Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131332e302f32342d3234203d3e20313336373837.roa
File: 39352e3231342e3131332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: U0bOkhKJ6Vp8XsEZuyePSThoF40OYm2sC423SQNem1s=
Subject key identifier: 80:BE:9A:4C:36:05:B1:C0:27:D6:46:0F:34:92:3F:0C:EF:E2:6D:8C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7A7F5AD083547F1A850252B56CCE28A43E5B5B1E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 26 Jan 2024 19:02:13 +0000
ROA not before: Fri 26 Jan 2024 18:57:13 +0000
ROA not after: Fri 24 Jan 2025 19:02:13 +0000
asID: 136787
IP address blocks: 95.214.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:7f:5a:d0:83:54:7f:1a:85:02:52:b5:6c:ce:28:a4:3e:5b:5b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 26 18:57:13 2024 GMT
Not After : Jan 24 19:02:13 2025 GMT
Subject: CN=80BE9A4C3605B1C027D6460F34923F0CEFE26D8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:20:8b:fa:78:c3:fb:62:f8:07:10:f5:28:90:
4a:ad:eb:5e:71:09:4f:83:8f:42:3d:b6:11:b6:58:
25:4c:ef:e9:4e:a2:37:f4:dd:7a:13:83:d6:78:85:
1d:b6:b5:86:fa:8d:6c:24:af:89:6a:74:e4:f6:ec:
7c:52:80:0e:0d:b5:fb:1f:df:90:f2:cb:c3:3c:e5:
a3:b3:bd:9c:73:3f:79:8f:8f:0f:0e:37:f4:af:29:
84:1d:49:0a:09:b8:d2:b2:5d:c9:96:8c:2a:60:03:
f9:54:b8:df:d7:ab:31:93:44:01:8c:fe:9d:73:93:
d1:95:66:3d:f1:44:74:81:1b:25:06:fa:8d:e6:3c:
0a:59:42:1f:75:cc:d4:c9:64:fd:03:46:6a:47:ff:
70:ff:21:9a:9a:c0:0a:95:94:4d:c2:e7:33:a8:f8:
36:20:1e:02:b3:a0:12:da:33:f2:bb:91:b4:ac:ea:
c3:c0:5c:b2:e0:c0:da:7c:33:bd:31:aa:18:43:cb:
35:b9:53:e2:4d:89:7c:51:42:1b:9a:fe:9f:11:cd:
f4:1e:a2:2e:6a:de:0a:54:88:4a:1f:91:22:1f:8e:
56:71:4a:94:2b:76:80:a2:72:b2:db:c5:34:7c:f1:
af:d3:89:3d:03:70:49:fc:4e:b5:2d:bc:7a:c4:8e:
6a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BE:9A:4C:36:05:B1:C0:27:D6:46:0F:34:92:3F:0C:EF:E2:6D:8C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.113.0/24
Signature Algorithm: sha256WithRSAEncryption
06:af:0b:49:e8:77:33:2d:c2:09:4d:94:96:02:1c:0b:99:0a:
29:79:46:a9:26:66:ca:b2:a0:48:5d:52:24:bc:3b:e9:bf:d3:
0b:27:f4:2a:e7:08:9e:22:08:05:f3:7a:6b:0b:8b:eb:c8:03:
d2:82:fe:17:45:06:97:a6:a8:1a:88:fb:0f:db:f1:5b:e7:f1:
4a:5b:fa:fb:bd:55:43:eb:79:b6:59:f3:c8:c8:7e:a6:45:4e:
d9:a1:f6:34:fc:b9:b0:34:18:86:97:08:c0:eb:07:45:28:59:
a5:6c:56:e0:06:51:98:d7:0a:fe:c2:05:d0:ae:f5:37:54:77:
4b:7b:ea:a0:b4:be:d6:18:ca:d8:20:6d:f8:e5:61:a3:42:59:
96:cf:33:1c:39:58:cc:a2:b8:1b:e2:66:4f:26:3f:e7:53:40:
7f:ea:8d:86:b9:79:b6:e8:a9:10:1a:b5:7e:e7:90:80:91:a8:
48:a7:a4:62:a6:4c:05:bb:11:66:5f:76:13:cc:20:db:c3:cc:
91:99:00:c7:91:2b:ab:40:c6:2b:6c:a1:f9:85:31:b9:aa:ea:
69:97:cd:d4:dc:1b:40:cc:73:31:8a:1a:b2:d4:41:0f:41:6e:
49:8f:09:dc:33:c5:89:74:2b:ff:b4:7d:13:af:54:32:df:9e:
20:a9:9d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:04:28 2024 by rpki-client on console-fra.rpki-client.org