Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135332e39322e3132362e302f32342d3234203d3e203633343733.roa
File: 3135332e39322e3132362e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: UK3WjTUELlE39TN1sz7fa+09fweJNxwtVDmvk9Xv5wY=
Subject key identifier: AD:51:7A:A9:72:30:09:3E:4D:A1:DF:E7:5E:B6:92:C9:F1:70:1A:23
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 115CD0E75783FC07B7C47E75E40C8193E301EA45
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135332e39322e3132362e302f32342d3234203d3e203633343733.roa
Signing time: Thu 24 Aug 2023 11:42:54 +0000
ROA not before: Thu 24 Aug 2023 11:37:54 +0000
ROA not after: Thu 22 Aug 2024 11:42:54 +0000
asID: 63473
IP address blocks: 153.92.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:5c:d0:e7:57:83:fc:07:b7:c4:7e:75:e4:0c:81:93:e3:01:ea:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 24 11:37:54 2023 GMT
Not After : Aug 22 11:42:54 2024 GMT
Subject: CN=AD517AA97230093E4DA1DFE75EB692C9F1701A23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b7:b3:08:35:6e:a4:cf:30:a2:eb:79:16:52:
27:03:39:33:a5:a2:bc:74:bb:f6:b2:18:ed:a4:0b:
13:5f:ee:9d:77:d1:e6:dd:9c:59:8a:7e:29:b5:e3:
c9:67:50:c8:21:6a:24:5b:f9:0e:d8:56:d7:6f:36:
f3:6e:16:85:10:9b:4e:6f:41:99:53:83:d9:e2:e4:
31:d7:31:fc:97:da:8d:b0:ca:68:46:15:62:ae:2c:
e1:b6:4b:23:8d:7b:05:c1:4f:52:f5:31:c0:4f:ea:
6e:c6:67:ed:d8:dd:1c:54:33:5a:36:f8:45:7c:bd:
4f:c5:6d:64:ec:1a:b1:37:da:24:f9:f0:8e:6d:59:
0a:9b:37:4a:54:69:d0:11:de:b6:79:2d:13:09:d9:
64:24:7c:40:17:8a:9d:2c:9e:66:84:79:61:c0:14:
c5:dd:68:db:28:08:bf:b7:c1:ef:b3:f9:5f:8f:80:
02:57:2c:51:43:07:00:8b:d7:78:87:e6:4d:fc:c0:
9f:96:fe:f9:0d:b4:9d:84:a7:f2:59:23:8a:4c:db:
5a:7c:79:59:35:b9:80:e6:5a:fa:e0:bb:26:c2:2d:
a3:be:3a:0f:e9:02:ca:19:fe:a1:2d:96:49:9a:be:
22:ef:92:31:26:1d:58:1c:48:a7:50:d1:13:22:a8:
b2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:51:7A:A9:72:30:09:3E:4D:A1:DF:E7:5E:B6:92:C9:F1:70:1A:23
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135332e39322e3132362e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.92.126.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:99:d0:01:29:e2:6e:34:37:12:3a:1a:0f:f1:b7:4e:51:fe:
87:9c:cf:b4:9e:71:ca:5f:02:9f:4e:72:8c:7e:c4:00:c6:da:
d0:7d:0f:86:31:af:41:d8:66:5a:7b:f7:6e:fc:ea:9e:e4:00:
05:33:5c:30:4c:24:f4:b4:94:ba:1e:26:10:e5:77:41:c7:06:
69:4f:d2:c7:06:56:24:ef:60:6e:1c:b2:b4:6b:1c:22:71:7f:
92:56:fa:5d:ca:28:f1:48:76:06:df:db:0c:83:3c:b4:7c:bf:
65:73:67:45:cc:99:ba:84:e7:3a:fe:99:2a:af:31:e9:07:4d:
01:5e:f6:66:a3:a3:ff:04:9d:86:ff:21:ed:1f:e1:3e:b2:9b:
a2:63:7f:af:13:72:14:f5:80:68:c9:c7:f6:5a:16:c1:e9:92:
41:57:a9:89:64:58:31:bd:b8:b9:14:89:9e:d5:01:35:fe:c7:
03:13:5d:11:a4:dc:86:6b:74:d5:e1:be:b9:3d:fd:b1:5a:d6:
d5:67:c9:54:b2:29:9e:bb:42:61:6a:95:3d:1e:6e:b3:62:65:
13:6e:77:b7:7f:da:ad:93:ab:b7:d6:4d:d0:6d:de:d2:6e:cf:
98:d0:c9:3b:20:0e:47:7d:b6:f7:42:5d:dc:83:1d:d4:77:0b:
5f:ee:fd:ba
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUEVzQ51eD/Ae3xH515AyBk+MB6kUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzA4MjQxMTM3NTRaFw0yNDA4MjIxMTQyNTRaMDMxMTAvBgNV
BAMTKEFENTE3QUE5NzIzMDA5M0U0REExREZFNzVFQjY5MkM5RjE3MDFBMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzt7MINW6kzzCi63kWUicDOTOl
orx0u/ayGO2kCxNf7p130ebdnFmKfim148lnUMghaiRb+Q7YVtdvNvNuFoUQm05v
QZlTg9ni5DHXMfyX2o2wymhGFWKuLOG2SyONewXBT1L1McBP6m7GZ+3Y3RxUM1o2
+EV8vU/FbWTsGrE32iT58I5tWQqbN0pUadAR3rZ5LRMJ2WQkfEAXip0snmaEeWHA
FMXdaNsoCL+3we+z+V+PgAJXLFFDBwCL13iH5k38wJ+W/vkNtJ2Ep/JZI4pM21p8
eVk1uYDmWvrguybCLaO+Og/pAsoZ/qEtlkmaviLvkjEmHVgcSKdQ0RMiqLLvAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUrVF6qXIwCT5Nod/nXraSyfFwGiMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTMzMmUzOTMyMmUzMTMy
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMzMzQzNzMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
mVx+MA0GCSqGSIb3DQEBCwUAA4IBAQCOmdABKeJuNDcSOhoP8bdOUf6HnM+0nnHK
XwKfTnKMfsQAxtrQfQ+GMa9B2GZae/du/Oqe5AAFM1wwTCT0tJS6HiYQ5XdBxwZp
T9LHBlYk72BuHLK0axwicX+SVvpdyijxSHYG39sMgzy0fL9lc2dFzJm6hOc6/pkq
rzHpB00BXvZmo6P/BJ2G/yHtH+E+spuiY3+vE3IU9YBoycf2WhbB6ZJBV6mJZFgx
vbi5FIme1QE1/scDE10RpNyGa3TV4b65Pf2xWtbVZ8lUsimeu0JhapU9Hm6zYmUT
bne3f9qtk6u31k3Qbd7Sbs+Y0Mk7IA5Hfbb3Ql3cgx3Udwtf7v26
-----END CERTIFICATE-----
Generated at Mon May 20 14:35:46 2024 by rpki-client on console-fra.rpki-client.org