
IP address blocks: 88.218.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:d1:44:75:92:e9:7e:e2:f6:84:4b:6a:e5:76:ad:f5:48:01:fb:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:58 2024 GMT
Not After : Sep 19 14:04:58 2025 GMT
Subject: CN=A0A823D7789B8469CB82E2EA6CE6C1A23E109226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:78:55:a8:23:08:9b:b3:fd:22:cd:fa:78:5c:
22:d6:94:b7:f0:8c:55:6f:47:4e:d4:37:7a:7c:95:
90:fe:d6:7d:77:7c:1d:54:a2:5c:0a:38:09:9c:18:
01:49:d9:a3:6b:ba:03:26:c9:2e:57:c1:5f:e5:c8:
6d:02:7c:3c:e0:5b:2d:3c:45:49:e4:ad:6b:57:5f:
4e:e8:03:a6:84:14:61:39:5b:d0:71:87:71:19:7b:
71:46:d3:5d:0a:a0:2a:52:a7:e4:c7:23:cf:49:1e:
c5:3a:fc:76:c0:db:2c:3f:a8:35:6c:1c:4b:27:4f:
ab:84:23:97:64:02:38:84:6b:92:20:48:93:ba:11:
9f:06:21:a2:cd:d9:7a:f3:cc:d5:ff:f1:a8:2b:e5:
e9:46:1f:91:0a:fe:3d:9f:f6:3c:f9:eb:c4:87:6c:
e7:7e:21:7a:f7:36:f4:e8:78:00:34:5c:dc:e3:90:
d1:71:cb:f2:71:48:1c:af:1b:4b:0d:73:77:ef:74:
72:6f:c4:01:03:24:d7:35:14:29:ab:5b:57:b8:71:
bf:9e:32:3a:c6:b0:88:40:bc:8a:20:26:f0:4c:85:
10:ef:92:25:fd:b6:45:4b:54:79:27:58:7c:b7:f8:
8b:0c:d0:f9:8f:93:c0:e1:e2:f2:3f:86:ca:68:a7:
78:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A8:23:D7:78:9B:84:69:CB:82:E2:EA:6C:E6:C1:A2:3E:10:92:26
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e3231382e3230312e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.201.0/24
Signature Algorithm: sha256WithRSAEncryption
94:bd:ae:0c:0b:a7:de:74:5f:3f:79:52:ce:b4:46:c8:76:b0:
cd:42:df:25:d8:5a:26:a7:f2:c6:f9:97:c4:fe:10:0f:d4:4f:
49:61:ef:44:91:86:49:cf:72:0c:64:51:b3:b1:7c:fd:37:ce:
24:0e:a4:f7:70:e7:fa:02:15:b1:39:35:bf:ad:66:24:c0:2d:
b0:42:54:e0:b8:5b:47:be:20:81:80:0c:0b:46:0b:66:53:d3:
9c:8f:06:e0:d2:cb:7f:e5:b5:fe:88:1b:56:87:6b:21:13:3a:
4e:8d:5b:e8:b8:fd:4a:d4:c6:0e:19:19:a6:06:42:2c:63:14:
fc:1f:04:79:39:e9:d3:02:1c:ea:7a:da:a7:ab:d3:71:e8:d7:
f5:91:57:98:b3:70:68:3e:25:c5:d5:07:19:ea:25:87:f8:c5:
52:ca:02:11:01:5e:c8:5d:3f:2b:29:98:58:5d:58:7e:0b:fb:
16:22:f8:90:9e:90:eb:d2:90:ef:70:98:dc:45:87:cf:f6:e0:
30:23:c7:a1:70:6c:9d:13:20:3b:5f:35:e1:64:de:63:93:fd:
9f:82:1a:d0:72:f6:9b:db:20:86:d6:1d:23:39:fe:2d:29:d0:
77:16:96:81:f1:5d:c8:e0:a5:a0:9d:15:5a:21:36:35:9e:0b:
84:e4:55:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:49 2024 by rpki-client on console-ams.rpki-client.org