Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36302e302f32342d3234203d3e20313336373837.roa
File: 39332e3131342e36302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: qoXWFB3UuneSDGa/8T5MPMMln8zeJpVLkK3NZdqXZZc=
Subject key identifier: 4A:BD:1B:42:9F:E9:17:0A:6F:1C:A7:69:41:16:F5:9D:30:EE:41:AB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 76EFCA11D0E1A0B11ADA8C8C4A948CD0D77D2331
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36302e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 27 Nov 2024 14:42:10 +0000
ROA not before: Wed 27 Nov 2024 14:37:10 +0000
ROA not after: Wed 26 Nov 2025 14:42:10 +0000
asID: 136787
IP address blocks: 93.114.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:ef:ca:11:d0:e1:a0:b1:1a:da:8c:8c:4a:94:8c:d0:d7:7d:23:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 27 14:37:10 2024 GMT
Not After : Nov 26 14:42:10 2025 GMT
Subject: CN=4ABD1B429FE9170A6F1CA7694116F59D30EE41AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:83:87:4a:08:6c:54:73:64:7a:9a:c8:81:5d:
15:57:90:9a:ec:92:06:d7:d2:6c:21:33:d8:3c:5e:
f4:b5:0a:51:9d:7b:6b:b5:d5:86:cb:83:00:f5:21:
15:37:9a:78:d7:97:c6:e8:fa:b3:84:79:4f:a1:16:
84:b3:04:bf:ae:20:0d:e9:b3:8f:ec:57:89:e8:39:
da:9d:2b:60:90:c4:07:6f:cf:1a:b7:82:2d:af:20:
4b:9e:6f:e1:67:d1:f6:41:be:6c:dd:53:a8:83:0a:
88:32:03:ef:a7:8f:67:a7:63:0b:e2:ce:4b:c7:1a:
c9:d6:b9:7d:63:fd:a2:dc:b4:b0:9e:40:94:dd:f0:
17:d8:a0:99:41:05:ac:11:1b:84:b1:53:cf:3d:a6:
6f:ea:9c:b0:d9:fb:6f:aa:95:2d:cb:d8:09:ee:c9:
13:df:b6:e3:93:69:25:8e:0b:4c:57:57:ec:03:bc:
67:8b:6c:dc:08:3b:2e:e6:a7:f0:ad:71:f8:1b:24:
6f:c3:73:60:5c:76:2f:b5:7d:e5:d7:6e:ed:c0:3f:
2b:08:e4:9a:74:9c:bb:3f:e7:6f:46:bb:e6:60:f0:
c6:f8:40:b7:87:48:73:e5:b3:8f:54:73:c4:16:f0:
3b:89:74:d9:5a:a5:8f:d2:a6:53:75:24:7e:41:d5:
75:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BD:1B:42:9F:E9:17:0A:6F:1C:A7:69:41:16:F5:9D:30:EE:41:AB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.60.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:78:14:a1:a5:78:82:a0:43:39:f8:2f:30:3e:54:6f:42:02:
99:ef:50:e3:33:9e:bc:a1:74:05:0c:29:67:80:48:50:b7:7d:
03:12:de:80:59:0e:a0:7c:4c:a7:8d:c9:56:7d:cb:1a:07:f0:
dd:60:13:50:e6:5d:1d:0e:03:91:b6:44:45:9f:5d:b9:87:34:
3d:a3:e5:25:1a:46:3b:56:b2:13:21:ee:20:fc:1d:56:88:1c:
f2:75:9d:8a:e5:e4:85:69:b9:c5:f5:66:27:8d:35:76:0c:f4:
ea:81:08:e9:b8:44:66:22:0e:4f:d9:4b:a1:88:3c:3d:54:5a:
e5:82:20:29:54:cb:9d:b2:15:4c:8c:b8:cc:d6:aa:09:d4:87:
eb:2f:f6:84:88:91:f5:c6:2e:28:57:64:64:c3:0c:59:ea:a9:
51:16:ed:3e:5f:59:6b:35:a6:64:77:88:8f:e6:90:6a:ff:02:
dd:15:d3:04:a3:08:52:61:0b:67:4f:6d:e5:4f:e4:fc:c6:56:
aa:dd:bd:a1:a3:27:aa:42:73:06:5f:25:4e:dc:87:d0:fd:45:
b5:88:ff:d4:56:b4:b2:f3:d8:47:f0:06:d8:5f:05:ba:89:bf:
e5:4b:7e:aa:23:f3:24:8e:0b:42:93:32:46:b1:7e:28:e1:6e:
77:0c:cc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:14:37 2025 by rpki-client