Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3232312e302f32342d3234203d3e20323035373333.roa
File: 38352e3233372e3232312e302f32342d3234203d3e20323035373333.roa (raw, json)
Hash identifier: XOtskLXKgXGMGJi3rLb+2KrXwojBsfDo+opyrgPtFj4=
Subject key identifier: 1A:CE:EB:2C:CE:50:65:D6:C0:0A:40:B6:BD:E0:20:3E:B1:C9:0E:1D
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 765F736A846E1FAB7BEAB9A0AB071B0F2988D6F3
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3232312e302f32342d3234203d3e20323035373333.roa
Signing time: Fri 01 Nov 2024 15:56:20 +0000
ROA not before: Fri 01 Nov 2024 15:51:20 +0000
ROA not after: Fri 31 Oct 2025 15:56:20 +0000
asID: 205733
IP address blocks: 85.237.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:5f:73:6a:84:6e:1f:ab:7b:ea:b9:a0:ab:07:1b:0f:29:88:d6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Nov 1 15:51:20 2024 GMT
Not After : Oct 31 15:56:20 2025 GMT
Subject: CN=1ACEEB2CCE5065D6C00A40B6BDE0203EB1C90E1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:3f:3d:5f:14:bf:19:26:ac:e9:32:9d:c6:
c9:6e:c1:7d:07:57:2a:70:23:14:8e:de:4d:08:f7:
09:52:13:3c:a7:1b:39:65:17:1c:18:60:37:04:2d:
bc:9e:ce:60:42:44:42:96:20:1f:51:d2:fc:18:2e:
d5:37:8b:45:ab:5e:13:ea:7a:df:16:10:fe:25:8d:
b9:f4:7a:8b:9e:3b:b1:ef:a3:33:47:89:9e:44:5b:
e4:78:bd:58:32:65:0d:f9:8a:ee:fb:bf:32:49:92:
5d:93:a2:25:45:36:a0:0a:7e:71:58:d3:fb:75:ed:
91:43:49:7f:b3:9d:5f:14:03:d9:3d:14:d9:18:2c:
cb:79:00:01:0a:fa:90:53:c5:2f:35:a6:6d:44:60:
9a:2c:cf:5c:50:31:87:0a:9b:7d:c8:f2:0d:15:7a:
75:82:bf:fb:b8:00:25:f3:9a:4a:e9:07:20:87:2c:
11:90:73:f1:3b:52:73:ce:92:2e:74:bb:17:41:f4:
73:ef:71:37:5a:97:6d:0f:cc:6e:cc:35:f6:9b:9c:
0d:c1:e5:b1:24:bc:c3:5a:34:52:c2:04:44:89:f6:
40:01:1a:d8:fd:7f:99:a6:26:ff:6c:79:a1:ab:36:
f7:bc:51:ba:34:25:44:db:cc:1d:96:b9:69:ef:56:
67:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CE:EB:2C:CE:50:65:D6:C0:0A:40:B6:BD:E0:20:3E:B1:C9:0E:1D
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3232312e302f32342d3234203d3e20323035373333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.221.0/24
Signature Algorithm: sha256WithRSAEncryption
40:e6:5a:2e:6d:44:a8:8f:82:f7:5c:6a:6c:f2:0e:27:e4:90:
03:9c:89:23:2a:03:33:f8:22:00:6e:74:a5:04:26:4d:bd:5c:
f3:46:f7:f7:7b:c1:b1:ff:74:ed:68:e3:08:35:3c:04:e0:8d:
0a:a8:4c:93:a4:aa:fe:5a:a7:f0:7d:0a:8a:94:63:c7:0d:8c:
08:3e:7d:53:47:27:b3:95:8b:62:0c:89:67:cc:d2:13:7f:e2:
e5:4d:49:6d:db:b7:69:34:68:50:a5:6d:23:34:2f:2e:c2:1d:
a7:11:bc:01:5d:6b:b3:e9:80:ef:a9:5e:5d:fc:4e:26:8f:59:
a4:a0:d2:66:2e:d9:f9:74:a9:84:35:0e:f8:b0:54:47:62:54:
92:1c:48:3d:9c:d2:4a:03:9d:36:de:0a:75:8e:2b:19:d7:30:
9d:99:01:f2:3d:90:46:3d:b1:52:16:4f:0b:8f:21:fa:82:7d:
71:37:2e:30:7e:e5:0d:f5:1c:3c:b4:ab:e8:60:a1:50:ca:cc:
29:08:b6:52:d8:0d:b7:b9:a1:20:1f:ae:fb:81:d4:ae:26:42:
da:47:45:59:08:9f:ce:a7:86:d6:8d:54:af:d6:f1:3a:39:4f:
09:69:7d:be:10:55:f8:21:26:39:c3:66:66:34:1e:c5:92:b0:
00:cc:b7:7a
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUdl9zaoRuH6t76rmgqwcbDymI1vMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM5NDNjYzJhN2NkYzM3OGEzNzcwMjU3M2JiNGY4MjEx
NzBiNTMwZDAeFw0yNDExMDExNTUxMjBaFw0yNTEwMzExNTU2MjBaMDMxMTAvBgNV
BAMTKDFBQ0VFQjJDQ0U1MDY1RDZDMDBBNDBCNkJERTAyMDNFQjFDOTBFMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6GT89XxS/GSas6TKdxsluwX0H
VypwIxSO3k0I9wlSEzynGzllFxwYYDcELbyezmBCREKWIB9R0vwYLtU3i0WrXhPq
et8WEP4ljbn0eoueO7HvozNHiZ5EW+R4vVgyZQ35iu77vzJJkl2ToiVFNqAKfnFY
0/t17ZFDSX+znV8UA9k9FNkYLMt5AAEK+pBTxS81pm1EYJosz1xQMYcKm33I8g0V
enWCv/u4ACXzmkrpByCHLBGQc/E7UnPOki50uxdB9HPvcTdal20PzG7MNfabnA3B
5bEkvMNaNFLCBESJ9kABGtj9f5mmJv9seaGrNve8Ubo0JUTbzB2WuWnvVmfVAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUGs7rLM5QZdbACkC2veAgPrHJDh0wHwYDVR0j
BBgwFoAU3JQ8wqfNw3ijdwJXO7T4IRcLUw0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYtNjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0
MTAxLzAvREM5NDNDQzJBN0NEQzM3OEEzNzcwMjU3M0JCNEY4MjExNzBCNTMwRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNKUTh3cWZOdzNpamR3SlhPN1Q0SVJj
TFV3MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYt
NjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0MTAxLzAvMzgzNTJlMzIzMzM3MmUzMjMy
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzUzNzMzMzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABV7d0wDQYJKoZIhvcNAQELBQADggEBAEDmWi5tRKiPgvdcamzyDifkkAOciSMq
AzP4IgBudKUEJk29XPNG9/d7wbH/dO1o4wg1PATgjQqoTJOkqv5ap/B9CoqUY8cN
jAg+fVNHJ7OVi2IMiWfM0hN/4uVNSW3bt2k0aFClbSM0Ly7CHacRvAFda7PpgO+p
Xl38TiaPWaSg0mYu2fl0qYQ1DviwVEdiVJIcSD2c0koDnTbeCnWOKxnXMJ2ZAfI9
kEY9sVIWTwuPIfqCfXE3LjB+5Q31HDy0q+hgoVDKzCkItlLYDbe5oSAfrvuB1K4m
QtpHRVkIn86nhtaNVK/W8To5Twlpfb4QVfghJjnDZmY0HsWSsADMt3o=
-----END CERTIFICATE-----
Generated at Mon Nov 25 06:09:05 2024 by rpki-client on console-fra.rpki-client.org