Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3234382e302f32322d3234203d3e203437353833.roa
File: 3130392e3130362e3234382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: jpUm4D5vVYOsPn+C8L4lv8AlS5SUGXVwcw7GZxSIJy0=
Subject key identifier: 9D:EF:2E:52:DD:A1:0F:A4:23:15:AC:48:1A:82:2F:7D:7F:74:2D:86
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3ABAD2F8B62F8BDA144164189AB4F33252361096
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3234382e302f32322d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:25 +0000
ROA not before: Mon 26 Feb 2024 08:48:25 +0000
ROA not after: Mon 24 Feb 2025 08:53:25 +0000
asID: 47583
IP address blocks: 109.106.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ba:d2:f8:b6:2f:8b:da:14:41:64:18:9a:b4:f3:32:52:36:10:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:25 2024 GMT
Not After : Feb 24 08:53:25 2025 GMT
Subject: CN=9DEF2E52DDA10FA42315AC481A822F7D7F742D86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:07:51:12:79:4e:ea:31:c4:24:f9:3e:e2:2d:
77:29:9d:95:67:6c:c3:6a:84:4d:7f:e8:64:89:21:
03:23:24:25:db:c2:e6:03:65:eb:8d:c2:74:19:c8:
f3:11:73:e9:d0:98:38:58:86:c2:a4:f1:85:bf:e7:
47:8d:ce:4d:b3:42:26:48:c1:af:bc:34:1a:90:7d:
fe:12:12:9b:5d:7b:e4:13:6a:4b:19:5a:a4:11:ec:
46:fe:0b:1e:ee:99:42:6f:c9:f0:09:3d:66:66:6d:
b9:a8:bf:3b:1f:0c:6b:b2:99:a2:a6:f8:52:ba:85:
0b:b1:0e:9e:06:3f:d8:46:b6:e6:5b:b2:c9:aa:d8:
68:54:fa:be:97:43:65:93:a5:25:45:d1:88:0d:ae:
c1:5f:dc:78:a4:bd:bf:51:ce:14:f3:7b:f9:8a:b5:
0f:06:72:5d:c9:55:de:ef:fa:38:55:cd:da:43:0b:
bd:72:7d:2e:bd:7b:5c:7a:02:39:dd:98:2a:7f:c6:
b0:e6:14:21:0e:b6:08:8b:f5:91:d2:6b:d0:5b:d6:
3f:ab:4d:ba:76:a3:c9:3f:3e:c3:d5:27:0c:89:63:
34:92:67:c0:5a:35:2a:2e:2a:a7:c2:1f:f6:62:59:
ec:74:7d:f4:d0:0d:a9:12:3c:78:ed:86:b4:d6:00:
88:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EF:2E:52:DD:A1:0F:A4:23:15:AC:48:1A:82:2F:7D:7F:74:2D:86
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3234382e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.248.0/22
Signature Algorithm: sha256WithRSAEncryption
59:40:32:cd:0d:60:6d:84:53:58:a3:81:84:8f:9d:94:a9:42:
58:2e:e5:56:b5:09:7e:28:13:ed:c4:97:b2:6d:f9:57:bc:ea:
33:43:dc:5a:1b:d6:75:3e:15:2f:38:79:d6:6a:c0:71:66:c0:
b7:c7:a7:43:81:5b:1e:d4:78:91:4b:2c:8b:2b:63:f5:eb:e0:
c2:5a:b9:f8:6d:f9:03:8d:b9:6e:60:0e:d5:be:40:e1:f1:dc:
2d:ca:1d:bb:f3:91:c8:75:a7:93:ad:6e:2c:34:56:8c:56:82:
3d:4d:4a:91:54:0a:5e:ed:0e:67:5e:9a:9e:83:8f:05:00:37:
ad:64:52:10:bd:83:21:70:df:9f:2e:d2:b3:04:f3:28:e1:31:
f7:e8:7c:16:d9:9e:a1:c8:b1:05:1c:c3:ff:f6:c1:3a:4b:8b:
52:39:52:75:20:c3:66:ac:69:95:94:03:64:11:93:88:f5:91:
3a:33:0c:56:ff:38:2b:50:48:d3:b1:5d:59:a4:48:f8:79:32:
18:d1:c2:2b:20:1a:00:df:14:c9:48:c4:4a:b2:ad:b1:dd:da:
72:8a:f3:db:ee:8e:c7:6f:92:f7:12:8e:82:c9:a2:fb:32:f5:
8d:58:2d:7b:04:e4:c4:84:91:78:81:85:63:09:f1:c0:08:32:
b6:19:a8:29
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUOrrS+LYvi9oUQWQYmrTzMlI2EJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAyMjYwODQ4MjVaFw0yNTAyMjQwODUzMjVaMDMxMTAvBgNV
BAMTKDlERUYyRTUyRERBMTBGQTQyMzE1QUM0ODFBODIyRjdEN0Y3NDJEODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZB1ESeU7qMcQk+T7iLXcpnZVn
bMNqhE1/6GSJIQMjJCXbwuYDZeuNwnQZyPMRc+nQmDhYhsKk8YW/50eNzk2zQiZI
wa+8NBqQff4SEptde+QTaksZWqQR7Eb+Cx7umUJvyfAJPWZmbbmovzsfDGuymaKm
+FK6hQuxDp4GP9hGtuZbssmq2GhU+r6XQ2WTpSVF0YgNrsFf3Hikvb9RzhTze/mK
tQ8Gcl3JVd7v+jhVzdpDC71yfS69e1x6AjndmCp/xrDmFCEOtgiL9ZHSa9Bb1j+r
Tbp2o8k/PsPVJwyJYzSSZ8BaNSouKqfCH/ZiWex0ffTQDakSPHjthrTWAIgnAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUne8uUt2hD6QjFaxIGoIvfX90LYYwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzMDM5MmUzMTMwMzYyZTMy
MzQzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJtavgwDQYJKoZIhvcNAQELBQADggEBAFlAMs0NYG2EU1ijgYSPnZSpQlgu5Va1
CX4oE+3El7Jt+Ve86jND3Fob1nU+FS84edZqwHFmwLfHp0OBWx7UeJFLLIsrY/Xr
4MJaufht+QONuW5gDtW+QOHx3C3KHbvzkch1p5Otbiw0VoxWgj1NSpFUCl7tDmde
mp6DjwUAN61kUhC9gyFw358u0rME8yjhMffofBbZnqHIsQUcw//2wTpLi1I5UnUg
w2asaZWUA2QRk4j1kTozDFb/OCtQSNOxXVmkSPh5MhjRwisgGgDfFMlIxEqyrbHd
2nKK89vujsdvkvcSjoLJovsy9Y1YLXsE5MSEkXiBhWMJ8cAIMrYZqCk=
-----END CERTIFICATE-----
Generated at Mon May 20 19:28:03 2024 by rpki-client on console-fra.rpki-client.org