Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3136342e302f32322d3234203d3e203232333633.roa
File: 3137382e3230382e3136342e302f32322d3234203d3e203232333633.roa (raw, json)
Hash identifier: UKHoKQ10lZ3Xve1j/tY4+6fOeVjBw4/ahE2nbdqowok=
Subject key identifier: 47:91:48:A1:DE:F7:CB:37:3E:85:6D:1F:5D:93:1B:81:31:4F:7C:04
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 6DC4DF980483487D2457C7E6FAF657764661E226
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3136342e302f32322d3234203d3e203232333633.roa
Signing time: Mon 02 Sep 2024 06:05:20 +0000
ROA not before: Mon 02 Sep 2024 06:00:20 +0000
ROA not after: Mon 01 Sep 2025 06:05:20 +0000
asID: 22363
IP address blocks: 178.208.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:c4:df:98:04:83:48:7d:24:57:c7:e6:fa:f6:57:76:46:61:e2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 2 06:00:20 2024 GMT
Not After : Sep 1 06:05:20 2025 GMT
Subject: CN=479148A1DEF7CB373E856D1F5D931B81314F7C04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2d:35:d8:a8:2e:fe:25:8d:e9:1a:f0:55:02:
3d:e8:11:ca:a5:34:1d:e8:c8:82:4f:c4:44:27:96:
81:8f:81:a7:01:74:0a:02:05:73:8d:84:0f:90:91:
5c:ce:f0:17:50:b0:d5:45:93:68:e0:3c:ba:0b:22:
90:af:ff:c8:79:92:eb:20:5c:c9:37:96:ca:1b:b1:
bd:03:ff:6a:e0:6f:2e:99:b0:98:9f:71:ac:b9:46:
d9:41:8f:bb:06:e8:d5:8b:8b:b5:1e:fe:77:10:42:
db:9f:e5:43:5c:b6:bc:d3:53:82:26:95:0a:02:22:
b7:ee:fc:d4:44:94:77:5f:6d:85:ca:a4:ab:9a:bd:
c9:ee:6b:90:77:a2:ed:82:eb:da:f1:8a:29:b5:41:
46:01:c4:00:0b:6a:bb:01:84:13:13:4a:ce:ba:7c:
1e:5e:81:41:28:ce:e1:fc:5b:27:e4:9b:d2:01:f8:
c2:e6:ae:f4:df:03:de:06:e5:f0:6e:61:84:60:2c:
fe:7b:1e:f2:83:a2:75:8e:af:6f:6b:20:75:c0:38:
e6:21:45:49:4e:be:02:e0:dd:70:ac:f4:06:88:76:
f3:fd:b7:78:2d:35:5c:31:e7:c8:39:43:7e:59:f9:
a4:71:14:62:0a:7c:a9:ed:5e:c5:44:33:8e:0a:f2:
de:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:91:48:A1:DE:F7:CB:37:3E:85:6D:1F:5D:93:1B:81:31:4F:7C:04
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3136342e302f32322d3234203d3e203232333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.164.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:c3:9d:d3:1a:aa:e6:ee:71:ec:56:01:73:6e:a5:c9:ab:ae:
d9:cb:e1:ce:5e:0c:9e:0c:b3:bb:cf:10:9c:b6:c8:11:1b:56:
56:cd:eb:ce:2f:8a:2f:0b:0f:c0:fd:8c:54:55:84:44:a3:95:
ee:23:ae:f7:8b:92:84:62:f3:f3:fe:95:a7:b3:e2:db:a6:fc:
74:a8:a8:93:c6:9e:b4:ab:8c:a9:e0:7b:15:62:70:d0:dc:ed:
61:4c:c2:c3:d6:da:f6:a4:b7:ff:79:dc:b5:8f:ee:60:b3:99:
5c:55:49:ea:03:81:d9:85:c0:1f:50:79:c1:f5:d9:8e:dd:b2:
3c:73:d3:4c:f1:50:7e:6e:d5:23:f8:0e:5a:39:d3:ec:ad:d1:
34:e5:f1:7d:9a:ec:e7:b7:37:2e:0a:55:80:62:58:e3:1a:c8:
2e:2f:85:4f:da:40:4e:3f:43:ce:87:3f:19:1e:a4:6f:d6:79:
5d:5d:bf:72:ca:aa:31:ad:f6:a1:6b:75:00:de:b9:82:e7:65:
ec:e4:98:8b:33:ce:76:b3:eb:90:e4:7f:12:d1:97:a3:17:7d:
8a:d6:ea:bf:04:c3:31:41:73:73:62:83:1c:d4:4a:16:5d:53:
75:51:11:d8:74:f0:2d:13:0d:56:5c:7f:62:bc:d4:61:44:c5:
a4:e2:78:a5
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUbcTfmASDSH0kV8fm+vZXdkZh4iYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDA5MDIwNjAwMjBaFw0yNTA5MDEwNjA1MjBaMDMxMTAvBgNV
BAMTKDQ3OTE0OEExREVGN0NCMzczRTg1NkQxRjVEOTMxQjgxMzE0RjdDMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGLTXYqC7+JY3pGvBVAj3oEcql
NB3oyIJPxEQnloGPgacBdAoCBXONhA+QkVzO8BdQsNVFk2jgPLoLIpCv/8h5kusg
XMk3lsobsb0D/2rgby6ZsJifcay5RtlBj7sG6NWLi7Ue/ncQQtuf5UNctrzTU4Im
lQoCIrfu/NRElHdfbYXKpKuavcnua5B3ou2C69rxiim1QUYBxAALarsBhBMTSs66
fB5egUEozuH8Wyfkm9IB+MLmrvTfA94G5fBuYYRgLP57HvKDonWOr29rIHXAOOYh
RUlOvgLg3XCs9AaIdvP9t3gtNVwx58g5Q35Z+aRxFGIKfKntXsVEM44K8t5zAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUR5FIod73yzc+hW0fXZMbgTFPfAQwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzNzM4MmUzMjMwMzgyZTMx
MzYzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzIzMzM2MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKy0KQwDQYJKoZIhvcNAQELBQADggEBAKbDndMaqubucexWAXNupcmrrtnL4c5e
DJ4Ms7vPEJy2yBEbVlbN684vii8LD8D9jFRVhESjle4jrveLkoRi8/P+laez4tum
/HSoqJPGnrSrjKngexVicNDc7WFMwsPW2vakt/953LWP7mCzmVxVSeoDgdmFwB9Q
ecH12Y7dsjxz00zxUH5u1SP4Dlo50+yt0TTl8X2a7Oe3Ny4KVYBiWOMayC4vhU/a
QE4/Q86HPxkepG/WeV1dv3LKqjGt9qFrdQDeuYLnZezkmIszznaz65DkfxLRl6MX
fYrW6r8EwzFBc3NigxzUShZdU3VREdh08C0TDVZcf2K81GFExaTieKU=
-----END CERTIFICATE-----
Generated at Mon Nov 25 07:54:59 2024 by rpki-client on console-ams.rpki-client.org