Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e32312e37322e302f32322d3234203d3e203437353833.roa
File: 3231372e32312e37322e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: fSSbYC467JLug5GX5tfnVRecfRZ6ynsniAx+6TwCBV4=
Subject key identifier: 2C:81:9B:D4:79:42:E9:1A:EE:B1:DB:D9:B2:D1:57:AF:6E:C3:29:1F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4D77B6FF000B4117B351673EDE290F5E7EA956BA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e32312e37322e302f32322d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:30 +0000
ROA not before: Mon 26 Feb 2024 08:48:30 +0000
ROA not after: Mon 24 Feb 2025 08:53:30 +0000
asID: 47583
IP address blocks: 217.21.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:77:b6:ff:00:0b:41:17:b3:51:67:3e:de:29:0f:5e:7e:a9:56:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:30 2024 GMT
Not After : Feb 24 08:53:30 2025 GMT
Subject: CN=2C819BD47942E91AEEB1DBD9B2D157AF6EC3291F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:4e:ec:c4:c1:bb:eb:5b:60:24:c4:ea:be:
ad:f5:5b:d0:0a:cf:ce:ee:da:f3:67:a4:66:95:fb:
97:8a:41:c5:eb:f8:0a:da:a0:f2:b2:3d:37:c5:57:
3b:9a:cd:99:e4:63:53:f0:02:39:00:9b:f1:76:f0:
e6:54:68:00:41:3c:22:2b:04:47:2f:43:51:0b:46:
07:82:33:32:b5:47:57:b5:ea:57:9b:10:8a:80:07:
fd:c3:66:18:c1:b4:53:76:a5:93:0e:92:d3:dc:f4:
06:c4:ab:0c:ec:b6:65:ca:5c:24:a6:58:e6:3f:82:
2b:ee:b4:40:32:79:bb:f6:81:28:1f:15:e5:41:af:
87:8d:65:03:27:51:24:cc:3a:37:ab:18:de:37:ca:
44:c2:b2:e5:4b:7d:4a:89:a2:be:98:39:51:97:ca:
9e:bb:d9:58:4b:3a:a8:42:98:01:3d:aa:d0:be:2d:
8e:8f:69:36:b7:7e:13:e4:85:f1:ae:64:fc:d5:7a:
58:f3:c4:e4:d1:e9:43:c2:0a:a1:16:dd:3b:88:ba:
87:16:04:ac:e1:cb:4f:99:5b:76:45:4d:70:25:00:
e6:2f:d0:d8:1c:26:57:cd:4b:c3:90:8c:39:79:8d:
81:bc:b1:35:0e:2c:8c:e1:7e:43:60:c0:9c:f3:bc:
e2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:81:9B:D4:79:42:E9:1A:EE:B1:DB:D9:B2:D1:57:AF:6E:C3:29:1F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e32312e37322e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.21.72.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:1e:60:e0:8c:4e:4a:5f:7b:5e:70:51:dc:85:d8:e6:76:4b:
26:0a:1a:5d:04:4f:79:93:4f:4d:11:a8:18:6c:da:2a:6f:18:
75:fe:16:66:81:8e:aa:94:2a:1c:e6:b9:4d:95:c1:b5:eb:b1:
d2:3f:72:a5:92:b4:76:47:b3:45:66:91:9a:6b:e2:78:fb:ee:
e5:30:fb:d5:43:6f:40:07:cb:59:45:7d:3e:08:a2:be:a7:78:
88:19:5d:f5:4d:ee:96:11:2b:ff:fe:5b:a2:e1:12:26:42:99:
3f:0e:b3:9e:1b:5a:bb:58:48:db:0a:81:b2:30:ec:ea:40:4d:
4f:ce:d8:6a:36:e1:e2:55:b5:13:f5:7b:7f:d5:6e:56:32:11:
26:a9:a9:c9:63:31:49:80:0e:9b:23:76:b7:42:f2:84:4c:ea:
15:96:de:30:ef:ee:b5:c7:8b:65:cc:44:24:72:08:2e:d5:a4:
11:1f:46:26:fe:54:1e:40:74:10:13:ef:13:0a:9f:e2:76:21:
a5:28:c9:bf:17:d3:dd:35:df:42:34:8c:49:09:29:6f:66:24:
4e:48:dd:c9:ce:6b:a2:3c:b2:c0:d9:90:71:6e:05:59:85:4b:
54:78:5a:6e:80:36:22:02:a3:11:c7:30:1f:05:6a:76:09:60:
e2:f1:2f:0f
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUTXe2/wALQRezUWc+3ikPXn6pVrowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAyMjYwODQ4MzBaFw0yNTAyMjQwODUzMzBaMDMxMTAvBgNV
BAMTKDJDODE5QkQ0Nzk0MkU5MUFFRUIxREJEOUIyRDE1N0FGNkVDMzI5MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Pk7sxMG761tgJMTqvq31W9AK
z87u2vNnpGaV+5eKQcXr+AraoPKyPTfFVzuazZnkY1PwAjkAm/F28OZUaABBPCIr
BEcvQ1ELRgeCMzK1R1e16lebEIqAB/3DZhjBtFN2pZMOktPc9AbEqwzstmXKXCSm
WOY/givutEAyebv2gSgfFeVBr4eNZQMnUSTMOjerGN43ykTCsuVLfUqJor6YOVGX
yp672VhLOqhCmAE9qtC+LY6PaTa3fhPkhfGuZPzVeljzxOTR6UPCCqEW3TuIuocW
BKzhy0+ZW3ZFTXAlAOYv0NgcJlfNS8OQjDl5jYG8sTUOLIzhfkNgwJzzvOJ1AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQULIGb1HlC6RrusdvZstFXr27DKR8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMjMxMmUzNzMy
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtkV
SDANBgkqhkiG9w0BAQsFAAOCAQEAKh5g4IxOSl97XnBR3IXY5nZLJgoaXQRPeZNP
TRGoGGzaKm8Ydf4WZoGOqpQqHOa5TZXBteux0j9ypZK0dkezRWaRmmviePvu5TD7
1UNvQAfLWUV9Pgiivqd4iBld9U3ulhEr//5bouESJkKZPw6znhtau1hI2wqBsjDs
6kBNT87Yajbh4lW1E/V7f9VuVjIRJqmpyWMxSYAOmyN2t0LyhEzqFZbeMO/utceL
ZcxEJHIILtWkER9GJv5UHkB0EBPvEwqf4nYhpSjJvxfT3TXfQjSMSQkpb2YkTkjd
yc5rojyywNmQcW4FWYVLVHhaboA2IgKjEccwHwVqdglg4vEvDw==
-----END CERTIFICATE-----
Generated at Mon May 20 13:47:07 2024 by rpki-client on console-ams.rpki-client.org