Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/39312e3139392e3132332e302f32342d3234203d3e203630343538.roa
File: 39312e3139392e3132332e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier: hfUQxaMIpRyB1Sc5sYZyFYOi5Cav8i4bnTf5DUfjG9Y=
Subject key identifier: 53:85:D9:64:4B:A5:AE:45:70:BB:30:52:DD:B5:4A:91:A0:E9:CF:11
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 4C9E69511B50107AF74FEFD0EEBB0D0585AE6D13
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/39312e3139392e3132332e302f32342d3234203d3e203630343538.roa
Signing time: Mon 03 Jun 2024 06:05:16 +0000
ROA not before: Mon 03 Jun 2024 06:00:16 +0000
ROA not after: Mon 02 Jun 2025 06:05:16 +0000
asID: 60458
IP address blocks: 91.199.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:9e:69:51:1b:50:10:7a:f7:4f:ef:d0:ee:bb:0d:05:85:ae:6d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Jun 3 06:00:16 2024 GMT
Not After : Jun 2 06:05:16 2025 GMT
Subject: CN=5385D9644BA5AE4570BB3052DDB54A91A0E9CF11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b2:45:d5:0a:4e:28:01:41:c8:26:d1:1a:4d:
d5:0a:c8:62:ad:0d:2d:73:a3:94:54:00:d7:9a:b7:
30:c8:40:fb:95:13:0a:a7:6c:43:e3:97:5f:28:50:
d4:18:63:8b:c1:e9:0b:0e:df:bb:37:1a:a6:9f:f1:
02:1b:fb:58:1b:96:57:6b:16:be:9a:4c:37:8e:5f:
1c:bb:07:78:f0:15:31:71:dd:1f:e0:66:95:89:d4:
18:da:d2:8c:36:bb:70:cf:a9:8f:9e:47:e2:ce:52:
6e:64:d8:a8:ae:9f:62:ac:ec:f5:a8:06:03:8b:f7:
3f:aa:e8:94:ea:4b:ce:36:55:e1:c8:e2:bd:5f:70:
5c:2d:85:fd:0d:07:0f:27:8f:1c:be:9c:9b:76:79:
56:78:bd:c1:f7:fd:ca:be:05:ff:85:19:73:9b:e1:
bc:fe:b2:7f:4b:4a:eb:ac:b1:eb:21:5c:80:c3:be:
15:97:fd:e3:3d:dc:9b:7e:2b:8f:f7:65:f7:1b:95:
66:f6:4b:5f:ce:5d:58:aa:00:d9:69:c5:d3:9f:f5:
f0:c2:4c:1f:35:8c:75:3c:b9:d9:c4:7c:95:a9:fc:
89:4e:7b:29:a9:d3:78:bc:c4:3c:40:b3:fa:41:ec:
81:1b:cf:9a:14:dc:bd:a8:c9:50:62:7d:54:3a:a6:
ac:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:85:D9:64:4B:A5:AE:45:70:BB:30:52:DD:B5:4A:91:A0:E9:CF:11
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/39312e3139392e3132332e302f32342d3234203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.123.0/24
Signature Algorithm: sha256WithRSAEncryption
37:7a:e2:35:ce:6e:f1:5c:39:b0:03:0a:58:45:51:f5:db:6c:
85:ee:7f:45:10:62:17:c1:72:39:bf:3d:ee:a3:21:13:b7:7d:
b8:4d:91:49:84:04:3f:e2:67:34:85:16:bf:d3:83:01:a9:86:
47:4e:7a:c0:97:f1:41:59:51:60:a6:e3:e2:07:d4:ea:22:83:
98:da:19:d0:5b:ba:c0:62:29:2e:0a:f9:99:e4:8b:ec:8d:24:
dc:dc:82:ac:f2:0a:88:ac:74:02:3a:c8:81:b2:a7:7d:80:3c:
2a:6d:ae:9a:38:9a:f3:eb:3c:56:80:cb:13:98:85:e6:4a:02:
14:d1:9a:d2:34:c9:37:26:fe:64:16:da:48:18:95:db:91:cc:
ec:88:52:a9:25:a1:b9:33:e1:77:8b:0c:6c:3b:16:a2:84:f0:
7f:8f:43:ed:1d:ee:a3:89:32:a5:63:56:a9:90:dd:e9:7d:dc:
83:6e:8c:12:c1:63:c6:5f:90:eb:5c:18:71:79:ac:40:5a:a1:
60:39:4c:e7:b4:d0:87:1b:7c:38:f7:fd:be:b0:65:9d:20:57:
05:fd:3a:db:48:3c:48:82:fc:ac:70:68:a5:7f:65:bd:ea:d2:
7e:8c:02:ab:13:70:14:20:fd:f6:0f:9c:80:6a:0f:48:7a:07:
3f:40:27:0a
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUTJ5pURtQEHr3T+/Q7rsNBYWubRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjAxNzBhYmRjOTU1YWExNzZiZTJhZjI2Mjk5Njc4ZjJm
N2M5YWNhMDAeFw0yNDA2MDMwNjAwMTZaFw0yNTA2MDIwNjA1MTZaMDMxMTAvBgNV
BAMTKDUzODVEOTY0NEJBNUFFNDU3MEJCMzA1MkREQjU0QTkxQTBFOUNGMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdskXVCk4oAUHIJtEaTdUKyGKt
DS1zo5RUANeatzDIQPuVEwqnbEPjl18oUNQYY4vB6QsO37s3Gqaf8QIb+1gblldr
Fr6aTDeOXxy7B3jwFTFx3R/gZpWJ1Bja0ow2u3DPqY+eR+LOUm5k2Kiun2Ks7PWo
BgOL9z+q6JTqS842VeHI4r1fcFwthf0NBw8njxy+nJt2eVZ4vcH3/cq+Bf+FGXOb
4bz+sn9LSuusseshXIDDvhWX/eM93Jt+K4/3ZfcblWb2S1/OXViqANlpxdOf9fDC
TB81jHU8udnEfJWp/IlOeymp03i8xDxAs/pB7IEbz5oU3L2oyVBifVQ6pqxRAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUU4XZZEulrkVwuzBS3bVKkaDpzxEwHwYDVR0j
BBgwFoAUsBcKvclVqhdr4q8mKZZ48vfJrKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2E3ODllODctZjQ4NC00MjNkLWExZDctMmMyZDU4NjBk
MmVjLzAvQjAxNzBBQkRDOTU1QUExNzZCRTJBRjI2Mjk5Njc4RjJGN0M5QUNBMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NCY0t2Y2xWcWhkcjRxOG1LWlo0OHZm
SnJLQS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2E3ODllODct
ZjQ4NC00MjNkLWExZDctMmMyZDU4NjBkMmVjLzAvMzkzMTJlMzEzOTM5MmUzMTMy
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzQzNTM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
W8d7MA0GCSqGSIb3DQEBCwUAA4IBAQA3euI1zm7xXDmwAwpYRVH122yF7n9FEGIX
wXI5vz3uoyETt324TZFJhAQ/4mc0hRa/04MBqYZHTnrAl/FBWVFgpuPiB9TqIoOY
2hnQW7rAYikuCvmZ5IvsjSTc3IKs8gqIrHQCOsiBsqd9gDwqba6aOJrz6zxWgMsT
mIXmSgIU0ZrSNMk3Jv5kFtpIGJXbkczsiFKpJaG5M+F3iwxsOxaihPB/j0PtHe6j
iTKlY1apkN3pfdyDbowSwWPGX5DrXBhxeaxAWqFgOUzntNCHG3w49/2+sGWdIFcF
/TrbSDxIgvyscGilf2W96tJ+jAKrE3AUIP32D5yAag9Iegc/QCcK
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:55:50 2024 by rpki-client on console-fra.rpki-client.org