Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e342e302f32342d3234203d3e203530363733.roa
File: 33312e3232302e342e302f32342d3234203d3e203530363733.roa (raw, json)
Hash identifier: 3aZ835xkcCqxznLNaHX4Zh7pH4X5E1ly8yNIERgPYYs=
Subject key identifier: 38:FE:74:C0:9B:21:C1:DE:FE:A7:1F:D6:6B:98:ED:E5:23:12:FD:A6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2775F2EFD52AF59EE3F2FDBF15AC079BC8ED7A38
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e342e302f32342d3234203d3e203530363733.roa
Signing time: Mon 26 Feb 2024 08:53:09 +0000
ROA not before: Mon 26 Feb 2024 08:48:09 +0000
ROA not after: Mon 24 Feb 2025 08:53:09 +0000
asID: 50673
IP address blocks: 31.220.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:75:f2:ef:d5:2a:f5:9e:e3:f2:fd:bf:15:ac:07:9b:c8:ed:7a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:09 2024 GMT
Not After : Feb 24 08:53:09 2025 GMT
Subject: CN=38FE74C09B21C1DEFEA71FD66B98EDE52312FDA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fc:39:0f:a8:6f:ee:9b:ec:dc:1f:41:23:91:
85:95:72:00:db:37:78:c3:86:6d:2b:15:5e:ce:99:
0c:ff:d7:cc:98:9b:52:19:23:e6:0b:e1:ca:fb:6b:
df:ed:17:df:d8:4a:0e:c5:f7:d0:1d:d2:80:72:ba:
ff:11:14:de:c9:d7:39:98:a8:18:dd:16:22:c4:6e:
b2:9f:14:90:e8:5b:cd:f6:6a:f1:98:27:e1:0a:49:
3f:97:f0:2c:e1:19:86:ec:f7:82:86:0d:f8:58:6a:
8f:48:8a:1d:3c:d9:e2:b8:a6:ec:da:62:40:b3:dc:
07:5b:e7:1e:b7:d7:1b:d5:31:88:a6:df:37:1e:84:
0b:95:c0:65:39:8f:4b:46:1a:8b:8a:c4:16:e4:eb:
9e:2b:7a:83:12:f7:c7:01:d5:c0:a0:99:2c:01:fb:
38:8f:bc:e9:2d:20:e7:61:49:97:bf:9f:58:9f:8a:
49:31:cd:7d:4a:c6:9c:6a:fc:63:62:43:8f:41:6b:
16:fb:cc:7d:df:2d:0d:d9:b8:df:83:dc:f7:05:69:
ef:65:b4:6c:a2:42:9f:d8:7a:5e:91:f3:44:45:0b:
fc:48:e2:73:c1:2d:d1:9f:3d:d3:b5:ff:49:f0:d7:
d2:a5:50:93:fe:0e:e1:0f:50:5e:5e:bf:ac:0f:c2:
e1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FE:74:C0:9B:21:C1:DE:FE:A7:1F:D6:6B:98:ED:E5:23:12:FD:A6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e342e302f32342d3234203d3e203530363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.4.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:1a:a4:77:24:72:5a:87:2e:4f:34:09:01:29:55:89:48:c2:
ab:9c:21:cd:e7:36:44:e5:74:44:92:e6:73:a0:c6:76:3a:c8:
fb:fc:fb:a0:0d:3a:ab:1a:af:3d:7e:6a:61:72:22:b0:79:9b:
dd:af:25:1f:39:d5:7b:64:7b:8a:e3:4a:e4:7b:c4:55:db:bb:
eb:59:2d:f2:79:f6:5a:f5:6f:7c:c5:af:55:6d:2b:33:7d:bf:
6c:39:f5:0e:de:e6:b6:d0:5d:f6:c8:c0:7c:cd:75:46:28:5d:
d6:7c:40:a0:8c:33:24:7c:40:2a:2c:33:7f:b1:94:9c:e5:2e:
5c:2a:36:7e:12:f5:bc:84:93:8b:cf:f8:7b:ab:38:14:2e:09:
7f:36:a0:89:ba:c8:0e:1a:a4:8a:79:87:e0:46:14:8b:8f:c2:
ff:fb:eb:2f:eb:0a:38:70:9b:bf:c1:69:42:21:cd:98:6c:8f:
8f:0d:58:79:66:f8:59:06:f9:4c:50:3e:28:10:5b:91:19:a8:
16:7c:5e:29:f8:8c:95:0f:0b:b4:36:33:86:ef:6e:3a:44:1f:
dd:d4:bb:d7:eb:cb:30:4e:57:3b:7e:65:a4:e9:5a:3e:23:5a:
07:a1:aa:32:33:16:1e:52:62:17:b9:39:51:6c:6c:10:59:1a:
43:5c:0f:a7
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUJ3Xy79Uq9Z7j8v2/FawHm8jtejgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAyMjYwODQ4MDlaFw0yNTAyMjQwODUzMDlaMDMxMTAvBgNV
BAMTKDM4RkU3NEMwOUIyMUMxREVGRUE3MUZENjZCOThFREU1MjMxMkZEQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk/DkPqG/um+zcH0EjkYWVcgDb
N3jDhm0rFV7OmQz/18yYm1IZI+YL4cr7a9/tF9/YSg7F99Ad0oByuv8RFN7J1zmY
qBjdFiLEbrKfFJDoW832avGYJ+EKST+X8CzhGYbs94KGDfhYao9Iih082eK4puza
YkCz3Adb5x631xvVMYim3zcehAuVwGU5j0tGGouKxBbk654reoMS98cB1cCgmSwB
+ziPvOktIOdhSZe/n1ifikkxzX1Kxpxq/GNiQ49Baxb7zH3fLQ3ZuN+D3PcFae9l
tGyiQp/Yel6R80RFC/xI4nPBLdGfPdO1/0nw19KlUJP+DuEPUF5ev6wPwuEnAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUOP50wJshwd7+px/Wa5jt5SMS/aYwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzMzMTJlMzIzMjMwMmUzNDJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzAzNjM3MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAf3AQw
DQYJKoZIhvcNAQELBQADggEBAJoapHckclqHLk80CQEpVYlIwqucIc3nNkTldESS
5nOgxnY6yPv8+6ANOqsarz1+amFyIrB5m92vJR851Xtke4rjSuR7xFXbu+tZLfJ5
9lr1b3zFr1VtKzN9v2w59Q7e5rbQXfbIwHzNdUYoXdZ8QKCMMyR8QCosM3+xlJzl
LlwqNn4S9byEk4vP+HurOBQuCX82oIm6yA4apIp5h+BGFIuPwv/76y/rCjhwm7/B
aUIhzZhsj48NWHlm+FkG+UxQPigQW5EZqBZ8Xin4jJUPC7Q2M4bvbjpEH93Uu9fr
yzBOVzt+ZaTpWj4jWgehqjIzFh5SYhe5OVFsbBBZGkNcD6c=
-----END CERTIFICATE-----
Generated at Mon May 20 19:28:04 2024 by rpki-client on console-fra.rpki-client.org