Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3232382e302f32342d3234203d3e20323134313535.roa
File: 39342e3135362e3232382e302f32342d3234203d3e20323134313535.roa (raw, json)
Hash identifier: 3W+g1MyMTrRVJBooYnQ628UmwNFcFjls8jwf7VL7duM=
Subject key identifier: 33:00:A2:C8:73:6B:44:85:97:30:66:29:4C:19:DA:1F:95:67:4A:5D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2F19251D107B25ED978EC456D164E8AA333C31F1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3232382e302f32342d3234203d3e20323134313535.roa
Signing time: Wed 25 Sep 2024 21:35:49 +0000
ROA not before: Wed 25 Sep 2024 21:30:49 +0000
ROA not after: Wed 24 Sep 2025 21:35:49 +0000
asID: 214155
IP address blocks: 94.156.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:19:25:1d:10:7b:25:ed:97:8e:c4:56:d1:64:e8:aa:33:3c:31:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 25 21:30:49 2024 GMT
Not After : Sep 24 21:35:49 2025 GMT
Subject: CN=3300A2C8736B4485973066294C19DA1F95674A5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:b2:6c:68:b7:aa:d8:5f:48:cb:cc:e5:b4:
aa:fa:e5:bb:5f:bb:8c:bc:42:28:a0:06:59:d3:61:
ed:8d:74:29:73:94:41:8d:3b:51:76:ce:16:5e:21:
96:16:23:57:43:0e:25:ef:2f:13:0d:0e:40:fa:59:
f9:fd:49:00:7e:32:da:c0:05:a2:63:8e:5f:06:7f:
4b:df:b2:2b:29:fa:e8:d8:27:47:98:91:fc:c1:fb:
73:9d:ea:16:c0:c4:8f:d6:fc:c7:26:a2:70:c4:68:
a9:d5:a1:c0:90:ab:44:4e:b4:a3:f6:c1:08:5a:81:
f3:13:b8:68:50:97:ad:51:d6:5b:1d:b6:d6:4c:d8:
72:92:b8:75:f2:4d:82:cd:d9:ee:1b:40:10:8f:d5:
a4:a8:d8:6f:6c:f3:23:50:13:69:8a:a0:e2:db:c7:
bc:a3:0b:13:3d:1f:3c:a7:14:73:0e:22:d3:39:cc:
4e:4e:cd:3a:62:75:9a:1a:ef:05:e0:91:66:dc:33:
c4:dc:61:21:2a:aa:d5:04:ce:02:8c:03:fc:59:02:
40:5a:47:34:e5:e0:da:01:19:c8:77:22:67:e5:27:
dd:cc:de:f0:64:5b:a9:05:fc:7a:bb:ea:e7:fc:cc:
d2:7b:6d:be:bc:38:ea:ab:40:bf:c6:7c:fc:37:06:
01:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:00:A2:C8:73:6B:44:85:97:30:66:29:4C:19:DA:1F:95:67:4A:5D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3232382e302f32342d3234203d3e20323134313535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.228.0/24
Signature Algorithm: sha256WithRSAEncryption
00:82:72:a0:55:50:73:fc:d6:13:2b:21:72:e9:62:98:d9:38:
95:76:c1:ed:30:6a:bf:52:1d:d3:87:00:0b:de:e7:0f:3a:61:
47:aa:24:4f:1e:7a:e7:8a:ea:16:a9:3e:e4:20:dc:3d:e0:31:
a0:f3:74:f6:ad:5f:6a:07:63:d7:df:a4:bc:3d:a1:73:9f:dc:
8f:08:e3:9c:c9:42:2f:53:f3:45:29:87:45:ee:a7:e2:46:9b:
34:34:6d:2d:09:ad:b2:14:39:cd:09:a9:74:71:1d:81:18:28:
d7:98:99:1b:26:96:f7:6a:39:aa:63:0e:8f:b4:94:ec:50:ea:
47:96:9e:8c:99:63:7e:ef:2f:d9:9b:e7:a4:4e:1b:6f:c9:65:
18:06:63:41:a0:a0:89:1e:88:37:0a:3a:f8:e1:b1:10:a9:b9:
e8:20:14:c9:e8:ef:99:76:e1:fe:d5:07:ab:55:c9:56:eb:e6:
bf:d2:d7:56:9c:bb:ec:d7:24:4f:a9:d3:83:72:c5:c0:ad:63:
29:f8:1e:6b:d9:45:72:da:ee:e5:4f:cc:73:8f:a1:07:11:ad:
d1:0f:71:7c:5b:1d:38:d2:06:c0:4b:d4:bb:a1:b7:54:c5:9f:
71:36:ca:ca:b6:1c:00:0a:45:03:23:55:57:c9:03:98:52:b2:
a9:3a:b7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:48 2025 by rpki-client