Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e38382e38372e302f32342d3332203d3e203531313637.roa
File: 3139352e38382e38372e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: 8uGHctJXgElGetKCNEUUBEs15An1mRcX598NXITlsPc=
Subject key identifier: 7D:39:81:97:7B:3A:ED:ED:C7:AA:5C:BF:1C:2A:18:F9:9D:FD:B7:10
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2F71832354FC3536708AE830300327D4D6768A31
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e38382e38372e302f32342d3332203d3e203531313637.roa
Signing time: Mon 26 Feb 2024 08:53:25 +0000
ROA not before: Mon 26 Feb 2024 08:48:25 +0000
ROA not after: Mon 24 Feb 2025 08:53:25 +0000
asID: 51167
IP address blocks: 195.88.87.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:71:83:23:54:fc:35:36:70:8a:e8:30:30:03:27:d4:d6:76:8a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:25 2024 GMT
Not After : Feb 24 08:53:25 2025 GMT
Subject: CN=7D3981977B3AEDEDC7AA5CBF1C2A18F99DFDB710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cd:06:36:66:30:63:07:b2:af:d0:59:0d:a8:
a7:86:cf:1f:70:3e:f2:ed:8f:7b:30:8c:6e:43:f5:
3f:db:75:b3:d6:9f:66:9b:7d:c3:2c:3b:ab:eb:02:
6c:c9:d1:d0:40:56:ad:50:a5:8a:32:25:db:9a:01:
e9:ca:08:b4:44:38:70:2e:47:9c:d5:40:ad:1c:4c:
4d:9c:a5:3d:b8:59:dd:91:2e:54:6a:24:c2:fb:ea:
a0:6b:35:cc:ba:bb:63:03:19:e1:e0:6a:56:63:24:
6c:dc:fb:d7:14:d3:07:6f:91:1d:e0:22:41:25:c3:
b1:18:c8:72:b9:8a:1a:f2:ac:84:fb:89:86:20:05:
49:fa:eb:85:d1:a7:93:50:8d:c8:62:e5:c2:d5:05:
08:bf:96:34:ec:1c:b4:6d:ef:60:c0:d4:f9:17:26:
db:4c:1a:1d:17:eb:3b:c7:59:07:65:b8:42:8b:59:
2a:7b:e5:e8:23:15:d5:18:ae:78:2b:6a:c0:9a:d6:
50:4b:f7:c8:e8:a6:ae:93:ba:4d:21:d9:76:95:2d:
44:36:ec:df:bc:ab:7a:bd:0a:7d:66:61:80:43:75:
27:79:fd:47:55:2d:14:57:38:1f:96:af:06:38:3f:
15:3a:57:cd:e5:bd:ed:6f:6c:2b:a5:f8:80:d6:db:
d8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:39:81:97:7B:3A:ED:ED:C7:AA:5C:BF:1C:2A:18:F9:9D:FD:B7:10
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e38382e38372e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.87.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:92:2b:f3:d5:de:67:e4:c5:1e:c4:00:55:b0:2f:c6:ae:6d:
94:21:26:87:28:6f:14:56:e1:27:07:ef:09:44:de:f4:f9:68:
18:84:8f:93:79:64:64:8f:d9:20:b8:65:9c:f3:e6:f7:e0:c1:
45:5b:ae:c5:31:b6:18:f3:fd:d7:b3:60:16:3d:9d:48:8b:ff:
e5:33:6c:fa:ca:7d:07:c8:d0:2f:d7:1a:fe:6d:c6:c8:a5:3e:
d0:a0:2a:4b:3b:03:d1:0a:90:80:74:ad:78:88:bb:a7:6b:31:
ef:40:85:b2:7a:ab:b0:1b:a1:59:f1:6a:4c:35:7c:dd:f9:9a:
2e:d2:f7:a6:ac:94:71:1e:0f:b1:ea:d3:d1:60:04:97:0d:73:
35:ce:81:51:99:77:2d:f1:8b:0e:55:f3:2d:94:a8:f4:be:09:
a4:e2:66:6d:55:f7:a4:df:41:74:4a:ae:a7:77:54:b0:69:8a:
da:8e:f4:7e:ac:58:bc:5c:7a:3a:2d:f3:f1:72:35:71:3c:94:
36:10:0a:7e:e8:dd:e1:bc:11:ed:c0:13:80:50:8a:c7:8a:cd:
40:a1:3e:5a:4a:6e:54:4a:39:3f:f0:9d:94:6b:47:0e:34:1f:
76:59:c8:3a:b8:e1:60:0c:5f:89:67:b5:58:c6:54:aa:62:71:
0e:04:7b:1a
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUL3GDI1T8NTZwiugwMAMn1NZ2ijEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAyMjYwODQ4MjVaFw0yNTAyMjQwODUzMjVaMDMxMTAvBgNV
BAMTKDdEMzk4MTk3N0IzQUVERURDN0FBNUNCRjFDMkExOEY5OURGREI3MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwzQY2ZjBjB7Kv0FkNqKeGzx9w
PvLtj3swjG5D9T/bdbPWn2abfcMsO6vrAmzJ0dBAVq1QpYoyJduaAenKCLREOHAu
R5zVQK0cTE2cpT24Wd2RLlRqJML76qBrNcy6u2MDGeHgalZjJGzc+9cU0wdvkR3g
IkElw7EYyHK5ihryrIT7iYYgBUn664XRp5NQjchi5cLVBQi/ljTsHLRt72DA1PkX
JttMGh0X6zvHWQdluEKLWSp75egjFdUYrngrasCa1lBL98jopq6Tuk0h2XaVLUQ2
7N+8q3q9Cn1mYYBDdSd5/UdVLRRXOB+WrwY4PxU6V83lve1vbCul+IDW29hhAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUfTmBl3s67e3Hqly/HCoY+Z39txAwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM1MmUzODM4MmUzODM3
MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMNY
VzANBgkqhkiG9w0BAQsFAAOCAQEALpIr89XeZ+TFHsQAVbAvxq5tlCEmhyhvFFbh
JwfvCUTe9PloGISPk3lkZI/ZILhlnPPm9+DBRVuuxTG2GPP917NgFj2dSIv/5TNs
+sp9B8jQL9ca/m3GyKU+0KAqSzsD0QqQgHSteIi7p2sx70CFsnqrsBuhWfFqTDV8
3fmaLtL3pqyUcR4PserT0WAElw1zNc6BUZl3LfGLDlXzLZSo9L4JpOJmbVX3pN9B
dEqup3dUsGmK2o70fqxYvFx6Oi3z8XI1cTyUNhAKfujd4bwR7cATgFCKx4rNQKE+
WkpuVEo5P/CdlGtHDjQfdlnIOrjhYAxfiWe1WMZUqmJxDgR7Gg==
-----END CERTIFICATE-----
Generated at Mon May 20 14:35:47 2024 by rpki-client on console-fra.rpki-client.org