Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37392e302f32342d3234203d3e20313336373837.roa
File: 3135382e3232302e37392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: KpknZl85oDNfe62okg/hw6SH++Cj8A2wZ2fXRFLQKxg=
Subject key identifier: 00:0B:48:98:8F:60:CC:72:B4:DD:45:10:46:F7:41:CF:47:2E:2B:A5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5EB63F3B6AA9A9521BB2831427923731C6DAF379
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37392e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 12 May 2024 11:03:37 +0000
ROA not before: Sun 12 May 2024 10:58:37 +0000
ROA not after: Sun 11 May 2025 11:03:37 +0000
asID: 136787
IP address blocks: 158.220.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:b6:3f:3b:6a:a9:a9:52:1b:b2:83:14:27:92:37:31:c6:da:f3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 12 10:58:37 2024 GMT
Not After : May 11 11:03:37 2025 GMT
Subject: CN=000B48988F60CC72B4DD451046F741CF472E2BA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:25:1e:73:65:c6:e4:74:b7:3f:a6:1b:ad:1b:
c3:13:7d:79:b1:bd:15:3e:f8:b8:4a:3e:68:c8:42:
6f:0d:9e:47:8e:4d:58:e8:bf:49:ec:32:70:69:b1:
be:50:58:ca:aa:9f:07:1f:bd:0d:e8:da:b2:18:f5:
05:bd:90:5e:e3:81:d5:eb:af:48:82:87:a8:38:2b:
9f:17:c7:b6:4f:e1:21:b7:08:4d:ef:95:90:f8:70:
44:8e:0d:ff:df:c0:40:75:a9:78:07:e3:9a:5c:31:
57:79:1e:e4:d4:4d:c4:59:2c:71:b4:84:28:a8:9a:
7f:8f:8b:6a:a5:8f:7c:18:39:f5:2e:dc:83:ac:9d:
78:40:e5:60:9e:c7:4d:69:81:07:40:6f:39:10:2d:
60:72:d9:8b:e3:cf:35:31:cf:16:85:a6:49:2a:f8:
55:d0:9c:e1:93:0b:10:e9:4e:cc:9d:3b:0d:d0:31:
e7:58:d5:ba:fc:b5:b8:95:6f:b6:65:33:aa:0a:ee:
46:cf:8c:d7:e5:c8:e1:de:c4:e7:9c:0b:c9:32:42:
4c:7a:aa:f7:ff:29:a7:ef:cd:7b:ba:d0:3b:b3:d3:
8e:28:7c:18:b6:9a:f6:fa:ef:40:e6:9a:80:23:ea:
4c:ae:2a:83:8f:15:50:0e:b3:93:3c:64:70:b4:71:
48:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0B:48:98:8F:60:CC:72:B4:DD:45:10:46:F7:41:CF:47:2E:2B:A5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.79.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:55:88:e1:db:0b:e5:93:f1:f9:02:a0:7c:60:d4:71:9b:2d:
6b:eb:66:e1:5d:ba:25:60:9d:c6:3a:45:6f:e2:d7:b1:90:03:
21:32:aa:cb:86:4b:8a:17:97:46:75:5e:16:c9:a9:aa:0b:57:
b3:15:d7:0e:8f:2f:f9:3f:e5:a4:51:17:9f:b9:da:14:d2:50:
aa:e2:1f:fd:b0:40:c8:62:81:72:56:5b:8d:dd:01:4c:87:87:
1c:1d:84:c2:61:bc:85:f0:0f:91:f6:85:ca:c6:07:ca:5b:56:
96:ee:57:6d:58:a2:04:25:69:2c:cd:e2:a0:04:b9:0e:0c:b7:
fc:14:57:7e:48:f9:e4:c9:30:75:aa:b0:72:a9:d1:d9:d6:5d:
f7:b8:40:0c:1c:08:51:60:09:28:b9:0b:f4:21:1b:ce:c0:37:
a5:b3:81:0e:24:10:4c:97:51:d9:72:02:47:bb:8f:22:99:b1:
1e:53:e4:66:5c:4e:33:54:36:bc:16:bd:42:84:69:89:55:d9:
47:42:25:3b:7f:3e:f7:37:a2:c6:12:23:77:47:4e:15:a9:e5:
1b:d3:f5:a2:5f:30:78:55:67:2f:4c:ea:7c:c4:00:a4:21:90:
33:29:97:45:b2:b9:64:d1:45:8f:c8:3b:6a:08:81:00:2e:7f:
02:4f:cb:dd
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUXrY/O2qpqVIbsoMUJ5I3Mcba83kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDA1MTIxMDU4MzdaFw0yNTA1MTExMTAzMzdaMDMxMTAvBgNV
BAMTKDAwMEI0ODk4OEY2MENDNzJCNERENDUxMDQ2Rjc0MUNGNDcyRTJCQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeJR5zZcbkdLc/phutG8MTfXmx
vRU++LhKPmjIQm8NnkeOTVjov0nsMnBpsb5QWMqqnwcfvQ3o2rIY9QW9kF7jgdXr
r0iCh6g4K58Xx7ZP4SG3CE3vlZD4cESODf/fwEB1qXgH45pcMVd5HuTUTcRZLHG0
hCiomn+Pi2qlj3wYOfUu3IOsnXhA5WCex01pgQdAbzkQLWBy2YvjzzUxzxaFpkkq
+FXQnOGTCxDpTsydOw3QMedY1br8tbiVb7ZlM6oK7kbPjNflyOHexOecC8kyQkx6
qvf/KafvzXu60Duz044ofBi2mvb670DmmoAj6kyuKoOPFVAOs5M8ZHC0cUgpAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUAAtImI9gzHK03UUQRvdBz0cuK6UwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM4MmUzMjMyMzAyZTM3
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACe3E8wDQYJKoZIhvcNAQELBQADggEBACxViOHbC+WT8fkCoHxg1HGbLWvrZuFd
uiVgncY6RW/i17GQAyEyqsuGS4oXl0Z1XhbJqaoLV7MV1w6PL/k/5aRRF5+52hTS
UKriH/2wQMhigXJWW43dAUyHhxwdhMJhvIXwD5H2hcrGB8pbVpbuV21YogQlaSzN
4qAEuQ4Mt/wUV35I+eTJMHWqsHKp0dnWXfe4QAwcCFFgCSi5C/QhG87AN6WzgQ4k
EEyXUdlyAke7jyKZsR5T5GZcTjNUNrwWvUKEaYlV2UdCJTt/Pvc3osYSI3dHThWp
5RvT9aJfMHhVZy9M6nzEAKQhkDMpl0WyuWTRRY/IO2oIgQAufwJPy90=
-----END CERTIFICATE-----
Generated at Mon Jun 3 02:59:37 2024 by rpki-client on console-ams.rpki-client.org