Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e33362e3233372e302f32342d3234203d3e20313437303439.roa
File: 3139332e33362e3233372e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: RscVZN1KUrC5Su8Oqarf7hbgxSL61mTD6PsGm1AnirM=
Subject key identifier: AA:38:2F:F8:5D:58:28:F0:8B:5E:D2:9B:66:85:EC:EA:33:91:06:77
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 3F0FC5C1B519B3AE97A5D4B5B480D3F1848CFB4E
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e33362e3233372e302f32342d3234203d3e20313437303439.roa
Signing time: Mon 07 Aug 2023 22:03:25 +0000
ROA not before: Mon 07 Aug 2023 21:58:25 +0000
ROA not after: Mon 05 Aug 2024 22:03:25 +0000
asID: 147049
IP address blocks: 193.36.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:0f:c5:c1:b5:19:b3:ae:97:a5:d4:b5:b4:80:d3:f1:84:8c:fb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Aug 7 21:58:25 2023 GMT
Not After : Aug 5 22:03:25 2024 GMT
Subject: CN=AA382FF85D5828F08B5ED29B6685ECEA33910677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:37:c0:86:c1:8f:37:a6:bf:40:f9:ee:3d:
28:ad:8f:4a:09:04:a4:ef:ba:c8:d8:f3:6f:e2:a6:
6d:37:c2:67:37:06:34:37:32:dc:c3:ea:3f:7c:7d:
96:57:46:72:60:3e:ae:d8:17:da:a5:67:dd:b3:1f:
fc:a7:fc:0d:55:e7:ff:ea:f6:a5:89:1e:84:8f:ab:
47:96:fe:9a:71:f9:b3:d5:a5:1d:3b:9c:b6:47:12:
8c:48:c4:16:29:9a:f8:9b:06:c8:3b:35:75:07:e8:
41:1e:ae:a8:4e:ce:c7:e3:c6:53:cd:c0:8c:09:40:
a2:43:59:ef:bd:6a:9b:c2:52:bf:0e:a4:7a:1c:69:
a4:11:ad:1e:c7:a8:a6:79:5e:dc:08:16:7c:0c:c1:
a0:a7:ac:7b:74:29:18:b3:12:0c:ef:cf:54:c6:4c:
85:34:ff:ed:c7:c3:1c:f3:2f:98:03:c6:4c:7f:e0:
15:59:ea:6e:2d:ec:0a:a8:e0:92:e0:6b:50:7c:5e:
33:6e:cd:bb:03:bf:b4:df:77:83:7d:32:10:88:17:
6c:bf:c6:87:e7:35:12:00:56:2c:7f:85:b4:bc:98:
9a:cb:a5:e1:ac:4c:20:0a:ff:49:0d:f3:dc:1f:e0:
20:20:8b:8e:df:1e:d8:43:49:fb:8e:5f:ff:32:cb:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:38:2F:F8:5D:58:28:F0:8B:5E:D2:9B:66:85:EC:EA:33:91:06:77
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e33362e3233372e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.237.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f6:22:f2:6e:d8:24:da:43:6b:f8:55:82:da:48:2b:9b:1b:
85:ec:28:bc:e0:62:11:e6:89:25:cd:78:69:15:af:f9:9a:79:
c2:bc:f7:88:ee:89:7d:12:84:b8:1d:17:3e:5c:fc:3e:c8:26:
55:d7:4f:f4:8d:3f:b3:4d:22:9c:aa:97:df:d8:92:2c:80:48:
88:cd:24:bc:71:4f:96:40:0d:e1:66:11:87:95:78:1e:ce:1c:
30:79:82:8e:b2:10:a1:7d:15:2a:ec:6a:1f:9e:d6:8c:b7:99:
d4:0e:5a:8e:4d:31:5c:04:4a:f2:48:ed:f2:23:14:74:7f:4e:
27:46:f0:6f:11:4d:69:43:cf:00:4b:53:1e:33:4f:74:44:4a:
37:eb:8d:01:f4:79:5f:d8:39:37:67:95:7b:38:7f:a8:4b:b1:
a0:46:95:26:db:fb:96:6e:32:ed:5a:c8:37:76:c2:0e:a8:02:
b0:db:fd:30:6b:95:61:76:b9:47:13:3e:1d:fe:1b:c0:f4:5d:
8a:02:a7:8b:84:d6:26:bf:b6:50:d2:ec:a5:85:8d:93:07:4a:
8e:1b:83:49:f5:b1:60:f9:ea:61:59:34:c7:b6:46:fd:31:67:
6a:8b:b5:4d:42:2d:30:d3:60:06:1c:5e:d5:42:32:f5:da:eb:
1f:67:76:5a
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUPw/FwbUZs66XpdS1tIDT8YSM+04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJjMmE4MzU0Njg5YWVjMmE3NGZjYTE0OTQ0OTI3NjIx
YmEyN2M5NDAeFw0yMzA4MDcyMTU4MjVaFw0yNDA4MDUyMjAzMjVaMDMxMTAvBgNV
BAMTKEFBMzgyRkY4NUQ1ODI4RjA4QjVFRDI5QjY2ODVFQ0VBMzM5MTA2NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAZjfAhsGPN6a/QPnuPSitj0oJ
BKTvusjY82/ipm03wmc3BjQ3MtzD6j98fZZXRnJgPq7YF9qlZ92zH/yn/A1V5//q
9qWJHoSPq0eW/ppx+bPVpR07nLZHEoxIxBYpmvibBsg7NXUH6EEerqhOzsfjxlPN
wIwJQKJDWe+9apvCUr8OpHocaaQRrR7HqKZ5XtwIFnwMwaCnrHt0KRizEgzvz1TG
TIU0/+3HwxzzL5gDxkx/4BVZ6m4t7Aqo4JLga1B8XjNuzbsDv7Tfd4N9MhCIF2y/
xofnNRIAVix/hbS8mJrLpeGsTCAK/0kN89wf4CAgi47fHthDSfuOX/8yy+btAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUqjgv+F1YKPCLXtKbZoXs6jORBncwHwYDVR0j
BBgwFoAUEsKoNUaJrsKnT8oUlEknYhuifJQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzcvMTJDMkE4MzU0Njg5QUVDMkE3NEZDQTE0OTQ0OTI3NjIxQkEyN0M5NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0VzS29OVWFKcnNLblQ4b1VsRWtuWWh1
aWZKUS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzcvMzEzOTMzMmUzMzM2MmUzMjMz
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMDM0Mzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADBJO0wDQYJKoZIhvcNAQELBQADggEBAIv2IvJu2CTaQ2v4VYLaSCubG4XsKLzg
YhHmiSXNeGkVr/maecK894juiX0ShLgdFz5c/D7IJlXXT/SNP7NNIpyql9/YkiyA
SIjNJLxxT5ZADeFmEYeVeB7OHDB5go6yEKF9FSrsah+e1oy3mdQOWo5NMVwESvJI
7fIjFHR/TidG8G8RTWlDzwBLUx4zT3RESjfrjQH0eV/YOTdnlXs4f6hLsaBGlSbb
+5ZuMu1ayDd2wg6oArDb/TBrlWF2uUcTPh3+G8D0XYoCp4uE1ia/tlDS7KWFjZMH
So4bg0n1sWD56mFZNMe2Rv0xZ2qLtU1CLTDTYAYcXtVCMvXa6x9ndlo=
-----END CERTIFICATE-----
Generated at Sat Jun 1 10:22:32 2024 by rpki-client on console-ams.rpki-client.org