Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa
File: 3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: D04ae2SRdtKJx7avocdxkHAFAepjsts9k/904EQDNhs=
Subject key identifier: 09:7E:58:98:CB:99:F8:6E:BC:0E:F4:E6:A7:DA:77:12:C4:A6:86:3D
Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial: 21EEB397BC75FB1E7422613AAC40FACB1B23E4B9
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa
Signing time: Tue 02 Jul 2024 14:05:18 +0000
ROA not before: Tue 02 Jul 2024 14:00:18 +0000
ROA not after: Tue 01 Jul 2025 14:05:18 +0000
asID: 61317
IP address blocks: 188.164.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ee:b3:97:bc:75:fb:1e:74:22:61:3a:ac:40:fa:cb:1b:23:e4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Validity
Not Before: Jul 2 14:00:18 2024 GMT
Not After : Jul 1 14:05:18 2025 GMT
Subject: CN=097E5898CB99F86EBC0EF4E6A7DA7712C4A6863D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:e0:2a:cf:51:10:a6:6d:75:5b:1e:bd:0a:
82:87:4c:97:ae:4e:20:91:d3:58:35:03:27:04:de:
5d:eb:dd:bd:cf:4c:5c:f6:d3:20:cd:5f:f8:d3:fa:
f9:56:4c:1c:53:e0:dd:fb:1e:c5:6c:58:c7:57:4a:
94:1d:d4:6a:b6:4b:46:7f:14:f8:fc:8c:f5:9c:be:
61:4a:7b:0c:05:1e:31:be:f4:2f:e1:70:97:0e:39:
73:21:f9:a9:48:bc:80:53:38:69:16:dc:52:cc:fc:
12:b5:f3:f4:43:24:a8:b0:58:35:06:19:b7:1f:a8:
63:25:98:65:9d:47:98:0b:cb:a7:d4:19:35:13:bc:
8d:36:37:de:87:2e:8b:b3:87:a8:d9:45:ed:f9:ae:
a1:17:06:fe:da:fe:f6:ac:56:3e:5d:fa:46:d4:c8:
79:33:6e:69:d2:5f:46:cb:0c:2b:94:69:4e:53:ed:
5d:fb:d0:00:c2:46:fc:a3:5d:8c:4b:3d:4c:7b:37:
33:b4:b2:25:d3:d6:62:98:bd:8d:d6:ed:b5:5d:07:
1b:32:23:be:5a:1e:90:90:12:f8:af:0f:61:b9:fd:
d6:21:5e:49:98:3e:59:ec:99:7f:28:ed:82:16:25:
81:60:71:d2:7e:05:45:fa:be:7c:c2:f1:a6:1c:7b:
eb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7E:58:98:CB:99:F8:6E:BC:0E:F4:E6:A7:DA:77:12:C4:A6:86:3D
X509v3 Authority Key Identifier:
keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.152.0/24
Signature Algorithm: sha256WithRSAEncryption
39:fa:c4:d4:01:eb:f5:be:b2:9b:bb:6d:e0:9f:be:7c:99:13:
56:0f:c2:d5:43:c5:87:36:04:ec:b0:37:8b:e5:27:64:af:4b:
dc:80:58:bf:37:9d:55:32:bd:54:62:a1:76:66:2e:bf:39:ee:
02:43:b4:45:59:88:86:7e:f5:2b:07:ad:b9:99:2e:f9:7a:c3:
75:cb:45:66:d1:45:ec:72:b9:63:37:f7:74:d0:72:33:0a:2d:
f2:92:d2:c2:0f:18:46:23:f5:0d:47:93:89:0d:c5:85:42:c9:
fb:54:47:12:ea:29:7a:5b:ad:99:d3:e7:ba:5f:85:aa:f6:e2:
e3:e5:0c:d6:5f:64:5b:0b:f7:14:50:21:12:50:2f:e7:62:7e:
1d:cd:0a:55:97:48:4e:b6:39:6b:a4:42:bc:95:a2:c1:93:cf:
56:4d:df:20:bf:61:a1:5b:30:97:93:13:89:0b:24:15:e4:d7:
e8:ca:5b:4c:2b:f2:74:cc:38:df:77:3a:70:e0:fc:76:f8:57:
49:fa:26:4e:c2:de:e3:1f:e1:74:57:48:e6:e2:45:e2:af:86:
bc:cc:17:62:e7:6e:40:18:83:a0:a6:fb:72:0e:52:24:37:f4:
dd:1c:71:b8:94:c7:ab:da:b9:19:20:c0:c4:32:d6:f0:7c:3b:
61:90:d8:67
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUIe6zl7x1+x50ImE6rED6yxsj5LkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI5YmE5YWRkZTk2MzU3NzdiZjU4NmZkNDkzZTE0Y2Qz
MGY3YzRjYTAeFw0yNDA3MDIxNDAwMThaFw0yNTA3MDExNDA1MThaMDMxMTAvBgNV
BAMTKDA5N0U1ODk4Q0I5OUY4NkVCQzBFRjRFNkE3REE3NzEyQzRBNjg2M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/eAqz1EQpm11Wx69CoKHTJeu
TiCR01g1AycE3l3r3b3PTFz20yDNX/jT+vlWTBxT4N37HsVsWMdXSpQd1Gq2S0Z/
FPj8jPWcvmFKewwFHjG+9C/hcJcOOXMh+alIvIBTOGkW3FLM/BK18/RDJKiwWDUG
GbcfqGMlmGWdR5gLy6fUGTUTvI02N96HLouzh6jZRe35rqEXBv7a/vasVj5d+kbU
yHkzbmnSX0bLDCuUaU5T7V370ADCRvyjXYxLPUx7NzO0siXT1mKYvY3W7bVdBxsy
I75aHpCQEvivD2G5/dYhXkmYPlnsmX8o7YIWJYFgcdJ+BUX6vnzC8aYce+tPAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUCX5YmMuZ+G68DvTmp9p3EsSmhj0wHwYDVR0j
BBgwFoAUi5uprd6WNXd79Yb9ST4UzTD3xMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFj
M2E0LzAvOEI5QkE5QURERTk2MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2k1dXByZDZXTlhkNzlZYjlTVDRVelRE
M3hNby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAt
ZjZlMC00MTBjLWJjOTktYWYwOTIxZDFjM2E0LzAvMzEzODM4MmUzMTM2MzQyZTMx
MzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC8pJgwDQYJKoZIhvcNAQELBQADggEBADn6xNQB6/W+spu7beCfvnyZE1YPwtVD
xYc2BOywN4vlJ2SvS9yAWL83nVUyvVRioXZmLr857gJDtEVZiIZ+9SsHrbmZLvl6
w3XLRWbRRexyuWM393TQcjMKLfKS0sIPGEYj9Q1Hk4kNxYVCyftURxLqKXpbrZnT
57pfhar24uPlDNZfZFsL9xRQIRJQL+difh3NClWXSE62OWukQryVosGTz1ZN3yC/
YaFbMJeTE4kLJBXk1+jKW0wr8nTMON93OnDg/Hb4V0n6Jk7C3uMf4XRXSObiReKv
hrzMF2LnbkAYg6Cm+3IOUiQ39N0ccbiUx6vauRkgwMQy1vB8O2GQ2Gc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:13:49 2024 by rpki-client on console-ams.rpki-client.org