Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3231322e3130372e31382e302f32332d3234203d3e203437353833.roa
File: 3231322e3130372e31382e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: +Xbkta2kiQboYM5CYHTOWoFs0PrxIXz9IFnLPF84Gtw=
Subject key identifier: 4B:E4:B4:87:69:68:33:E6:CF:E6:85:DA:BD:DF:7F:88:E3:E6:47:82
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 7163EEF5FB0BDF3B6460074BFC06C9AA4815B89F
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3231322e3130372e31382e302f32332d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:52:44 +0000
ROA not before: Mon 26 Feb 2024 08:47:44 +0000
ROA not after: Mon 24 Feb 2025 08:52:44 +0000
asID: 47583
IP address blocks: 212.107.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:63:ee:f5:fb:0b:df:3b:64:60:07:4b:fc:06:c9:aa:48:15:b8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Feb 26 08:47:44 2024 GMT
Not After : Feb 24 08:52:44 2025 GMT
Subject: CN=4BE4B487696833E6CFE685DABDDF7F88E3E64782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:60:9d:a0:50:cc:85:08:cb:5b:8a:c7:0d:49:
4a:36:0f:48:f7:97:79:69:43:75:0b:fd:a8:06:6e:
86:ce:8b:fe:b0:a9:cb:30:0a:f5:c6:5a:a3:dd:6b:
c0:1a:30:c0:7c:5a:74:21:12:68:aa:94:10:3b:cf:
e4:f4:2e:32:ce:96:cb:a1:b2:bc:9d:93:71:d9:ed:
b9:17:76:1b:d8:93:6c:bd:3f:39:16:54:d2:14:b4:
ac:65:01:54:26:09:0e:4c:21:fc:b6:42:b4:7d:87:
91:81:68:53:a9:7d:e2:4b:b6:11:2c:34:1b:09:d5:
2a:ee:49:bf:f2:5e:77:79:3c:98:a3:0d:41:bf:81:
39:f6:6c:08:70:0f:85:9e:79:6b:8f:66:4a:96:31:
f4:89:d0:c7:7a:06:ea:73:8b:4c:2b:03:11:3a:11:
34:9a:55:4a:13:66:57:1a:76:a1:fa:d4:cc:4e:08:
15:4d:f1:ac:01:b2:41:03:5b:39:86:3c:02:98:a6:
b0:c8:85:3e:de:00:cb:03:db:64:4d:22:d6:e8:33:
9f:d6:3a:3b:f1:64:90:17:ff:47:a8:1c:f4:29:5f:
d5:61:e6:6f:fa:55:e4:87:c5:bb:39:6b:89:8f:db:
9b:5a:19:38:6c:6c:05:56:0c:29:1b:b0:14:19:91:
b4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E4:B4:87:69:68:33:E6:CF:E6:85:DA:BD:DF:7F:88:E3:E6:47:82
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3231322e3130372e31382e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.107.18.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:bd:5d:e7:98:d4:e8:0d:25:4f:8d:59:74:f1:42:17:fc:4d:
2b:cb:5d:c0:68:ce:e5:c3:fb:17:f6:49:a7:b5:3f:2c:db:dd:
f1:55:96:28:42:c2:e5:72:3b:de:b3:66:3f:44:b9:03:11:c0:
b8:c7:25:fe:f0:8d:c4:1f:53:2a:c6:ff:6c:ea:52:c1:d2:bb:
0f:c4:36:ff:fb:48:12:a9:6d:eb:a3:94:b3:a3:8c:3f:6f:2e:
0f:f8:55:ce:9f:27:53:c9:6e:81:0e:e9:20:73:d7:33:a2:3f:
5c:8b:53:d6:b6:15:95:5e:12:0e:ed:6b:30:f7:93:1d:0d:75:
52:fd:9f:91:22:44:6e:0c:87:90:ed:f3:8e:39:63:40:90:b3:
3b:08:8d:b8:e0:4c:39:4e:5f:65:a1:08:07:c9:1c:3c:5f:c6:
e0:f5:0a:73:ff:d2:cc:13:58:cf:79:14:32:3d:13:c5:81:58:
7b:29:14:a7:61:cd:79:a9:21:60:eb:03:f8:23:07:5c:05:18:
6c:98:a5:a9:eb:37:d7:16:f3:f4:61:ef:31:63:9e:d1:43:7c:
f6:4b:da:62:f4:85:7e:f0:16:7e:a7:f5:64:bf:37:8b:0b:d9:
3d:eb:de:a2:13:fb:d6:b8:94:96:67:24:1f:32:0e:64:05:b5:
64:67:0b:b5
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUcWPu9fsL3ztkYAdL/AbJqkgVuJ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNDAyMjYwODQ3NDRaFw0yNTAyMjQwODUyNDRaMDMxMTAvBgNV
BAMTKDRCRTRCNDg3Njk2ODMzRTZDRkU2ODVEQUJEREY3Rjg4RTNFNjQ3ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeYJ2gUMyFCMtbiscNSUo2D0j3
l3lpQ3UL/agGbobOi/6wqcswCvXGWqPda8AaMMB8WnQhEmiqlBA7z+T0LjLOlsuh
srydk3HZ7bkXdhvYk2y9PzkWVNIUtKxlAVQmCQ5MIfy2QrR9h5GBaFOpfeJLthEs
NBsJ1SruSb/yXnd5PJijDUG/gTn2bAhwD4WeeWuPZkqWMfSJ0Md6Bupzi0wrAxE6
ETSaVUoTZlcadqH61MxOCBVN8awBskEDWzmGPAKYprDIhT7eAMsD22RNItboM5/W
OjvxZJAX/0eoHPQpX9Vh5m/6VeSHxbs5a4mP25taGThsbAVWDCkbsBQZkbRvAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUS+S0h2loM+bP5oXavd9/iOPmR4IwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzIzMTMyMmUzMTMwMzcyZTMx
MzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
1GsSMA0GCSqGSIb3DQEBCwUAA4IBAQCOvV3nmNToDSVPjVl08UIX/E0ry13AaM7l
w/sX9kmntT8s293xVZYoQsLlcjves2Y/RLkDEcC4xyX+8I3EH1Mqxv9s6lLB0rsP
xDb/+0gSqW3ro5Szo4w/by4P+FXOnydTyW6BDukgc9czoj9ci1PWthWVXhIO7Wsw
95MdDXVS/Z+RIkRuDIeQ7fOOOWNAkLM7CI244Ew5Tl9loQgHyRw8X8bg9Qpz/9LM
E1jPeRQyPRPFgVh7KRSnYc15qSFg6wP4IwdcBRhsmKWp6zfXFvP0Ye8xY57RQ3z2
S9pi9IV+8BZ+p/VkvzeLC9k9696iE/vWuJSWZyQfMg5kBbVkZwu1
-----END CERTIFICATE-----
Generated at Sat Jun 1 07:23:16 2024 by rpki-client on console-ams.rpki-client.org