Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3137322e302f32332d3234203d3e203437353833.roa
File: 3139332e3230332e3137322e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: iQ+fGEtC8kKFObB5TfV/Qb/TrS87hxSiehLm6E90ruY=
Subject key identifier: C7:C1:D0:F2:18:66:BC:D3:EC:6C:AB:C1:1A:2D:27:9B:D8:CE:26:E9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7E24A8A57D3FA1D462F812CAE27690055108EEDB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3137322e302f32332d3234203d3e203437353833.roa
Signing time: Fri 01 Sep 2023 10:54:40 +0000
ROA not before: Fri 01 Sep 2023 10:49:40 +0000
ROA not after: Fri 30 Aug 2024 10:54:40 +0000
asID: 47583
IP address blocks: 193.203.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:24:a8:a5:7d:3f:a1:d4:62:f8:12:ca:e2:76:90:05:51:08:ee:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 1 10:49:40 2023 GMT
Not After : Aug 30 10:54:40 2024 GMT
Subject: CN=C7C1D0F21866BCD3EC6CABC11A2D279BD8CE26E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ec:5a:7e:7f:b6:af:e6:bb:ea:67:b2:fb:3a:
3e:77:1a:57:ed:35:dd:cb:ec:39:1a:8e:c5:12:d9:
ca:53:29:83:81:66:34:84:a6:98:a0:54:e1:79:9e:
b2:18:77:21:2b:e4:56:ea:c3:03:3c:e9:94:fa:3a:
fd:63:bb:d6:32:d0:1e:d7:0e:17:5c:d6:95:a9:f4:
ac:5a:43:c0:c2:cc:2a:9b:0b:d3:27:c3:74:06:4d:
4c:0d:f3:c2:0c:7b:61:4b:4c:db:42:2b:30:e6:d4:
bb:0c:aa:d4:a2:09:4d:f5:8d:d8:aa:86:79:60:e5:
ed:a5:75:5d:68:87:d4:ae:46:76:f1:93:67:09:cd:
14:87:ce:9c:d0:51:ff:fe:66:ec:7e:0f:0c:09:80:
fe:a1:46:2a:2d:61:7e:2c:ea:3c:94:96:51:c5:12:
67:75:c1:32:6a:26:7b:05:1e:2b:9c:6d:af:21:96:
89:21:b4:37:ba:71:8a:4c:32:67:05:bd:8f:01:e9:
38:68:8c:b1:a4:1b:86:28:90:4a:61:8d:5a:f9:e7:
8d:c3:80:82:4e:ae:5f:5d:00:5f:98:86:30:80:87:
f8:cd:05:46:b6:c9:cd:12:f5:79:ff:c3:ba:68:98:
a9:64:10:31:71:9d:38:fd:32:77:cb:f4:2e:d6:e5:
36:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C1:D0:F2:18:66:BC:D3:EC:6C:AB:C1:1A:2D:27:9B:D8:CE:26:E9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3137322e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.172.0/23
Signature Algorithm: sha256WithRSAEncryption
02:38:c2:7e:3c:48:de:68:f8:d3:d9:57:84:d0:68:d1:21:3e:
e0:40:28:c6:98:d6:c2:e5:18:53:11:50:bf:98:9f:7b:00:69:
40:d9:30:b7:20:97:03:39:7a:5b:19:9e:6d:d2:cd:bb:a0:d6:
c7:56:4f:08:72:b6:a3:78:9a:6b:bb:c8:1e:37:f7:14:6c:34:
aa:47:a2:ca:72:5e:32:34:64:c1:85:6f:32:18:bc:0a:0c:1b:
a4:7d:4b:dd:22:8d:aa:e4:31:52:e2:e4:be:97:d8:aa:78:cc:
d4:13:19:31:05:61:57:cf:59:06:4d:d1:85:e5:70:c2:21:bd:
fc:17:16:2e:f7:bb:89:e5:2c:fe:16:9a:27:e8:27:57:8a:d1:
b3:4c:60:e0:18:eb:c0:56:69:df:85:18:f2:b8:db:dc:e8:76:
d0:fc:23:f5:3b:4b:58:e6:eb:73:58:b0:2c:1a:1a:06:d8:7a:
ad:81:36:91:59:1b:8a:6f:83:d6:4e:c7:18:c3:71:49:3c:12:
20:f4:17:f9:1f:46:c5:7f:b5:12:72:66:76:59:8a:bf:ae:93:
cf:3e:c7:93:8d:d7:1e:11:d8:66:96:e3:6a:5e:7a:f8:92:11:
02:67:f8:d7:0c:e0:51:3f:33:b3:2a:e4:54:03:95:6a:d2:a1:
aa:84:45:b8
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUfiSopX0/odRi+BLK4naQBVEI7tswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzA5MDExMDQ5NDBaFw0yNDA4MzAxMDU0NDBaMDMxMTAvBgNV
BAMTKEM3QzFEMEYyMTg2NkJDRDNFQzZDQUJDMTFBMkQyNzlCRDhDRTI2RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN7Fp+f7av5rvqZ7L7Oj53Glft
Nd3L7DkajsUS2cpTKYOBZjSEppigVOF5nrIYdyEr5FbqwwM86ZT6Ov1ju9Yy0B7X
Dhdc1pWp9KxaQ8DCzCqbC9Mnw3QGTUwN88IMe2FLTNtCKzDm1LsMqtSiCU31jdiq
hnlg5e2ldV1oh9SuRnbxk2cJzRSHzpzQUf/+Zux+DwwJgP6hRiotYX4s6jyUllHF
Emd1wTJqJnsFHiucba8hlokhtDe6cYpMMmcFvY8B6ThojLGkG4YokEphjVr5543D
gIJOrl9dAF+YhjCAh/jNBUa2yc0S9Xn/w7pomKlkEDFxnTj9MnfL9C7W5TaFAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUx8HQ8hhmvNPsbKvBGi0nm9jOJukwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTMzMmUzMjMwMzMyZTMx
MzczMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAHBy6wwDQYJKoZIhvcNAQELBQADggEBAAI4wn48SN5o+NPZV4TQaNEhPuBAKMaY
1sLlGFMRUL+Yn3sAaUDZMLcglwM5elsZnm3Szbug1sdWTwhytqN4mmu7yB439xRs
NKpHospyXjI0ZMGFbzIYvAoMG6R9S90ijarkMVLi5L6X2Kp4zNQTGTEFYVfPWQZN
0YXlcMIhvfwXFi73u4nlLP4WmifoJ1eK0bNMYOAY68BWad+FGPK429zodtD8I/U7
S1jm63NYsCwaGgbYeq2BNpFZG4pvg9ZOxxjDcUk8EiD0F/kfRsV/tRJyZnZZir+u
k88+x5ON1x4R2GaW42peeviSEQJn+NcM4FE/M7Mq5FQDlWrSoaqERbg=
-----END CERTIFICATE-----
Generated at Mon May 20 13:47:06 2024 by rpki-client on console-ams.rpki-client.org