Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3134302e382e302f32342d3332203d3e20313336373837.roa
File: 39342e3134302e382e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: 1Sqm6BQMWHvp+Ed4w6FGUCI7S6AmfwaeJmkOG0jKYgs=
Subject key identifier: 28:2A:59:CF:FE:CE:15:9C:D8:B8:5B:AE:89:34:90:D0:31:22:2A:F8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1CCE8C75A5184B42E824CF4B4D28306B41F00768
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3134302e382e302f32342d3332203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:20 +0000
ROA not before: Mon 26 Feb 2024 08:48:20 +0000
ROA not after: Mon 24 Feb 2025 08:53:20 +0000
asID: 136787
IP address blocks: 94.140.8.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:ce:8c:75:a5:18:4b:42:e8:24:cf:4b:4d:28:30:6b:41:f0:07:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:20 2024 GMT
Not After : Feb 24 08:53:20 2025 GMT
Subject: CN=282A59CFFECE159CD8B85BAE893490D031222AF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6a:17:f7:27:6b:19:a8:08:63:38:4b:c3:66:
93:21:df:62:c1:14:d2:40:c9:9c:4d:f5:c7:50:85:
74:eb:53:95:c3:93:70:d1:81:4b:b5:5c:7e:34:03:
b5:a9:f3:31:fb:dc:7a:a5:65:27:16:a5:8f:3e:41:
77:30:da:f2:9d:d5:e7:88:80:9c:b0:5a:b8:34:17:
16:db:66:3a:3e:83:2f:41:d9:2f:06:1f:5b:64:1a:
68:c5:a8:9d:43:29:39:20:1f:4b:c8:76:ae:b5:0c:
3a:47:2c:3c:32:5b:05:f3:0f:8b:10:a4:99:bd:0f:
87:d5:78:eb:2b:f3:9c:8c:90:d7:a2:7d:02:ac:94:
80:9b:82:75:2b:60:23:42:05:e8:30:8c:bc:b7:d4:
f5:e1:3e:fa:3a:4e:4f:e7:ac:99:d7:b3:c0:11:44:
3d:1a:92:3b:fe:a8:5c:d4:55:43:dd:03:73:b5:32:
d6:ab:81:07:ce:30:f1:53:49:fc:11:e9:91:1a:40:
31:ed:4f:1d:a4:54:1f:80:40:27:9f:f2:4a:96:88:
63:c0:8f:ba:c6:f5:38:b7:f8:de:bf:30:19:69:4a:
6f:89:d8:ef:11:4f:72:d7:dd:8b:f3:03:71:29:d6:
a0:fc:c6:38:8f:c3:1e:82:89:39:f5:1c:24:6f:94:
76:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2A:59:CF:FE:CE:15:9C:D8:B8:5B:AE:89:34:90:D0:31:22:2A:F8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3134302e382e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.140.8.0/24
Signature Algorithm: sha256WithRSAEncryption
63:37:e6:2a:6c:a7:fb:36:7b:e3:84:35:d6:de:78:52:21:5c:
fa:3c:b0:7d:7f:3a:36:1a:dd:c1:d3:f9:f0:48:e6:fc:74:1e:
2d:64:64:9d:07:82:48:fe:52:e3:25:05:59:fd:a0:02:f1:11:
a6:7d:f1:f8:17:5f:6b:91:a9:26:47:01:e7:85:41:0e:67:50:
cd:c2:21:4b:2e:90:25:0e:56:0a:83:4e:9b:5e:d4:1a:4f:67:
75:8b:5b:3b:62:2d:09:55:3b:db:40:c1:78:3a:b9:64:0e:68:
c9:21:3d:40:8e:35:ed:e4:d2:e8:b2:dd:c3:04:90:fa:49:d7:
b7:67:f6:71:46:83:ff:c1:2e:d7:28:d7:a1:85:a9:9c:7e:f9:
e1:5c:82:0f:1a:6a:4d:ae:fe:69:88:9a:47:0e:39:c1:10:45:
25:18:69:cd:fc:55:3c:a5:b6:2c:4c:6e:95:a7:76:47:25:6e:
72:b7:24:e9:3b:02:bd:fd:09:de:d1:6f:1c:f9:dd:7c:f7:41:
76:d4:70:4e:02:8b:6a:bb:fd:c7:74:bd:63:98:25:0e:51:7a:
63:ff:1e:b9:69:05:f8:5e:7c:43:0f:94:51:a3:25:4a:c7:c6:
aa:64:1a:c7:5c:2d:4e:33:43:1d:c9:fb:c6:ee:b2:2a:04:21:
0f:8b:68:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:04:28 2024 by rpki-client on console-fra.rpki-client.org