Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e34302e302f32322d3232203d3e203437353833.roa
File: 3139352e33352e34302e302f32322d3232203d3e203437353833.roa (raw, json)
Hash identifier: 2tCEEaNc/r1CRb8z8ArTee1QPPC4d46fcpZ/wJkEtP0=
Subject key identifier: BA:64:00:65:4B:5A:CE:4B:A1:BB:12:51:ED:B9:2C:30:31:C3:1D:5E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 79394EAFF6F451AA12BF83628930090B2A075C61
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e34302e302f32322d3232203d3e203437353833.roa
Signing time: Wed 27 Sep 2023 14:36:35 +0000
ROA not before: Wed 27 Sep 2023 14:31:35 +0000
ROA not after: Wed 25 Sep 2024 14:36:35 +0000
asID: 47583
IP address blocks: 195.35.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:39:4e:af:f6:f4:51:aa:12:bf:83:62:89:30:09:0b:2a:07:5c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 27 14:31:35 2023 GMT
Not After : Sep 25 14:36:35 2024 GMT
Subject: CN=BA6400654B5ACE4BA1BB1251EDB92C3031C31D5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:44:fb:45:66:f9:fb:b6:d5:10:05:98:b9:ed:
3f:d6:0f:21:c6:42:ce:4d:1e:b1:b7:a6:c9:12:e0:
7c:55:e8:6f:c7:f5:03:e6:c5:b2:b2:98:00:6a:69:
d2:81:5d:42:7b:70:a3:cf:0b:1f:44:63:d8:c4:00:
fd:31:f7:55:99:08:89:f6:3c:89:b7:0f:0b:e0:2a:
61:3e:86:8a:36:87:e1:8c:74:ab:c4:80:4f:b7:1c:
79:46:06:87:cd:1d:c1:73:10:ad:91:b0:21:97:cd:
8e:e2:0a:52:40:44:55:42:5f:01:fa:d4:14:d1:4e:
c1:33:4f:f6:e9:ce:c7:9c:41:23:0d:55:cc:13:14:
f6:2c:ab:80:9a:b4:00:04:b7:97:81:56:96:65:e1:
63:d0:d9:81:5c:54:57:3e:af:03:e3:3b:50:e5:fe:
9f:d5:bb:1e:33:5f:a5:ed:fb:92:8f:a7:c1:e3:29:
31:e0:dd:63:c0:17:b3:2c:42:46:f1:85:89:6e:9a:
8a:f1:e4:77:e0:9c:a4:9b:8e:9d:69:15:43:ad:85:
b0:1e:92:d7:4b:e6:28:bb:b5:c2:fe:ae:63:f9:96:
43:cc:1a:3a:03:28:a2:51:f1:eb:d6:32:b4:30:90:
c8:84:b8:4b:7f:57:20:6a:7d:d0:4d:1c:ab:cd:e9:
9f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:64:00:65:4B:5A:CE:4B:A1:BB:12:51:ED:B9:2C:30:31:C3:1D:5E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e34302e302f32322d3232203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.40.0/22
Signature Algorithm: sha256WithRSAEncryption
05:b3:f9:2d:44:e6:bb:f1:89:a4:ac:1e:69:1e:1d:f3:d2:97:
38:dc:68:c0:2b:a8:98:3c:ac:18:d2:d0:63:23:dc:1d:21:38:
c0:8d:49:e4:6f:26:54:51:14:03:b2:70:e0:ba:19:8d:f9:ce:
13:22:18:44:3f:b9:31:f0:5f:3e:63:f2:88:d3:7a:89:59:69:
b1:bd:49:26:1a:0c:f2:17:45:70:93:5c:91:b7:49:b7:b9:03:
5f:9c:7a:77:89:27:89:2b:1e:f0:f0:92:b7:78:65:50:a8:34:
e2:7b:4e:03:27:df:31:82:42:da:d7:2f:a7:b6:d1:6f:95:17:
08:12:45:00:7e:f0:eb:f4:e4:80:66:c1:55:0f:bb:06:03:30:
6f:95:c7:b6:18:7c:16:31:66:26:04:3a:c1:73:ea:1a:ab:76:
ac:47:e1:5d:cf:00:4a:55:e1:10:eb:38:3b:15:f4:f5:fd:5e:
e1:5c:7b:1a:f5:2d:25:93:48:73:ec:93:ef:6a:95:93:42:d0:
04:af:2c:38:f3:2d:52:45:4a:c9:24:59:f4:09:11:6a:9b:12:
f5:aa:45:a7:62:37:09:0e:b3:b2:83:d1:b4:ad:04:41:99:5f:
fb:7a:0f:e7:69:13:1d:a5:7e:2e:8b:1c:1a:f8:5b:0c:a8:ca:
58:5d:2a:72
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUeTlOr/b0UaoSv4NiiTAJCyoHXGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzA5MjcxNDMxMzVaFw0yNDA5MjUxNDM2MzVaMDMxMTAvBgNV
BAMTKEJBNjQwMDY1NEI1QUNFNEJBMUJCMTI1MUVEQjkyQzMwMzFDMzFENUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeRPtFZvn7ttUQBZi57T/WDyHG
Qs5NHrG3pskS4HxV6G/H9QPmxbKymABqadKBXUJ7cKPPCx9EY9jEAP0x91WZCIn2
PIm3DwvgKmE+hoo2h+GMdKvEgE+3HHlGBofNHcFzEK2RsCGXzY7iClJARFVCXwH6
1BTRTsEzT/bpzsecQSMNVcwTFPYsq4CatAAEt5eBVpZl4WPQ2YFcVFc+rwPjO1Dl
/p/Vux4zX6Xt+5KPp8HjKTHg3WPAF7MsQkbxhYlumorx5HfgnKSbjp1pFUOthbAe
ktdL5ii7tcL+rmP5lkPMGjoDKKJR8evWMrQwkMiEuEt/VyBqfdBNHKvN6Z+BAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUumQAZUtazkuhuxJR7bksMDHDHV4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM1MmUzMzM1MmUzNDMw
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsMj
KDANBgkqhkiG9w0BAQsFAAOCAQEABbP5LUTmu/GJpKweaR4d89KXONxowCuomDys
GNLQYyPcHSE4wI1J5G8mVFEUA7Jw4LoZjfnOEyIYRD+5MfBfPmPyiNN6iVlpsb1J
JhoM8hdFcJNckbdJt7kDX5x6d4kniSse8PCSt3hlUKg04ntOAyffMYJC2tcvp7bR
b5UXCBJFAH7w6/TkgGbBVQ+7BgMwb5XHthh8FjFmJgQ6wXPqGqt2rEfhXc8ASlXh
EOs4OxX09f1e4Vx7GvUtJZNIc+yT72qVk0LQBK8sOPMtUkVKySRZ9AkRapsS9apF
p2I3CQ6zsoPRtK0EQZlf+3oP52kTHaV+LoscGvhbDKjKWF0qcg==
-----END CERTIFICATE-----
Generated at Mon May 20 20:18:10 2024 by rpki-client on console-ams.rpki-client.org