Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e38362e33322e302f31392d3234203d3e203630363634.roa
File: 38382e38362e33322e302f31392d3234203d3e203630363634.roa (raw, json)
Hash identifier: PFYK2izuscyR30gH99rYDonvTQnujNPptIel/MkMdeM=
Subject key identifier: 41:65:F4:9D:98:60:5A:F5:07:BD:4F:31:55:AA:27:FD:E0:45:85:45
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0A1B63DC685F7E90CB6A27323129631E86DBFFC0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e38362e33322e302f31392d3234203d3e203630363634.roa
Signing time: Fri 21 Jun 2024 17:04:02 +0000
ROA not before: Fri 21 Jun 2024 16:59:02 +0000
ROA not after: Fri 20 Jun 2025 17:04:02 +0000
asID: 60664
IP address blocks: 88.86.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:1b:63:dc:68:5f:7e:90:cb:6a:27:32:31:29:63:1e:86:db:ff:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 21 16:59:02 2024 GMT
Not After : Jun 20 17:04:02 2025 GMT
Subject: CN=4165F49D98605AF507BD4F3155AA27FDE0458545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a6:db:12:63:96:18:76:be:57:df:25:0f:77:
43:49:cc:d3:c7:ae:93:1d:e0:3a:28:77:76:8c:73:
ec:52:29:9f:ab:20:e6:87:e6:a4:00:bd:f4:61:78:
84:9f:bb:35:82:85:02:80:69:bc:e7:da:50:08:c9:
27:c5:e9:0a:c4:42:99:3d:0c:bb:93:e0:7d:ae:e0:
c7:5d:6b:14:dc:d0:16:6b:4a:49:75:d4:cd:49:b5:
ab:0b:5b:77:a7:7c:22:8e:d2:4c:bf:5c:fa:a9:fa:
d4:65:26:a1:8a:6b:db:22:fe:dc:4e:5c:2d:e7:0e:
8d:d6:fd:b8:53:3c:19:92:a2:46:a3:11:cf:1e:67:
1b:ca:58:25:4f:8a:21:62:9c:78:30:e3:65:db:22:
d6:63:09:ef:f8:28:b5:46:ae:5e:65:00:5f:19:83:
a3:a3:a5:48:9c:05:dd:c5:93:f9:19:45:36:cf:40:
81:6a:69:50:73:53:06:0c:b5:5a:a2:67:42:a0:c1:
9e:a6:db:c6:a3:86:ee:6e:4c:e6:65:87:28:d7:63:
6f:49:95:94:57:8e:eb:6c:41:1b:5e:d6:56:c9:0d:
11:d9:2a:77:24:b9:8e:34:cf:6b:f6:0e:77:b3:ad:
38:ff:e0:c5:b5:8b:be:e1:d5:14:cb:50:7d:88:71:
8c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:65:F4:9D:98:60:5A:F5:07:BD:4F:31:55:AA:27:FD:E0:45:85:45
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e38362e33322e302f31392d3234203d3e203630363634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.86.32.0/19
Signature Algorithm: sha256WithRSAEncryption
8e:ac:1e:9c:98:1a:a8:57:09:5a:73:6e:2e:a9:51:16:74:d3:
ed:93:e1:e7:ff:86:4b:1d:d7:88:7f:8f:f5:16:84:28:c8:0c:
cf:3d:17:28:e5:77:32:fa:b2:bf:92:2f:f0:a7:0b:7c:d5:0e:
12:56:d3:8b:6a:21:1d:43:26:85:5e:da:e7:d9:8f:41:62:1b:
6f:eb:67:91:39:9f:34:21:f3:cc:94:0c:3a:f2:86:e6:b5:81:
37:9f:95:d9:06:6c:a3:68:d5:d5:c8:5a:bd:cc:73:64:23:24:
83:eb:15:79:0a:3a:63:2c:d6:41:10:a1:d9:c9:47:ec:e3:1c:
57:ec:da:48:36:bf:95:5e:8e:32:8d:ac:9d:14:b6:97:16:41:
1f:b5:c9:2b:24:7a:ae:0c:fa:19:0b:22:65:df:d3:e7:52:1d:
ab:eb:54:2f:bb:3a:7c:ec:7a:cd:c6:da:39:84:50:e4:82:28:
57:6e:5b:8e:00:8e:c5:be:30:04:6d:c5:b6:05:93:82:c7:a5:
c4:9a:fa:45:f5:e8:f4:60:1d:46:41:b0:95:54:77:b9:ba:57:
6a:52:8a:5f:a6:bb:97:71:3e:7c:3c:59:06:bb:81:bb:15:81:
1a:5f:6d:19:c8:80:11:16:84:f8:5e:87:9b:5b:52:5e:b0:f7:
7b:7a:1a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:42:59 2024 by rpki-client on console-fra.rpki-client.org