Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231322e36382e302f32342d3234203d3e20313336373837.roa
File: 3138352e3231322e36382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Yt3tw0zVtqK5rMFmQymwHsR2ptKTDXpoEKbiyPutOYo=
Subject key identifier: 80:F4:88:8C:A6:61:00:C1:18:58:8E:12:93:3C:14:94:37:E6:2D:F9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7999CA5587E48F344E345B5392CF7A7D04B3453D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231322e36382e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 12 May 2024 11:03:39 +0000
ROA not before: Sun 12 May 2024 10:58:39 +0000
ROA not after: Sun 11 May 2025 11:03:39 +0000
asID: 136787
IP address blocks: 185.212.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:99:ca:55:87:e4:8f:34:4e:34:5b:53:92:cf:7a:7d:04:b3:45:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 12 10:58:39 2024 GMT
Not After : May 11 11:03:39 2025 GMT
Subject: CN=80F4888CA66100C118588E12933C149437E62DF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:1b:6b:83:65:b0:02:69:7b:4e:b3:ca:90:
e2:4b:f6:28:b6:42:41:54:92:10:02:0d:d7:74:c3:
2f:58:62:0e:78:96:2e:b8:71:1a:0b:1b:5a:89:0d:
0c:77:b3:cc:32:08:94:61:bd:66:76:bd:8f:11:0d:
b3:e0:da:e6:2b:98:63:25:0b:09:8a:ba:98:05:9b:
dd:2b:0d:29:aa:4c:d1:3d:ef:cd:a9:d1:1f:7c:bd:
39:f2:a9:20:64:dc:dd:32:23:9d:20:97:52:89:5f:
87:e7:67:9d:9e:fc:40:8a:8b:17:21:2d:2b:3f:b8:
38:a6:6b:8c:79:b1:84:47:20:7f:85:58:e5:44:20:
75:72:02:89:53:42:23:f8:a2:b9:72:e9:2e:8e:b2:
46:fa:9f:2d:39:c1:95:4b:3d:06:f3:0f:19:0c:e3:
5d:27:a9:e8:13:f0:cc:26:d5:84:f4:59:fd:8e:26:
98:cf:49:dc:6f:64:9b:1f:65:ee:22:06:02:8c:eb:
49:cb:9a:9d:9c:fb:ae:97:df:c7:c5:22:f9:dd:48:
15:20:b6:a8:91:bf:71:50:66:7a:fa:35:59:fa:db:
32:1e:86:10:8a:6d:62:0f:90:5a:5b:33:b1:66:5f:
15:30:05:52:c4:c1:c0:f5:32:bb:b7:83:f1:42:be:
a2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F4:88:8C:A6:61:00:C1:18:58:8E:12:93:3C:14:94:37:E6:2D:F9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231322e36382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.68.0/24
Signature Algorithm: sha256WithRSAEncryption
87:c8:bd:b1:72:9b:3c:b0:c3:05:d8:9a:99:6e:5e:46:85:e5:
e8:83:d7:b7:cc:36:9f:b8:c9:77:ad:f5:7b:98:9c:39:c5:d4:
28:ce:e3:37:02:99:09:14:8f:8a:0e:90:c6:20:5a:a1:b7:d9:
18:f0:f9:87:a2:a8:b7:97:58:2b:8f:70:d3:15:e6:23:a4:fb:
0f:f9:57:38:a5:f7:cd:d6:40:5a:27:78:29:19:cd:0a:56:1e:
8d:08:55:26:9f:77:3c:ab:55:9e:bc:1a:54:20:30:e2:c1:37:
f4:83:af:00:6e:6f:6e:88:01:da:af:e6:b3:16:51:53:eb:10:
84:f3:7f:0e:46:7b:55:9e:e7:cf:19:e4:54:32:bf:82:08:38:
db:f4:91:88:5f:17:0a:fa:5c:9a:62:9e:37:60:ef:66:57:88:
75:d8:c9:72:df:54:b8:c1:71:e3:0e:1a:d4:76:c4:5a:3b:5e:
b2:ae:8f:20:62:73:be:97:1c:b8:51:b6:01:c4:b9:d0:91:a3:
b4:6d:ce:80:7d:4b:af:47:7d:1b:1e:62:2f:e7:46:f9:5f:43:
b1:95:d4:a9:71:d8:b8:a6:ec:a1:11:fd:7b:c5:e0:78:08:cc:
5b:f3:26:01:bd:70:97:4c:10:23:2a:63:6d:4a:c1:62:ba:2d:
0e:ac:1b:6c
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUeZnKVYfkjzRONFtTks96fQSzRT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDA1MTIxMDU4MzlaFw0yNTA1MTExMTAzMzlaMDMxMTAvBgNV
BAMTKDgwRjQ4ODhDQTY2MTAwQzExODU4OEUxMjkzM0MxNDk0MzdFNjJERjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChnBtrg2WwAml7TrPKkOJL9ii2
QkFUkhACDdd0wy9YYg54li64cRoLG1qJDQx3s8wyCJRhvWZ2vY8RDbPg2uYrmGMl
CwmKupgFm90rDSmqTNE9782p0R98vTnyqSBk3N0yI50gl1KJX4fnZ52e/ECKixch
LSs/uDima4x5sYRHIH+FWOVEIHVyAolTQiP4orly6S6Oskb6ny05wZVLPQbzDxkM
410nqegT8Mwm1YT0Wf2OJpjPSdxvZJsfZe4iBgKM60nLmp2c+66X38fFIvndSBUg
tqiRv3FQZnr6NVn62zIehhCKbWIPkFpbM7FmXxUwBVLEwcD1Mru3g/FCvqJPAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUgPSIjKZhAMEYWI4SkzwUlDfmLfkwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMxMzIyZTM2
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC51EQwDQYJKoZIhvcNAQELBQADggEBAIfIvbFymzywwwXYmpluXkaF5eiD17fM
Np+4yXet9XuYnDnF1CjO4zcCmQkUj4oOkMYgWqG32Rjw+YeiqLeXWCuPcNMV5iOk
+w/5Vzil983WQFoneCkZzQpWHo0IVSafdzyrVZ68GlQgMOLBN/SDrwBub26IAdqv
5rMWUVPrEITzfw5Ge1We588Z5FQyv4IIONv0kYhfFwr6XJpinjdg72ZXiHXYyXLf
VLjBceMOGtR2xFo7XrKujyBic76XHLhRtgHEudCRo7RtzoB9S69HfRseYi/nRvlf
Q7GV1Klx2Lim7KER/XvF4HgIzFvzJgG9cJdMECMqY21KwWK6LQ6sG2w=
-----END CERTIFICATE-----
Generated at Mon May 20 13:47:06 2024 by rpki-client on console-ams.rpki-client.org