Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/33372e3230332e3134342e302f32312d3231203d3e203432363839.roa
File: 33372e3230332e3134342e302f32312d3231203d3e203432363839.roa (raw, json)
Hash identifier: ALVrlIuzq3NKnJLQx2QouDjnP2mxFLB4eXBSAzAM+bo=
Subject key identifier: E2:91:15:39:22:FF:23:89:1B:82:65:FC:2E:28:32:19:1C:BF:CC:C8
Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial: 6F49A211505F87602189698AB146E1E85548C094
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/33372e3230332e3134342e302f32312d3231203d3e203432363839.roa
Signing time: Thu 08 Aug 2024 10:16:27 +0000
ROA not before: Thu 08 Aug 2024 10:11:27 +0000
ROA not after: Thu 07 Aug 2025 10:16:27 +0000
asID: 42689
IP address blocks: 37.203.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:49:a2:11:50:5f:87:60:21:89:69:8a:b1:46:e1:e8:55:48:c0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Validity
Not Before: Aug 8 10:11:27 2024 GMT
Not After : Aug 7 10:16:27 2025 GMT
Subject: CN=E291153922FF23891B8265FC2E2832191CBFCCC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:9b:94:02:6a:4b:13:a6:4c:ea:c8:8f:e5:
eb:1b:38:d8:9e:52:f6:03:0f:95:8b:b1:aa:4c:b4:
8e:1d:5c:4d:a6:c2:3b:33:17:b5:57:49:8b:f0:9d:
3e:87:8c:fe:57:a8:b0:ef:e1:02:f6:67:bc:d6:94:
a2:98:c8:02:97:fd:f1:65:f1:56:a5:f7:57:e4:83:
f2:eb:5b:b4:37:ed:45:ab:51:08:5d:8f:4f:28:1e:
37:6c:5a:10:72:eb:34:18:70:ef:ef:93:fb:36:36:
3b:ec:86:1c:3c:2c:d8:47:2a:42:47:e9:74:1b:4e:
08:28:b7:6e:29:42:21:55:1f:8b:62:3e:f8:6f:9b:
2d:ac:2b:5b:b1:57:4a:c6:40:84:a7:81:d9:d3:4d:
49:45:dd:e3:cd:b6:d6:19:a8:31:3d:e2:d9:9d:64:
1d:53:4f:4d:c0:e1:1c:f8:4f:20:fe:22:33:fd:7f:
57:c0:d1:85:33:03:a4:d4:0f:2a:4f:41:c1:16:d7:
88:22:e9:5b:2c:71:49:28:0d:ff:84:ac:40:f9:89:
6d:f4:42:e2:e3:ed:84:97:46:ae:c3:da:34:10:dd:
8c:aa:54:c2:e4:e9:6d:e3:6e:c6:7d:62:41:93:e4:
dc:6a:79:e4:fe:ce:c4:19:ff:8a:3a:c2:78:a4:b4:
83:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:91:15:39:22:FF:23:89:1B:82:65:FC:2E:28:32:19:1C:BF:CC:C8
X509v3 Authority Key Identifier:
keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/33372e3230332e3134342e302f32312d3231203d3e203432363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.144.0/21
Signature Algorithm: sha256WithRSAEncryption
10:3c:49:db:c3:a6:1e:4e:0c:19:23:9b:a5:62:d5:61:44:bc:
87:f6:da:ca:6b:5c:ed:04:b0:53:3a:d4:e9:35:af:01:1f:ab:
4f:d9:60:96:9d:2e:72:33:58:fc:e8:ac:33:22:9c:c9:77:99:
7a:f0:e6:ed:6e:45:f5:a1:34:d4:33:e3:90:f1:26:54:30:b8:
d8:07:2d:3b:3b:66:f6:81:0d:f0:c1:a3:25:43:af:d6:67:d6:
71:aa:23:5a:9e:a7:f7:45:30:00:c6:44:15:49:4b:81:16:36:
60:a4:cb:be:eb:dc:91:ad:6e:c1:37:4a:4e:2a:1e:59:b6:35:
05:2f:df:02:bf:14:b9:e4:29:7c:b4:8a:25:ae:44:9f:e1:d3:
4a:01:fb:4a:ae:02:37:be:4a:76:ca:f3:2b:b2:38:55:9d:7c:
83:5f:25:8b:b0:d4:e4:22:99:83:4f:98:b2:54:c6:72:83:2b:
ec:9e:d7:7f:08:81:b4:24:95:2e:2f:da:2b:af:33:14:80:60:
35:60:5a:7a:94:b0:5c:4d:f8:e9:ad:98:f2:13:62:e7:9b:d9:
ec:79:da:66:f3:26:e3:0a:ab:1e:d0:7d:ab:e4:c7:00:fb:b0:
5b:59:3d:b5:3a:85:54:a3:22:f2:df:77:33:8c:2e:3a:2b:ee:
a4:64:be:39
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUb0miEVBfh2AhiWmKsUbh6FVIwJQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM1ZDkzNzA2Y2JmNDY4OGNlN2Q2MGZjMGVkNjkzZDRj
YzRhOTMyNjAeFw0yNDA4MDgxMDExMjdaFw0yNTA4MDcxMDE2MjdaMDMxMTAvBgNV
BAMTKEUyOTExNTM5MjJGRjIzODkxQjgyNjVGQzJFMjgzMjE5MUNCRkNDQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvjpuUAmpLE6ZM6siP5esbONie
UvYDD5WLsapMtI4dXE2mwjszF7VXSYvwnT6HjP5XqLDv4QL2Z7zWlKKYyAKX/fFl
8Val91fkg/LrW7Q37UWrUQhdj08oHjdsWhBy6zQYcO/vk/s2Njvshhw8LNhHKkJH
6XQbTggot24pQiFVH4tiPvhvmy2sK1uxV0rGQISngdnTTUlF3ePNttYZqDE94tmd
ZB1TT03A4Rz4TyD+IjP9f1fA0YUzA6TUDypPQcEW14gi6VsscUkoDf+ErED5iW30
QuLj7YSXRq7D2jQQ3YyqVMLk6W3jbsZ9YkGT5NxqeeT+zsQZ/4o6wniktIP9AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU4pEVOSL/I4kbgmX8LigyGRy/zMgwHwYDVR0j
BBgwFoAUc12TcGy/RojOfWD8DtaT1MxKkyYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmU2ZGE1YzctNjcwYS00MWIxLTk2ZWItMzg5OTM4OGIy
OTJjLzAvNzM1RDkzNzA2Q0JGNDY4OENFN0Q2MEZDMEVENjkzRDRDQzRBOTMyNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxMlRjR3lfUm9qT2ZXRDhEdGFUMU14
S2t5WS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmU2ZGE1Yzct
NjcwYS00MWIxLTk2ZWItMzg5OTM4OGIyOTJjLzAvMzMzNzJlMzIzMDMzMmUzMTM0
MzQyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDMyMzYzODM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
JcuQMA0GCSqGSIb3DQEBCwUAA4IBAQAQPEnbw6YeTgwZI5ulYtVhRLyH9trKa1zt
BLBTOtTpNa8BH6tP2WCWnS5yM1j86KwzIpzJd5l68ObtbkX1oTTUM+OQ8SZUMLjY
By07O2b2gQ3wwaMlQ6/WZ9ZxqiNanqf3RTAAxkQVSUuBFjZgpMu+69yRrW7BN0pO
Kh5ZtjUFL98CvxS55Cl8tIolrkSf4dNKAftKrgI3vkp2yvMrsjhVnXyDXyWLsNTk
IpmDT5iyVMZygyvsntd/CIG0JJUuL9orrzMUgGA1YFp6lLBcTfjprZjyE2Lnm9ns
edpm8ybjCqse0H2r5McA+7BbWT21OoVUoyLy33czjC46K+6kZL45
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:14:51 2024 by rpki-client on console-fra.rpki-client.org