Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e33302e302f32342d3234203d3e20313336373837.roa
File: 39342e3135362e33302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: La3vwn/8jg5797tgIbqUUWEDZX1m3zwmEoRPDGFkHd4=
Subject key identifier: 9E:70:E8:34:94:02:E9:CF:53:E6:D0:93:0A:93:90:70:E3:0E:BB:E0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 519EF6D88CBE4A6C92C6547488AADA4A40C25328
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e33302e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 25 Sep 2024 21:35:19 +0000
ROA not before: Wed 25 Sep 2024 21:30:19 +0000
ROA not after: Wed 24 Sep 2025 21:35:19 +0000
asID: 136787
IP address blocks: 94.156.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:9e:f6:d8:8c:be:4a:6c:92:c6:54:74:88:aa:da:4a:40:c2:53:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 25 21:30:19 2024 GMT
Not After : Sep 24 21:35:19 2025 GMT
Subject: CN=9E70E8349402E9CF53E6D0930A939070E30EBBE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f7:93:f4:85:c8:bb:2d:24:15:24:3c:00:a7:
18:e1:f0:87:e9:28:5d:43:da:a6:7a:18:32:86:80:
06:63:65:3e:c9:13:7b:11:67:62:b0:eb:4a:7d:ce:
c9:3d:db:67:6c:d0:6d:84:79:6a:f1:3f:b9:3e:01:
a1:34:94:49:73:1d:fd:21:18:87:f7:f5:60:2f:08:
0b:93:6f:cf:9f:98:32:fa:b3:81:e1:1a:8b:2d:0e:
f9:e0:cd:b5:a2:8a:c1:50:38:82:5f:59:b7:d3:96:
6e:62:80:18:53:14:37:7e:4b:27:05:18:4e:1b:63:
ed:5a:ba:49:86:1b:dc:2e:0d:45:fe:eb:b7:54:7a:
35:13:70:ab:76:6e:11:e4:d6:14:a3:83:2f:80:89:
5a:29:7d:10:3b:0a:56:f8:b9:2a:03:d1:70:72:e3:
03:eb:4b:59:a3:ae:43:8d:7f:28:4d:47:b7:3f:62:
2e:46:a7:9b:f3:c6:29:78:54:c2:13:9b:35:c3:b2:
5c:5f:2b:04:07:9f:b2:2e:e7:1a:48:ad:4c:47:5e:
b3:e6:b5:f3:0a:b5:c2:cf:dd:b8:bf:69:10:87:cb:
0e:ad:0a:24:6e:f3:c6:29:2a:4d:33:9c:c2:f9:74:
0b:8b:e9:3c:81:58:53:bf:eb:ea:d5:10:e2:18:33:
35:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:70:E8:34:94:02:E9:CF:53:E6:D0:93:0A:93:90:70:E3:0E:BB:E0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e33302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.30.0/24
Signature Algorithm: sha256WithRSAEncryption
20:a8:85:3a:f1:45:49:4d:8d:6c:b3:bf:c0:08:dd:45:d1:ae:
e4:a3:60:65:6b:25:53:ac:83:7c:34:96:ba:b9:ff:56:65:61:
19:67:b0:06:fb:7f:c8:9f:6d:fe:2e:77:93:08:9b:79:63:06:
f6:a1:46:db:e4:f9:59:7b:9e:fa:95:92:c4:ee:b0:99:9a:a7:
3f:55:2b:bd:c9:41:a9:c9:7a:3c:07:d6:c7:f9:f5:be:93:fa:
e3:0a:dd:49:e9:88:c2:9f:de:65:c2:92:31:eb:a5:8a:3d:3e:
b7:e7:47:f9:00:1d:60:59:52:f1:d8:cf:27:58:64:f5:cf:d8:
bf:32:86:13:60:ae:f7:8b:ac:e8:41:7e:b6:70:af:c9:45:e7:
17:4b:6c:8f:01:08:c1:0a:c9:78:45:32:f3:c8:95:1b:d8:fe:
ad:bd:b8:35:fc:f6:e4:d5:0a:2b:ad:58:85:52:8c:5f:ee:76:
05:fc:fc:8b:5d:37:de:97:7f:51:b0:94:60:11:d1:31:93:90:
72:93:54:0e:12:41:92:4d:cc:e2:7e:6e:81:dc:ce:db:c6:18:
00:6f:de:ab:83:94:f3:d9:48:b7:9f:99:3f:2c:eb:e8:17:9c:
12:c7:67:5e:63:be:de:7d:5f:e5:f3:1a:70:11:dc:7d:76:e5:
3d:d0:b4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:04 2024 by rpki-client on console-fra.rpki-client.org