Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3134392e302f32342d3234203d3e20313437303439.roa
File: 39342e3135362e3134392e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: oNbRDNWR3V+0jLB+aML9Je/qx+ygSjsa8sa+0CeJZfM=
Subject key identifier: 26:5C:2B:DC:99:09:13:B3:33:DD:5A:51:F3:9D:BA:38:60:B1:18:74
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5A072B11ED8174CA840FA264A06EA500EC37220E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3134392e302f32342d3234203d3e20313437303439.roa
Signing time: Wed 02 Oct 2024 09:32:46 +0000
ROA not before: Wed 02 Oct 2024 09:27:46 +0000
ROA not after: Wed 01 Oct 2025 09:32:46 +0000
asID: 147049
IP address blocks: 94.156.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:07:2b:11:ed:81:74:ca:84:0f:a2:64:a0:6e:a5:00:ec:37:22:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 2 09:27:46 2024 GMT
Not After : Oct 1 09:32:46 2025 GMT
Subject: CN=265C2BDC990913B333DD5A51F39DBA3860B11874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:73:29:ca:35:b4:59:85:10:6d:80:05:5d:d9:
90:31:e1:2a:6a:6e:47:ed:a0:ee:b8:ba:8c:e3:d4:
e9:d1:c7:0c:80:3d:3d:9c:64:25:93:8f:7c:a2:c3:
52:b1:b9:d0:74:b3:ac:a1:bd:1e:d8:18:1d:04:0d:
ef:ee:57:da:4c:39:5c:86:3e:6b:64:b2:06:1f:e9:
8a:a3:5f:f9:14:84:72:25:8c:55:c6:b5:09:97:82:
0b:83:76:ad:24:09:a8:dc:b8:66:99:0d:ce:af:ef:
e5:3e:16:60:e3:a4:16:68:cb:d7:62:27:c3:4d:b2:
52:12:d7:67:8d:4b:17:00:f2:db:aa:ec:70:c5:cc:
9c:4b:cb:e6:f6:7a:41:cb:36:a4:7e:e9:7a:3e:53:
04:12:17:16:9b:ad:57:40:73:70:a0:ce:65:e6:f4:
6c:de:ca:1f:6c:26:7f:3c:29:5f:08:fe:26:74:06:
c9:87:c2:65:10:ec:85:fc:84:85:84:61:01:9b:7e:
78:f3:59:68:78:aa:36:04:d5:ec:1b:c2:2c:27:60:
76:7b:e4:63:70:dd:84:8a:61:7d:b8:1a:ba:a0:88:
44:60:35:1a:b7:f6:e3:63:5c:df:01:b2:1b:40:c7:
27:e9:35:cd:4d:b0:e7:83:04:1e:9d:59:ac:4c:c0:
e9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5C:2B:DC:99:09:13:B3:33:DD:5A:51:F3:9D:BA:38:60:B1:18:74
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3134392e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.149.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ad:4a:26:2e:4f:0a:c0:76:0f:de:78:f9:87:85:87:a8:1c:
fe:99:13:7a:de:0f:05:6a:02:c7:a8:3e:51:0f:fc:25:2f:fe:
2f:6d:05:b3:97:0c:49:33:8f:e6:81:16:90:71:a9:12:5a:9b:
bc:ee:52:39:87:23:4a:92:0a:78:84:60:77:5b:fe:13:78:d3:
32:ec:19:08:bc:28:a5:af:c0:00:e4:db:7f:05:e5:55:b4:ac:
11:3c:b7:89:e3:ee:d2:41:91:d1:7d:aa:c5:26:c0:8c:f1:b7:
36:4e:b5:fc:44:61:20:07:15:0e:1b:2f:6b:07:c1:ac:0b:e6:
1f:c5:00:c5:ab:8c:4a:61:a4:4a:63:5a:26:05:ca:4b:81:b1:
e9:cf:00:cd:44:33:45:ba:50:2f:6e:62:dd:f2:11:d4:e8:3b:
73:ea:9e:ea:dc:1f:1d:22:95:b6:1a:38:22:ba:42:fe:a0:80:
69:10:74:50:f0:58:6f:97:b3:bd:c3:10:38:9d:73:ac:1d:66:
a0:eb:02:a2:cf:12:bc:23:c3:fd:dc:5e:2b:c0:9c:91:3f:7c:
d4:32:ee:fc:09:4e:a0:98:47:8a:48:4c:e2:92:8b:d7:78:30:
48:48:44:8c:5f:5d:a7:97:6b:bf:9b:1f:fb:64:ff:e5:a2:4e:
5b:fc:36:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:42:59 2024 by rpki-client on console-fra.rpki-client.org