Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e3138302e3137392e302f32342d3234203d3e20313336373837.roa
File: 3139342e3138302e3137392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: NgK/fqoKcAtdfdlQzCF5gy0l5XIgbUOhduYyWATwZJ0=
Subject key identifier: FB:D0:C5:7D:A6:DF:29:D5:2E:0F:17:0B:98:4C:CD:26:44:48:21:EB
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 2C16F52B84DB50354A498BE91CE965E4187BEEBB
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e3138302e3137392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 08 Mar 2024 12:58:25 +0000
ROA not before: Fri 08 Mar 2024 12:53:25 +0000
ROA not after: Fri 07 Mar 2025 12:58:25 +0000
asID: 136787
IP address blocks: 194.180.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 16:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:16:f5:2b:84:db:50:35:4a:49:8b:e9:1c:e9:65:e4:18:7b:ee:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 8 12:53:25 2024 GMT
Not After : Mar 7 12:58:25 2025 GMT
Subject: CN=FBD0C57DA6DF29D52E0F170B984CCD26444821EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bb:e3:15:bf:c8:3e:d4:ba:ea:cb:8b:d0:30:
08:97:19:da:dc:f4:61:58:14:a1:42:7d:03:ae:c9:
65:e7:c3:01:29:fe:12:bf:a8:81:da:f7:30:d4:7a:
0c:6f:55:a5:0a:c8:6f:f1:bb:29:59:28:7e:7e:9f:
6b:e9:f3:1e:fc:65:82:05:91:22:d9:ae:6f:52:3e:
5a:41:e0:93:d4:a0:d1:81:52:dc:b2:ab:eb:4e:41:
12:da:47:57:15:c5:1b:55:ef:36:2f:cf:f1:f0:71:
09:7f:68:e1:92:60:ad:e3:ce:87:24:61:46:17:0b:
79:cd:58:cc:87:14:a5:e8:c2:c9:38:f2:d9:54:b3:
83:6f:85:f6:0b:96:62:b7:24:58:47:26:c2:bd:5f:
0e:9a:84:55:3d:45:11:68:bc:5d:37:1d:55:a6:a4:
32:11:2c:a7:f1:ff:1a:b0:b4:1c:ff:c7:a5:14:55:
d1:99:1d:19:37:e7:66:a7:48:17:7c:de:05:9f:ff:
29:51:4b:1f:eb:f7:cd:0e:51:7b:e3:9b:f9:d5:6c:
59:55:49:b2:56:2f:73:96:d1:ef:13:4e:c2:e6:b5:
b7:76:c3:5b:3e:31:22:70:19:c8:81:6a:99:3c:93:
e2:b0:96:e0:d7:6c:82:42:f6:24:c9:ce:42:1f:98:
17:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D0:C5:7D:A6:DF:29:D5:2E:0F:17:0B:98:4C:CD:26:44:48:21:EB
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e3138302e3137392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.179.0/24
Signature Algorithm: sha256WithRSAEncryption
41:12:40:bb:41:9c:b2:2f:54:36:bd:6f:81:5c:ed:5f:6b:fa:
6e:ed:c6:4b:70:2a:e9:e1:ff:24:e6:23:5e:9a:70:b4:bf:89:
dc:fb:f4:83:6b:7b:12:8c:52:7c:b9:c9:45:e0:17:e5:e5:61:
91:64:82:75:20:7f:11:26:4f:72:fd:0e:f9:8f:2f:ef:7b:cd:
c4:9e:f8:1a:de:cb:d6:f5:8b:d1:98:ac:2c:ef:5e:4a:d3:9f:
e5:b2:ee:3a:ec:4d:8f:10:6e:69:1e:52:60:29:4e:94:86:40:
d9:13:3f:e2:21:51:b4:dc:5b:32:82:d5:51:72:f1:1c:ae:fe:
0e:c4:7b:06:b6:5c:83:26:62:93:06:da:f9:ff:e2:9c:bf:c5:
ca:7a:d4:27:6f:84:99:c4:19:1d:3a:8e:fb:6b:cc:c5:01:ef:
bf:1c:cb:85:96:dc:70:63:9a:37:46:94:1a:00:31:f7:66:b6:
a8:71:e4:9a:bb:3a:ec:33:7b:bc:e2:17:e0:4a:f4:44:8a:9f:
4f:ed:67:3b:75:58:0e:c9:73:15:12:7b:cd:02:3d:59:ef:d0:
38:cb:66:9a:bf:01:1a:6e:45:c7:1d:32:dd:90:27:83:88:c7:
77:9d:11:99:bc:c0:b6:8f:f4:93:56:7d:be:5e:d2:07:9e:22:
aa:e6:3c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 23:39:21 2024 by rpki-client on console-ams.rpki-client.org