Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38342e33392e302f32342d3234203d3e20323037313337.roa
File: 34352e38342e33392e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: wAQ7K4hX1piiC9cmOBoXlWpFfOFD5DyzQtjvFj7xbPs=
Subject key identifier: 4C:3D:AC:D7:B9:D2:38:71:AE:20:86:FC:6A:29:F1:06:13:8F:50:46
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7D3722B2B16E1AEA86C95D8ADE60B043342C3508
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38342e33392e302f32342d3234203d3e20323037313337.roa
Signing time: Mon 26 Feb 2024 08:53:07 +0000
ROA not before: Mon 26 Feb 2024 08:48:07 +0000
ROA not after: Mon 24 Feb 2025 08:53:07 +0000
asID: 207137
IP address blocks: 45.84.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:37:22:b2:b1:6e:1a:ea:86:c9:5d:8a:de:60:b0:43:34:2c:35:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:07 2024 GMT
Not After : Feb 24 08:53:07 2025 GMT
Subject: CN=4C3DACD7B9D23871AE2086FC6A29F106138F5046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:39:2b:58:a1:54:c2:5c:10:f7:92:a4:b0:
9a:89:ae:fb:02:cc:df:6d:c8:01:56:ea:e1:4d:16:
82:ea:4f:d7:8b:cc:30:11:31:fe:a4:d1:14:62:91:
be:cb:70:38:a8:20:a4:68:57:e8:54:a0:f8:1d:fa:
9d:cd:61:a7:64:3c:ff:a7:6b:5b:e9:7b:87:58:39:
b6:f4:18:58:ce:16:2b:41:23:57:16:23:c4:65:73:
a1:a4:41:f5:92:71:13:a7:68:32:6e:92:7f:67:8b:
e8:f0:ee:8f:a0:a4:75:7a:c5:94:89:e4:7e:c1:cb:
44:65:69:c7:f5:d6:24:d2:8a:e9:fc:cf:f9:be:0f:
83:74:78:77:49:44:43:9a:c0:12:b4:f5:7d:4e:4e:
d8:83:9d:55:8b:a3:5f:f2:a9:b9:a7:a6:a2:96:9b:
38:37:86:cb:2f:f5:4a:05:bb:c9:3c:67:19:c3:8b:
72:dc:91:07:88:d7:16:8c:b8:23:44:6c:59:cd:0e:
cc:8a:95:ca:11:f3:e2:35:0b:3c:0a:d0:c0:ba:3c:
18:ce:15:f6:e1:ad:f1:4f:21:b9:ff:85:7f:79:d2:
30:e0:52:b7:5a:ba:d9:aa:0f:5e:b6:dd:c3:d5:f0:
95:84:3b:41:8a:e5:c7:f5:57:84:c5:68:ed:f1:35:
e4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3D:AC:D7:B9:D2:38:71:AE:20:86:FC:6A:29:F1:06:13:8F:50:46
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38342e33392e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.39.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c1:eb:ec:e2:92:20:0c:0f:e4:0f:34:0f:75:d1:2a:72:c6:
a8:16:93:55:ab:21:a6:e6:f9:cd:bb:a0:18:b9:91:b6:f2:68:
28:bc:5a:28:b4:c6:44:f3:69:69:b6:fb:e8:74:2b:7a:76:2a:
61:47:9e:80:79:6d:e4:3e:3d:16:1e:e9:f4:f3:86:68:f1:fc:
ca:49:d9:27:f2:3f:46:42:df:65:7f:0d:ef:1e:12:c0:3a:67:
2c:e0:73:ef:d8:b0:d0:30:0c:ac:46:4a:5b:dc:74:e2:57:55:
93:04:05:19:85:2c:63:c5:92:30:5f:2b:a6:00:01:ea:b2:62:
10:9a:bc:6c:65:b2:f0:d7:08:2d:d0:91:76:2d:eb:2b:15:b8:
7d:cb:76:7a:da:95:46:44:2c:a3:47:4b:62:65:cc:5e:d3:5a:
44:4d:e8:23:45:ef:de:da:30:5e:a3:e5:2f:fe:b5:de:c4:fc:
5f:4e:d6:8d:fc:fa:e9:ba:9e:76:35:f5:2b:38:e2:ce:7b:fd:
e3:82:02:99:d0:fc:f9:5f:47:3f:ef:15:7c:f8:b3:b9:46:6c:
1a:24:02:02:aa:a2:87:a0:b4:8c:95:e3:77:86:51:70:d8:78:
a6:c3:c9:cc:f6:12:40:a9:af:57:2a:a2:72:59:49:ea:01:41:
ad:d0:b4:8c
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUfTcisrFuGuqGyV2K3mCwQzQsNQgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAyMjYwODQ4MDdaFw0yNTAyMjQwODUzMDdaMDMxMTAvBgNV
BAMTKDRDM0RBQ0Q3QjlEMjM4NzFBRTIwODZGQzZBMjlGMTA2MTM4RjUwNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRrDkrWKFUwlwQ95KksJqJrvsC
zN9tyAFW6uFNFoLqT9eLzDARMf6k0RRikb7LcDioIKRoV+hUoPgd+p3NYadkPP+n
a1vpe4dYObb0GFjOFitBI1cWI8Rlc6GkQfWScROnaDJukn9ni+jw7o+gpHV6xZSJ
5H7By0Rlacf11iTSiun8z/m+D4N0eHdJREOawBK09X1OTtiDnVWLo1/yqbmnpqKW
mzg3hssv9UoFu8k8ZxnDi3LckQeI1xaMuCNEbFnNDsyKlcoR8+I1CzwK0MC6PBjO
FfbhrfFPIbn/hX950jDgUrdautmqD1623cPV8JWEO0GK5cf1V4TFaO3xNeTzAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUTD2s17nSOHGuIIb8ainxBhOPUEYwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzgzNDJlMzMzOTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNzMxMzMzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1U
JzANBgkqhkiG9w0BAQsFAAOCAQEAJMHr7OKSIAwP5A80D3XRKnLGqBaTVashpub5
zbugGLmRtvJoKLxaKLTGRPNpabb76HQrenYqYUeegHlt5D49Fh7p9POGaPH8yknZ
J/I/RkLfZX8N7x4SwDpnLOBz79iw0DAMrEZKW9x04ldVkwQFGYUsY8WSMF8rpgAB
6rJiEJq8bGWy8NcILdCRdi3rKxW4fct2etqVRkQso0dLYmXMXtNaRE3oI0Xv3tow
XqPlL/613sT8X07Wjfz66bqedjX1Kzjiznv944ICmdD8+V9HP+8VfPizuUZsGiQC
Aqqih6C0jJXjd4ZRcNh4psPJzPYSQKmvVyqicllJ6gFBrdC0jA==
-----END CERTIFICATE-----
Generated at Mon May 20 13:47:07 2024 by rpki-client on console-ams.rpki-client.org