Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/39312e3139392e3132332e302f32342d3234203d3e203630343538.roa
File: 39312e3139392e3132332e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier: RDLBnVfcKJFev6UtB1aGW3Obvn1CnQSdMFMYBpY/9Mc=
Subject key identifier: 78:05:AC:66:D7:E8:F7:53:E7:71:6A:D0:22:45:43:EC:6F:CF:4E:7D
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 38746F04FAFA51ED46A60317A3181F2A5ABEF97D
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/39312e3139392e3132332e302f32342d3234203d3e203630343538.roa
Signing time: Mon 03 Jul 2023 05:42:01 +0000
ROA not before: Mon 03 Jul 2023 05:37:01 +0000
ROA not after: Mon 01 Jul 2024 05:42:01 +0000
asID: 60458
IP address blocks: 91.199.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:74:6f:04:fa:fa:51:ed:46:a6:03:17:a3:18:1f:2a:5a:be:f9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Jul 3 05:37:01 2023 GMT
Not After : Jul 1 05:42:01 2024 GMT
Subject: CN=7805AC66D7E8F753E7716AD0224543EC6FCF4E7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a0:ef:28:cf:97:a6:a1:51:f5:1a:cb:47:2b:
7c:96:55:38:e7:4d:dd:78:1a:ec:fd:e1:6f:96:bc:
2c:69:20:4c:83:41:20:09:cc:b5:61:e4:cd:7a:21:
89:f1:37:66:46:db:bb:18:f3:81:06:49:4f:50:b7:
b6:c4:7c:d1:0d:0c:c3:97:8d:bb:73:ac:a8:ae:e3:
c7:95:86:b4:65:2c:cd:b6:ae:ed:54:8c:8b:8e:50:
46:45:ec:f6:00:9f:b9:66:0d:4b:44:ce:d1:88:7b:
e9:39:6b:61:5d:d4:a9:e4:9d:b9:9f:bd:b7:e0:ca:
bb:57:db:a4:c2:0f:47:e0:f5:05:2e:85:ed:57:e9:
95:b1:cc:68:a5:09:22:fe:74:d2:9a:d1:e2:00:cd:
7e:49:9e:d1:f8:38:f7:a0:14:02:1a:2e:16:6b:1a:
0d:9f:70:b0:8a:c2:c2:28:68:06:50:c5:be:78:59:
c5:f3:6f:dd:b4:cf:84:d3:9b:84:45:49:a7:cb:9a:
ae:36:ae:cd:1d:b3:c9:97:33:78:d9:32:55:92:dd:
ba:ef:ab:b9:5f:e9:ef:2d:1a:7d:aa:d5:5f:a4:17:
fe:f9:b2:2e:7b:a6:a8:34:04:07:42:a4:fa:25:b9:
3f:2d:71:bb:e2:3e:c3:f3:02:31:35:7e:04:2d:38:
59:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:05:AC:66:D7:E8:F7:53:E7:71:6A:D0:22:45:43:EC:6F:CF:4E:7D
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/39312e3139392e3132332e302f32342d3234203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.123.0/24
Signature Algorithm: sha256WithRSAEncryption
92:fc:b6:48:7a:db:2f:69:20:c8:79:1d:b6:88:bb:94:40:af:
d1:fd:5a:5d:79:89:bf:b1:ac:08:70:4b:6e:77:20:64:42:7d:
9f:68:1b:2d:b2:f2:63:f8:8a:8e:60:6b:33:82:3d:0b:2b:25:
0a:ac:e4:05:b1:7a:05:11:7a:45:fb:29:93:48:25:59:ea:6d:
ea:d6:bc:89:db:d5:fc:c8:f6:fa:71:d4:aa:47:6b:a1:66:ea:
66:0c:f8:c6:af:d9:3d:68:aa:fd:37:a1:8f:d3:61:90:2e:7c:
73:53:ca:80:fa:cd:0b:a4:89:c9:58:4e:a1:56:b5:cd:59:fc:
56:83:ba:e8:4a:5d:00:6a:a6:50:b4:65:8c:51:be:a3:fd:da:
d4:3d:ea:57:ff:10:ac:92:f0:9a:ca:c2:88:52:e8:1d:2e:60:
44:a8:19:f8:91:43:36:7d:94:bb:5a:1f:66:f8:bc:9c:a8:68:
d9:09:97:41:8f:1d:28:93:d4:7e:9a:95:8b:c0:26:da:3b:c2:
4f:82:83:39:bb:6f:7a:09:5d:5d:4a:15:af:06:c9:91:7d:58:
e2:2c:17:21:82:49:b7:31:52:fa:23:36:23:38:d9:d6:65:39:
77:1e:18:21:dd:da:12:40:a2:df:75:db:f2:4a:d9:d8:ea:4f:
a9:bd:13:3b
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUOHRvBPr6Ue1GpgMXoxgfKlq++X0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjAxNzBhYmRjOTU1YWExNzZiZTJhZjI2Mjk5Njc4ZjJm
N2M5YWNhMDAeFw0yMzA3MDMwNTM3MDFaFw0yNDA3MDEwNTQyMDFaMDMxMTAvBgNV
BAMTKDc4MDVBQzY2RDdFOEY3NTNFNzcxNkFEMDIyNDU0M0VDNkZDRjRFN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLoO8oz5emoVH1GstHK3yWVTjn
Td14Guz94W+WvCxpIEyDQSAJzLVh5M16IYnxN2ZG27sY84EGSU9Qt7bEfNENDMOX
jbtzrKiu48eVhrRlLM22ru1UjIuOUEZF7PYAn7lmDUtEztGIe+k5a2Fd1Knknbmf
vbfgyrtX26TCD0fg9QUuhe1X6ZWxzGilCSL+dNKa0eIAzX5JntH4OPegFAIaLhZr
Gg2fcLCKwsIoaAZQxb54WcXzb920z4TTm4RFSafLmq42rs0ds8mXM3jZMlWS3brv
q7lf6e8tGn2q1V+kF/75si57pqg0BAdCpPoluT8tcbviPsPzAjE1fgQtOFkjAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUeAWsZtfo91PncWrQIkVD7G/PTn0wHwYDVR0j
BBgwFoAUsBcKvclVqhdr4q8mKZZ48vfJrKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2E3ODllODctZjQ4NC00MjNkLWExZDctMmMyZDU4NjBk
MmVjLzAvQjAxNzBBQkRDOTU1QUExNzZCRTJBRjI2Mjk5Njc4RjJGN0M5QUNBMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NCY0t2Y2xWcWhkcjRxOG1LWlo0OHZm
SnJLQS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2E3ODllODct
ZjQ4NC00MjNkLWExZDctMmMyZDU4NjBkMmVjLzAvMzkzMTJlMzEzOTM5MmUzMTMy
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzQzNTM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
W8d7MA0GCSqGSIb3DQEBCwUAA4IBAQCS/LZIetsvaSDIeR22iLuUQK/R/VpdeYm/
sawIcEtudyBkQn2faBstsvJj+IqOYGszgj0LKyUKrOQFsXoFEXpF+ymTSCVZ6m3q
1ryJ29X8yPb6cdSqR2uhZupmDPjGr9k9aKr9N6GP02GQLnxzU8qA+s0LpInJWE6h
VrXNWfxWg7roSl0AaqZQtGWMUb6j/drUPepX/xCskvCaysKIUugdLmBEqBn4kUM2
fZS7Wh9m+LycqGjZCZdBjx0ok9R+mpWLwCbaO8JPgoM5u296CV1dShWvBsmRfVji
LBchgkm3MVL6IzYjONnWZTl3Hhgh3doSQKLfddvyStnY6k+pvRM7
-----END CERTIFICATE-----
Generated at Mon May 6 01:08:53 2024 by rpki-client on console-fra.rpki-client.org