Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e37322e302f32312d3332203d3e203531313637.roa
File: 33312e3232302e37322e302f32312d3332203d3e203531313637.roa (raw, json)
Hash identifier: swX+MhVXgIROhOXwbwCef7+qoHf5LaT9Ix5G2yafYF0=
Subject key identifier: 94:FF:55:E8:39:F0:EF:A7:C9:CF:48:7A:61:D2:11:84:58:B4:D3:F3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 16555BD1A1C6FA2707D30A9FB6EFB638FF278530
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e37322e302f32312d3332203d3e203531313637.roa
Signing time: Mon 26 Feb 2024 08:52:59 +0000
ROA not before: Mon 26 Feb 2024 08:47:59 +0000
ROA not after: Mon 24 Feb 2025 08:52:59 +0000
asID: 51167
IP address blocks: 31.220.72.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:55:5b:d1:a1:c6:fa:27:07:d3:0a:9f:b6:ef:b6:38:ff:27:85:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:47:59 2024 GMT
Not After : Feb 24 08:52:59 2025 GMT
Subject: CN=94FF55E839F0EFA7C9CF487A61D2118458B4D3F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c1:9f:00:27:18:9f:43:40:33:5a:00:ea:b1:
e0:ea:14:49:3f:dc:d2:3e:eb:ab:76:5c:db:dc:da:
2e:fb:18:d6:1c:13:61:2f:57:38:45:e8:a6:7d:ef:
be:4c:07:a8:7d:a9:aa:be:e0:8f:73:a2:f6:f7:2b:
26:28:68:41:50:ce:de:3f:f9:71:fc:fc:e6:80:d4:
a5:97:b6:e4:0e:e9:58:91:1a:bc:77:91:34:84:8e:
84:2d:62:87:6c:fd:44:48:be:6e:ee:49:0f:7c:cf:
f8:9a:12:06:5c:ec:ce:37:af:32:6f:b6:41:3c:32:
3a:af:fc:d1:c7:d0:e9:34:c3:0f:c1:99:2e:aa:f9:
cc:7a:1c:5a:14:b5:e8:3b:c3:7d:f0:b9:bd:6f:18:
0c:de:14:3a:71:61:94:52:16:42:ef:26:ab:ef:08:
80:92:78:e0:0f:f6:8b:be:92:4b:58:da:e5:b7:de:
90:26:93:fa:b6:8a:ef:1f:2c:3f:dd:77:d0:7d:96:
e0:28:95:e1:3e:c9:1e:b3:a0:56:93:8a:fb:dc:58:
bf:94:b8:af:fd:a2:25:ef:6f:16:26:4c:66:b0:11:
22:f4:87:ca:0c:cf:12:9b:83:39:ba:f5:ef:25:cd:
bb:b0:cf:3d:1a:8d:fc:d2:05:7f:1b:bc:35:48:5d:
e3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FF:55:E8:39:F0:EF:A7:C9:CF:48:7A:61:D2:11:84:58:B4:D3:F3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e37322e302f32312d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.72.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:18:0f:b7:da:d8:75:2d:3c:0b:02:2c:6c:fc:9c:d4:04:4a:
d3:a1:a1:38:be:29:0d:08:e8:42:3b:56:6d:ae:72:64:ac:80:
f1:1e:de:ed:4f:b1:b5:c0:44:d3:5a:ac:bc:73:dd:8f:2d:eb:
cb:66:ac:ee:ce:b7:d6:6e:32:ff:55:fb:4c:a4:35:9e:45:56:
63:ac:49:78:f4:5e:b4:5b:d9:4e:42:83:c4:68:a3:bf:2a:39:
5d:05:6d:f4:19:a8:27:d6:ea:ae:1e:29:36:fd:f5:e8:03:e1:
10:ef:c0:3a:d0:8f:9e:96:0e:3b:65:6f:9e:59:5f:97:e4:22:
3e:88:56:d2:61:9c:1c:ef:40:8e:e6:74:8c:f8:86:84:4e:17:
21:9c:c9:b0:fc:a8:7c:c3:b2:b0:cb:24:ec:12:20:63:46:0d:
37:ac:ba:95:65:29:0d:23:a9:f1:c6:48:62:f1:ea:1c:97:02:
8f:55:67:3a:10:78:a8:4d:df:38:0d:c6:a3:5a:84:dd:d3:36:
80:ec:ab:f7:9f:01:4f:26:17:5c:72:c2:2f:44:a1:98:54:06:
f4:0a:0d:61:40:cf:93:e1:19:ec:c6:39:a2:ff:68:10:5e:c5:
a7:eb:f1:7c:90:2b:72:ee:af:5b:52:12:b3:22:a2:32:e4:c2:
a1:61:0e:61
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUFlVb0aHG+icH0wqftu+2OP8nhTAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAyMjYwODQ3NTlaFw0yNTAyMjQwODUyNTlaMDMxMTAvBgNV
BAMTKDk0RkY1NUU4MzlGMEVGQTdDOUNGNDg3QTYxRDIxMTg0NThCNEQzRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHwZ8AJxifQ0AzWgDqseDqFEk/
3NI+66t2XNvc2i77GNYcE2EvVzhF6KZ9775MB6h9qaq+4I9zovb3KyYoaEFQzt4/
+XH8/OaA1KWXtuQO6ViRGrx3kTSEjoQtYods/URIvm7uSQ98z/iaEgZc7M43rzJv
tkE8Mjqv/NHH0Ok0ww/BmS6q+cx6HFoUteg7w33wub1vGAzeFDpxYZRSFkLvJqvv
CICSeOAP9ou+kktY2uW33pAmk/q2iu8fLD/dd9B9luAoleE+yR6zoFaTivvcWL+U
uK/9oiXvbxYmTGawESL0h8oMzxKbgzm69e8lzbuwzz0ajfzSBX8bvDVIXeNlAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUlP9V6Dnw76fJz0h6YdIRhFi00/MwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzMzMTJlMzIzMjMwMmUzNzMy
MmUzMDJmMzIzMTJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAx/c
SDANBgkqhkiG9w0BAQsFAAOCAQEAPxgPt9rYdS08CwIsbPyc1ARK06GhOL4pDQjo
QjtWba5yZKyA8R7e7U+xtcBE01qsvHPdjy3ry2as7s631m4y/1X7TKQ1nkVWY6xJ
ePRetFvZTkKDxGijvyo5XQVt9BmoJ9bqrh4pNv316APhEO/AOtCPnpYOO2Vvnllf
l+QiPohW0mGcHO9AjuZ0jPiGhE4XIZzJsPyofMOysMsk7BIgY0YNN6y6lWUpDSOp
8cZIYvHqHJcCj1VnOhB4qE3fOA3Go1qE3dM2gOyr958BTyYXXHLCL0ShmFQG9AoN
YUDPk+EZ7MY5ov9oEF7Fp+vxfJArcu6vW1ISsyKiMuTCoWEOYQ==
-----END CERTIFICATE-----
Generated at Mon May 20 14:35:47 2024 by rpki-client on console-fra.rpki-client.org