Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3232322e3132342e302f32322d3234203d3e20323034313730.roa
File: 3138352e3232322e3132342e302f32322d3234203d3e20323034313730.roa (raw, json)
Hash identifier: qGdnZibxKM3tTcT3q7OrNVGBqcNaOaz5xcyiR6IesNU=
Subject key identifier: BD:64:39:8D:DD:F1:29:F1:7A:D6:7E:87:AB:49:18:4D:80:56:DD:F0
Certificate issuer: /CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Certificate serial: 4386B64246AD1CC58A41BA95F8285DA0F41E0531
Authority key identifier: B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3232322e3132342e302f32322d3234203d3e20323034313730.roa
Signing time: Mon 26 Feb 2024 08:53:34 +0000
ROA not before: Mon 26 Feb 2024 08:48:34 +0000
ROA not after: Mon 24 Feb 2025 08:53:34 +0000
asID: 204170
IP address blocks: 185.222.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:86:b6:42:46:ad:1c:c5:8a:41:ba:95:f8:28:5d:a0:f4:1e:05:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Validity
Not Before: Feb 26 08:48:34 2024 GMT
Not After : Feb 24 08:53:34 2025 GMT
Subject: CN=BD64398DDDF129F17AD67E87AB49184D8056DDF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:99:ed:57:e1:ed:5a:c7:f4:19:b3:54:54:db:
c8:98:a3:e9:fc:f6:a0:ab:ae:03:c9:0e:ad:8c:81:
d4:93:6d:65:00:35:80:3a:9e:b3:3e:da:28:90:ed:
26:fe:b7:62:e1:0e:01:57:25:fc:38:0e:8c:fa:62:
11:ff:6c:86:ff:ac:b0:e7:cf:8e:78:e9:66:cc:01:
d2:b5:8b:80:34:5d:af:71:5b:0f:a7:99:e8:75:c6:
7e:04:ba:2a:6a:7d:be:f7:be:4e:35:49:28:e4:a9:
14:30:53:29:d0:95:8b:fa:91:d5:b3:dd:01:63:b2:
56:83:1c:d0:2d:d2:ec:d8:2d:09:af:96:3c:29:d5:
bc:d4:32:df:67:93:49:7b:f9:6f:90:67:4e:e4:a1:
d0:8e:1d:cc:30:39:70:7a:8c:d9:fd:ff:6d:f0:fd:
64:66:5f:d6:c1:c1:99:13:64:ba:89:7f:0f:93:83:
f0:8a:d1:1b:b5:d7:87:8e:e1:0c:45:c8:55:bb:01:
ec:22:18:5b:0d:96:b0:9a:7f:f8:dc:85:93:01:98:
d5:dd:5f:5e:1b:5a:cd:a2:3e:8e:db:78:37:97:87:
26:59:7f:36:27:f0:3d:79:84:f7:b0:67:ec:2e:6e:
ed:4f:f5:7e:9a:15:11:ba:b3:d1:1f:35:cf:5b:f3:
7c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:64:39:8D:DD:F1:29:F1:7A:D6:7E:87:AB:49:18:4D:80:56:DD:F0
X509v3 Authority Key Identifier:
keyid:B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3232322e3132342e302f32322d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.124.0/22
Signature Algorithm: sha256WithRSAEncryption
60:8a:bb:01:ad:ba:e3:38:75:47:1c:d3:27:49:1a:b2:3e:83:
2e:8e:c4:cf:c6:b6:4d:29:f3:68:6c:09:62:53:fb:25:45:19:
f1:8b:82:e4:7a:67:e2:68:af:77:7e:80:a7:16:96:fa:86:01:
9d:e5:b8:c4:62:58:7e:2b:85:3e:ab:78:7f:a9:e1:cd:76:fa:
7e:b5:3f:9a:c7:f5:5c:99:f4:06:26:8e:2f:20:e6:62:1d:28:
0c:74:0d:af:e0:1f:b0:a6:11:bd:e7:47:24:83:f1:4d:6f:6d:
11:b8:ef:8d:89:8e:9f:ff:7a:27:6f:20:eb:2d:1b:99:e7:76:
b0:a8:09:5b:16:c8:7a:bc:3c:76:ac:04:2f:00:d8:4b:1c:e3:
9e:2e:0e:18:a1:fd:b1:70:6f:ed:38:69:8e:cb:d6:e3:d1:57:
4f:99:0d:0a:1d:a0:17:ee:53:02:dd:d4:bf:d0:1d:75:96:35:
43:62:65:60:6a:f5:ea:65:57:d0:7a:4c:28:4f:2f:d9:dd:43:
c6:97:ed:06:3c:bc:b2:1a:0a:2c:b0:d4:16:3d:a5:e3:ae:d8:
ff:f9:f8:13:5b:bf:ed:b5:e2:37:10:bb:78:53:8e:ad:68:11:
7a:05:00:2c:8c:30:d0:7c:80:7e:bc:1f:fb:35:2d:75:e5:6a:
2d:8d:98:7d
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUQ4a2QkatHMWKQbqV+ChdoPQeBTEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjk3YmNmYWMyN2JiYWYxOWRlMWQzMWU1MzYyOTcyNmMx
ZTRjYWFhMjAeFw0yNDAyMjYwODQ4MzRaFw0yNTAyMjQwODUzMzRaMDMxMTAvBgNV
BAMTKEJENjQzOThERERGMTI5RjE3QUQ2N0U4N0FCNDkxODREODA1NkRERjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDome1X4e1ax/QZs1RU28iYo+n8
9qCrrgPJDq2MgdSTbWUANYA6nrM+2iiQ7Sb+t2LhDgFXJfw4Doz6YhH/bIb/rLDn
z4546WbMAdK1i4A0Xa9xWw+nmeh1xn4Euipqfb73vk41SSjkqRQwUynQlYv6kdWz
3QFjslaDHNAt0uzYLQmvljwp1bzUMt9nk0l7+W+QZ07kodCOHcwwOXB6jNn9/23w
/WRmX9bBwZkTZLqJfw+Tg/CK0Ru114eO4QxFyFW7AewiGFsNlrCaf/jchZMBmNXd
X14bWs2iPo7beDeXhyZZfzYn8D15hPewZ+wubu1P9X6aFRG6s9EfNc9b83yRAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUvWQ5jd3xKfF61n6Hq0kYTYBW3fAwHwYDVR0j
BBgwFoAUuXvPrCe7rxneHTHlNilybB5MqqIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzMvQjk3QkNGQUMyN0JCQUYxOURFMUQzMUU1MzYyOTcyNkMxRTRDQUFBMi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3VYdlByQ2U3cnhuZUhUSGxOaWx5YkI1
TXFxSS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzMvMzEzODM1MmUzMjMyMzIyZTMx
MzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDMxMzczMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEArnefDANBgkqhkiG9w0BAQsFAAOCAQEAYIq7Aa264zh1RxzTJ0kasj6DLo7E
z8a2TSnzaGwJYlP7JUUZ8YuC5Hpn4mivd36ApxaW+oYBneW4xGJYfiuFPqt4f6nh
zXb6frU/msf1XJn0BiaOLyDmYh0oDHQNr+AfsKYRvedHJIPxTW9tEbjvjYmOn/96
J28g6y0bmed2sKgJWxbIerw8dqwELwDYSxzjni4OGKH9sXBv7ThpjsvW49FXT5kN
Ch2gF+5TAt3Uv9AddZY1Q2JlYGr16mVX0HpMKE8v2d1DxpftBjy8shoKLLDUFj2l
467Y//n4E1u/7bXiNxC7eFOOrWgRegUALIww0HyAfrwf+zUtdeVqLY2YfQ==
-----END CERTIFICATE-----
Generated at Sun Jun 2 00:22:50 2024 by rpki-client on console-fra.rpki-client.org