Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232312e3133322e302f32342d3234203d3e20323033333830.roa
File: 3138352e3232312e3133322e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: j+ZMnHyOUoLtdEOQ1MYkERx65cmUEFSZsbgQTDxkUKA=
Subject key identifier: E9:17:EE:FD:51:1C:72:BB:96:BB:F2:56:06:F8:DA:5D:6C:E9:73:7C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 774E362225DB407917EE88B8B78FA7C9C565F54D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232312e3133322e302f32342d3234203d3e20323033333830.roa
Signing time: Fri 20 Oct 2023 13:41:59 +0000
ROA not before: Fri 20 Oct 2023 13:36:59 +0000
ROA not after: Fri 18 Oct 2024 13:41:59 +0000
asID: 203380
IP address blocks: 185.221.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:4e:36:22:25:db:40:79:17:ee:88:b8:b7:8f:a7:c9:c5:65:f5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:59 2023 GMT
Not After : Oct 18 13:41:59 2024 GMT
Subject: CN=E917EEFD511C72BB96BBF25606F8DA5D6CE9737C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:2a:f2:04:96:93:ee:03:a6:cf:67:30:18:
fc:af:ec:17:22:1a:e6:d0:35:71:48:2c:a1:37:f7:
cf:37:b6:60:f4:0a:0a:cb:f1:c4:5b:36:10:ff:e3:
10:cd:44:f1:af:2f:41:46:98:dd:70:b6:8a:07:0b:
90:8d:06:84:0e:bb:67:9d:54:ce:2a:0c:52:38:2f:
c2:9b:4f:9c:49:30:eb:43:78:fc:3a:7b:70:ef:a2:
5b:35:8a:3a:7d:94:9a:bd:af:30:76:17:76:3c:90:
5f:9d:e8:72:60:7a:6b:24:ed:e8:9e:58:ef:ba:80:
72:ab:90:32:91:1a:0b:8c:c1:06:91:be:bc:81:e8:
09:7a:af:8f:82:8d:d0:64:c1:fb:f4:0c:d3:28:31:
1a:99:6f:cc:14:3b:82:2d:f4:db:77:1a:75:7e:b5:
77:11:3b:96:bc:09:3a:95:a0:46:00:6d:80:22:3c:
9f:dc:2f:89:47:43:37:d4:d0:61:62:c5:18:e4:c9:
59:1b:b7:db:3e:60:f8:24:4a:54:eb:29:ac:48:1a:
75:25:d7:66:01:0b:b0:7d:77:00:3c:c0:93:ac:69:
56:66:2b:1d:a2:2f:20:e0:d6:dd:b8:c3:4a:0d:83:
9b:3c:ec:d0:dc:70:0e:6a:ca:6a:92:86:d1:9b:ce:
d2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:17:EE:FD:51:1C:72:BB:96:BB:F2:56:06:F8:DA:5D:6C:E9:73:7C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232312e3133322e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.132.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:0d:5d:98:e3:d2:1f:e1:bf:a1:45:10:02:9f:5a:6f:a0:cd:
e5:19:2b:5e:d2:ab:7f:ec:14:98:a7:71:1b:08:4d:94:cb:cd:
58:09:0c:d7:72:e1:38:a8:df:b9:22:1b:57:0f:c6:0b:07:ca:
e8:6c:ae:49:82:59:d8:56:db:f2:d4:27:32:55:f0:c8:c8:bc:
e2:2a:b5:e7:ba:0b:f4:60:f6:ee:16:c8:53:b7:25:83:da:90:
bd:60:b4:3f:fb:d5:91:9c:39:7c:12:c8:32:53:38:d6:14:9a:
76:3b:30:a9:dd:aa:8f:d1:24:35:97:df:0b:05:1c:87:47:70:
f4:4b:ab:9f:82:02:e0:62:ed:59:fc:59:b7:8a:da:48:7c:e2:
47:f9:24:52:19:0f:76:d8:a2:5b:81:8b:c2:eb:8c:c9:85:f0:
43:ae:bd:cd:cc:ea:05:ad:24:69:fe:e2:99:c3:51:25:03:cc:
5d:17:6e:6d:0f:33:0c:21:2f:d7:08:94:82:93:dd:de:f4:2d:
0d:19:94:3f:59:d6:7f:0a:6d:71:f6:89:48:32:f6:b9:a4:7a:
fb:13:74:aa:27:29:9b:c1:af:df:3d:7a:70:fa:18:fe:57:3c:
1e:8d:80:7e:68:00:c5:e2:ab:51:4b:f7:c0:50:1e:18:c3:d0:
0c:0d:27:5c
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUd042IiXbQHkX7oi4t4+nycVl9U0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzEwMjAxMzM2NTlaFw0yNDEwMTgxMzQxNTlaMDMxMTAvBgNV
BAMTKEU5MTdFRUZENTExQzcyQkI5NkJCRjI1NjA2RjhEQTVENkNFOTczN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC64SryBJaT7gOmz2cwGPyv7Bci
GubQNXFILKE39883tmD0CgrL8cRbNhD/4xDNRPGvL0FGmN1wtooHC5CNBoQOu2ed
VM4qDFI4L8KbT5xJMOtDePw6e3Dvols1ijp9lJq9rzB2F3Y8kF+d6HJgemsk7eie
WO+6gHKrkDKRGguMwQaRvryB6Al6r4+CjdBkwfv0DNMoMRqZb8wUO4It9Nt3GnV+
tXcRO5a8CTqVoEYAbYAiPJ/cL4lHQzfU0GFixRjkyVkbt9s+YPgkSlTrKaxIGnUl
12YBC7B9dwA8wJOsaVZmKx2iLyDg1t24w0oNg5s87NDccA5qymqShtGbztIpAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU6Rfu/VEccruWu/JWBvjaXWzpc3wwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMyMzEyZTMx
MzMzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMzMzMzgzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALndhDANBgkqhkiG9w0BAQsFAAOCAQEAew1dmOPSH+G/oUUQAp9ab6DN5Rkr
XtKrf+wUmKdxGwhNlMvNWAkM13LhOKjfuSIbVw/GCwfK6GyuSYJZ2Fbb8tQnMlXw
yMi84iq157oL9GD27hbIU7clg9qQvWC0P/vVkZw5fBLIMlM41hSadjswqd2qj9Ek
NZffCwUch0dw9Eurn4IC4GLtWfxZt4raSHziR/kkUhkPdtiiW4GLwuuMyYXwQ669
zczqBa0kaf7imcNRJQPMXRdubQ8zDCEv1wiUgpPd3vQtDRmUP1nWfwptcfaJSDL2
uaR6+xN0qicpm8Gv3z16cPoY/lc8Ho2AfmgAxeKrUUv3wFAeGMPQDA0nXA==
-----END CERTIFICATE-----
Generated at Mon May 20 20:18:10 2024 by rpki-client on console-ams.rpki-client.org