Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3235322e302f32322d3234203d3e203437353833.roa
File: 3130392e3130362e3235322e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: 3Dc5Misse5CF6/BpBu4SXr4YIDOpdLdREFhL4J3HspA=
Subject key identifier: 02:E5:05:D5:F2:6C:0F:12:9D:09:6C:73:DA:52:51:D8:2E:00:01:05
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 17ABAF9822233781D7566D039120BCBFE3CFF795
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3235322e302f32322d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:26 +0000
ROA not before: Mon 26 Feb 2024 08:48:26 +0000
ROA not after: Mon 24 Feb 2025 08:53:26 +0000
asID: 47583
IP address blocks: 109.106.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:ab:af:98:22:23:37:81:d7:56:6d:03:91:20:bc:bf:e3:cf:f7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:26 2024 GMT
Not After : Feb 24 08:53:26 2025 GMT
Subject: CN=02E505D5F26C0F129D096C73DA5251D82E000105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:28:db:77:d3:a2:23:fa:af:3f:4e:1e:c4:
7a:ca:ff:93:40:b3:6e:44:34:55:8a:2f:ba:31:56:
b9:08:6b:a7:14:ab:50:62:ab:67:ff:2c:a1:42:07:
fe:32:b2:6d:fc:80:9a:0f:20:66:38:76:37:63:d7:
27:a7:26:b8:fe:78:f2:78:18:c4:5c:f1:6a:81:5c:
d7:3b:aa:82:45:11:54:51:aa:68:f4:f6:21:32:e0:
b6:f3:ec:47:67:54:e3:29:e6:d8:98:5f:e7:5b:4d:
58:1b:0a:11:4c:70:df:2f:63:d9:67:4d:df:6a:e2:
9e:3c:a0:63:42:bc:f3:e7:9d:e8:2a:3b:6e:73:45:
f8:21:c4:43:85:af:2b:fe:8b:c7:cb:10:55:32:15:
49:02:c5:9b:90:37:dd:82:aa:31:78:cd:a0:c1:08:
01:d2:eb:6f:1d:ae:61:09:17:97:79:31:15:bb:47:
5b:f2:eb:ec:7e:54:9b:74:7a:0d:82:ca:45:11:8f:
5c:ae:b2:4f:9f:27:df:77:0d:e7:6e:30:7c:bf:3d:
82:26:47:84:9b:a1:2c:b4:49:a9:63:bb:15:00:ca:
fc:ed:02:f5:97:20:25:fc:33:08:d0:62:0b:99:d4:
02:79:89:78:bf:a2:24:f2:d5:03:ba:8d:c1:e9:0a:
4b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E5:05:D5:F2:6C:0F:12:9D:09:6C:73:DA:52:51:D8:2E:00:01:05
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3235322e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.252.0/22
Signature Algorithm: sha256WithRSAEncryption
24:8f:34:82:cb:af:d1:6c:d9:41:d2:85:9d:bb:90:66:9d:98:
1e:13:96:29:e1:dc:1a:da:2c:f4:a3:69:9d:ff:c0:93:1a:91:
9d:f6:b3:1d:5e:84:f2:05:75:ca:19:1e:6b:d0:73:b0:8c:37:
71:71:0c:e2:59:e1:ae:c0:72:79:16:5a:3c:cb:6c:47:43:7a:
43:7e:70:12:74:63:53:d5:c7:51:fe:4b:0d:bf:d8:ac:05:4d:
d6:a6:3c:da:71:5d:d2:18:a2:27:f2:7a:e6:63:d2:d9:ed:ab:
72:9a:75:8e:ee:82:38:51:cb:18:be:28:1d:43:54:86:e2:84:
b2:1f:e4:c5:99:22:64:ad:8d:1d:d8:a3:34:ad:dc:97:d5:7c:
2c:e9:c9:6c:93:ab:a1:fc:34:4f:7a:be:db:8e:f5:c5:a1:7b:
f0:e2:5d:08:eb:11:d4:35:59:cd:e1:bf:24:20:89:23:8a:01:
c6:04:cd:bf:ba:e9:c4:a0:b2:4b:f2:5d:c2:45:7d:53:b6:7d:
95:25:75:7a:1c:da:58:55:95:45:52:9d:07:7e:9e:cc:a0:22:
11:61:62:39:3a:40:64:84:af:2a:c8:2f:23:af:24:94:cc:f8:
de:62:e2:99:da:73:ec:24:45:14:5e:61:d6:d8:6e:18:9e:86:
2f:d6:4b:fb
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUF6uvmCIjN4HXVm0DkSC8v+PP95UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAyMjYwODQ4MjZaFw0yNTAyMjQwODUzMjZaMDMxMTAvBgNV
BAMTKDAyRTUwNUQ1RjI2QzBGMTI5RDA5NkM3M0RBNTI1MUQ4MkUwMDAxMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+/ijbd9OiI/qvP04exHrK/5NA
s25ENFWKL7oxVrkIa6cUq1Biq2f/LKFCB/4ysm38gJoPIGY4djdj1yenJrj+ePJ4
GMRc8WqBXNc7qoJFEVRRqmj09iEy4Lbz7EdnVOMp5tiYX+dbTVgbChFMcN8vY9ln
Td9q4p48oGNCvPPnnegqO25zRfghxEOFryv+i8fLEFUyFUkCxZuQN92CqjF4zaDB
CAHS628drmEJF5d5MRW7R1vy6+x+VJt0eg2CykURj1yusk+fJ993DeduMHy/PYIm
R4SboSy0SaljuxUAyvztAvWXICX8MwjQYguZ1AJ5iXi/oiTy1QO6jcHpCktNAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUAuUF1fJsDxKdCWxz2lJR2C4AAQUwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzMDM5MmUzMTMwMzYyZTMy
MzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJtavwwDQYJKoZIhvcNAQELBQADggEBACSPNILLr9Fs2UHShZ27kGadmB4Tlinh
3BraLPSjaZ3/wJMakZ32sx1ehPIFdcoZHmvQc7CMN3FxDOJZ4a7AcnkWWjzLbEdD
ekN+cBJ0Y1PVx1H+Sw2/2KwFTdamPNpxXdIYoifyeuZj0tntq3KadY7ugjhRyxi+
KB1DVIbihLIf5MWZImStjR3YozSt3JfVfCzpyWyTq6H8NE96vtuO9cWhe/DiXQjr
EdQ1Wc3hvyQgiSOKAcYEzb+66cSgskvyXcJFfVO2fZUldXoc2lhVlUVSnQd+nsyg
IhFhYjk6QGSEryrILyOvJJTM+N5i4pnac+wkRRReYdbYbhiehi/WS/s=
-----END CERTIFICATE-----
Generated at Mon May 20 14:35:46 2024 by rpki-client on console-fra.rpki-client.org