Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37342e302f32342d3234203d3e20313336373837.roa
File: 3135382e3232302e37342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: NR0zgne0x4noIHfWDv9wpgdjYfVtwOnyDf9Eh4FrWoE=
Subject key identifier: 32:0B:53:57:02:C5:3A:28:83:A9:07:D3:2B:7E:CE:1B:6C:A5:FB:C4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3B5BE832BA9C2FBDB1B7D7A22B57404AEDE72C41
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37342e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 12 May 2024 11:03:38 +0000
ROA not before: Sun 12 May 2024 10:58:38 +0000
ROA not after: Sun 11 May 2025 11:03:38 +0000
asID: 136787
IP address blocks: 158.220.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:5b:e8:32:ba:9c:2f:bd:b1:b7:d7:a2:2b:57:40:4a:ed:e7:2c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 12 10:58:38 2024 GMT
Not After : May 11 11:03:38 2025 GMT
Subject: CN=320B535702C53A2883A907D32B7ECE1B6CA5FBC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:f4:96:62:27:37:95:70:dd:47:eb:78:2a:
02:0e:3a:a3:24:c8:0c:59:b8:02:95:78:53:70:f8:
52:83:f2:ac:ee:f5:1e:7f:a1:a8:3c:b7:eb:38:b1:
7c:a1:de:75:9c:23:0a:65:11:1c:37:c2:a6:23:2d:
bf:73:66:60:86:f0:8c:fb:25:48:0e:da:03:f6:4a:
eb:95:47:d8:89:9a:02:35:72:49:0d:a3:f8:16:72:
86:e2:fd:f0:36:44:5b:02:dd:0f:75:28:5d:a0:85:
40:70:45:22:a4:d9:db:ec:ea:d7:05:6e:8a:45:67:
be:88:c3:21:e1:1b:00:d9:d3:46:b7:38:3d:39:85:
da:f2:dd:ea:d5:c7:ca:7f:56:68:78:c3:b8:7e:4f:
2e:a0:fd:54:1d:c1:28:ac:59:5f:20:90:a4:40:b5:
d9:f9:31:8c:a1:51:43:0a:01:34:9e:0c:25:1b:f8:
05:d1:0d:5e:62:ed:16:c9:b3:b9:72:df:da:0b:37:
25:01:31:51:b2:be:73:c5:ed:dc:e7:e8:55:fd:2e:
28:c5:7d:7e:89:47:2c:cb:7e:22:f0:cb:20:a0:7e:
6e:8f:44:2a:b9:7a:2c:52:05:c7:fe:bc:63:86:98:
8e:b4:89:e7:5e:b6:8e:3e:e5:94:9d:b9:0e:26:bd:
00:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0B:53:57:02:C5:3A:28:83:A9:07:D3:2B:7E:CE:1B:6C:A5:FB:C4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.74.0/24
Signature Algorithm: sha256WithRSAEncryption
47:b4:eb:c4:b6:24:05:be:db:81:3a:3e:3b:53:5d:1c:f6:b6:
af:ad:80:0e:e8:25:d1:06:7a:97:2d:17:20:e5:22:aa:2c:2f:
0d:c3:4a:aa:7b:c3:37:b5:1a:47:4b:1f:34:5a:2f:d0:46:63:
f5:d5:7d:02:13:ed:80:49:58:d7:ca:ae:b3:61:a8:e8:ed:a2:
e6:b3:0f:83:8f:33:9a:50:3d:cb:3d:89:b5:2f:de:4a:28:1e:
ec:89:8e:47:e5:33:3a:11:41:1d:5e:f9:91:9c:f5:25:81:cb:
c6:8d:05:97:8f:00:30:ff:03:b3:ad:ae:06:81:fd:6a:05:c0:
de:f9:69:3e:cb:3b:54:b8:d1:80:1a:68:35:31:e6:6b:91:30:
0c:c9:e4:bf:27:9f:f1:5a:14:3c:c9:d1:f2:fb:6d:b7:54:e1:
10:31:8b:c0:da:22:e5:45:c1:8e:8c:85:4b:e2:a9:6b:c7:37:
ee:bb:e5:c2:d3:f5:3b:6b:66:f0:74:61:8f:ca:1d:86:0f:fe:
b7:c8:93:76:c6:0d:76:95:36:0a:d6:59:86:b0:e9:3e:ed:09:
f3:c7:d3:a2:bb:f3:99:ec:2f:fc:b9:ec:5d:fb:9a:bb:c3:2b:
a8:5c:f4:2c:31:60:1a:75:23:28:1b:e6:55:31:10:4d:87:f7:
6e:40:a1:71
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUO1voMrqcL72xt9eiK1dASu3nLEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDA1MTIxMDU4MzhaFw0yNTA1MTExMTAzMzhaMDMxMTAvBgNV
BAMTKDMyMEI1MzU3MDJDNTNBMjg4M0E5MDdEMzJCN0VDRTFCNkNBNUZCQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHsfSWYic3lXDdR+t4KgIOOqMk
yAxZuAKVeFNw+FKD8qzu9R5/oag8t+s4sXyh3nWcIwplERw3wqYjLb9zZmCG8Iz7
JUgO2gP2SuuVR9iJmgI1ckkNo/gWcobi/fA2RFsC3Q91KF2ghUBwRSKk2dvs6tcF
bopFZ76IwyHhGwDZ00a3OD05hdry3erVx8p/Vmh4w7h+Ty6g/VQdwSisWV8gkKRA
tdn5MYyhUUMKATSeDCUb+AXRDV5i7RbJs7ly39oLNyUBMVGyvnPF7dzn6FX9LijF
fX6JRyzLfiLwyyCgfm6PRCq5eixSBcf+vGOGmI60iedeto4+5ZSduQ4mvQDPAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUMgtTVwLFOiiDqQfTK37OG2yl+8QwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM4MmUzMjMyMzAyZTM3
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACe3EowDQYJKoZIhvcNAQELBQADggEBAEe068S2JAW+24E6PjtTXRz2tq+tgA7o
JdEGepctFyDlIqosLw3DSqp7wze1GkdLHzRaL9BGY/XVfQIT7YBJWNfKrrNhqOjt
ouazD4OPM5pQPcs9ibUv3kooHuyJjkflMzoRQR1e+ZGc9SWBy8aNBZePADD/A7Ot
rgaB/WoFwN75aT7LO1S40YAaaDUx5muRMAzJ5L8nn/FaFDzJ0fL7bbdU4RAxi8Da
IuVFwY6MhUviqWvHN+675cLT9TtrZvB0YY/KHYYP/rfIk3bGDXaVNgrWWYaw6T7t
CfPH06K785nsL/y57F37mrvDK6hc9CwxYBp1Iygb5lUxEE2H925AoXE=
-----END CERTIFICATE-----
Generated at Mon Jun 3 01:41:13 2024 by rpki-client on console-fra.rpki-client.org