Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3233312e302f32342d3234203d3e20323134313535.roa
File: 39342e3135362e3233312e302f32342d3234203d3e20323134313535.roa (raw, json)
Hash identifier: Pc8I+8DLOFchTOn/72dkAiXmV2n6qebENww42hHN0T8=
Subject key identifier: 20:42:AC:CA:F1:24:F2:B2:18:C0:CB:D9:3B:27:05:01:C5:90:2D:B3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4B3B2240F96512A6544AA0ABB6111AAAC2E83F54
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3233312e302f32342d3234203d3e20323134313535.roa
Signing time: Wed 25 Sep 2024 21:36:13 +0000
ROA not before: Wed 25 Sep 2024 21:31:13 +0000
ROA not after: Wed 24 Sep 2025 21:36:13 +0000
asID: 214155
IP address blocks: 94.156.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:3b:22:40:f9:65:12:a6:54:4a:a0:ab:b6:11:1a:aa:c2:e8:3f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 25 21:31:13 2024 GMT
Not After : Sep 24 21:36:13 2025 GMT
Subject: CN=2042ACCAF124F2B218C0CBD93B270501C5902DB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2d:88:5d:3e:10:e2:21:e1:ee:90:0c:9c:29:
5d:10:b1:34:52:15:99:a2:7e:f0:e3:3c:42:df:45:
e0:76:a5:02:44:2b:9c:d8:90:84:cc:5a:d2:7d:37:
02:59:bf:b3:fb:8b:5b:0c:38:ec:66:43:74:43:2b:
80:61:4a:b1:eb:ae:ea:dc:fb:57:dd:d2:ae:37:da:
92:16:07:c2:5b:91:17:c5:17:ec:a5:57:65:fa:1f:
a8:46:5c:c5:75:ff:c8:55:b7:6d:12:c6:22:c7:d8:
bb:92:72:0f:55:06:f8:92:8b:d2:bc:10:c5:bd:47:
a6:be:db:89:f5:72:1d:ac:3d:f2:1b:06:da:3f:bd:
6f:3c:2f:2d:76:8a:b7:9a:5b:75:95:a9:ec:49:dc:
df:5c:a1:49:14:30:42:76:ed:ad:6f:d7:ab:91:14:
ab:84:0b:e6:2d:0e:c8:eb:f6:0a:c5:4d:41:ff:e3:
ce:b5:17:b7:3d:47:10:95:f9:1b:4d:54:46:c2:2a:
3f:1b:1a:b4:26:47:66:87:63:51:48:74:c6:41:c1:
ba:ac:e6:ef:77:ff:84:5d:a3:38:5a:e3:48:ab:e2:
65:e1:13:86:d6:41:ca:a1:48:0a:9c:45:c6:c4:5d:
7c:bb:12:07:4c:c3:42:62:4f:fa:75:58:e6:2d:e6:
a9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:42:AC:CA:F1:24:F2:B2:18:C0:CB:D9:3B:27:05:01:C5:90:2D:B3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3233312e302f32342d3234203d3e20323134313535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.231.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:a2:81:0f:72:00:9c:61:93:6e:0e:6d:0b:b4:42:57:f3:2f:
93:ba:ce:55:b1:0b:b9:5b:f8:3d:ab:f1:7f:e7:9a:60:35:44:
de:e3:9b:02:ef:ae:6e:d9:b2:81:ce:a7:dd:90:8a:88:8b:b9:
51:dc:18:fc:91:3b:82:8f:22:fb:d4:65:12:5b:b8:3a:c4:0b:
db:48:c4:4b:25:e0:4e:85:6d:c3:52:cd:1a:25:56:9c:15:4b:
80:e1:e5:f9:8e:7b:f4:0c:40:c4:90:f9:dd:63:c1:ad:31:9c:
83:85:4b:aa:0b:c5:da:65:f4:b0:fe:b4:89:2f:10:7c:ee:ca:
fe:54:d4:46:61:63:66:ec:a5:6f:27:ab:f9:c3:d9:24:09:6d:
73:e9:f5:86:01:1d:3e:bf:4c:de:e8:93:95:67:77:64:36:ec:
62:de:3c:18:89:23:7f:d6:b1:08:eb:d9:0c:29:51:7d:c3:2a:
e7:0e:ba:4c:7e:c1:5c:c5:32:65:4b:88:5e:c4:33:46:0c:a5:
27:ed:22:b6:66:e6:ac:bf:6a:f5:14:fe:92:fb:f0:f4:02:67:
4b:dd:ec:4b:23:8d:bb:97:42:02:68:00:51:17:c3:d3:0e:a0:
d3:26:d3:cd:0e:b5:39:68:c9:b6:b4:a1:73:53:5d:d5:43:db:
12:c5:51:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:44 2025 by rpki-client