Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e203232333633.roa
File: 3138352e32392e3136342e302f32342d3234203d3e203232333633.roa (raw, json)
Hash identifier: vA6bdWKdSHjZtVyN2BMAMg6R5IqYbvwRreuS0BHMsUs=
Subject key identifier: EE:66:40:21:51:2F:3E:3E:1E:91:80:FC:8B:0F:CE:AB:1A:3E:72:C5
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 379632C8E16C4D31458D22520A59151AF71D70E1
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e203232333633.roa
Signing time: Mon 02 Sep 2024 06:05:19 +0000
ROA not before: Mon 02 Sep 2024 06:00:19 +0000
ROA not after: Mon 01 Sep 2025 06:05:19 +0000
asID: 22363
IP address blocks: 185.29.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:96:32:c8:e1:6c:4d:31:45:8d:22:52:0a:59:15:1a:f7:1d:70:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 2 06:00:19 2024 GMT
Not After : Sep 1 06:05:19 2025 GMT
Subject: CN=EE664021512F3E3E1E9180FC8B0FCEAB1A3E72C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:6d:49:fe:9d:0a:d2:4e:35:f6:de:b8:38:
68:cb:0a:4b:f3:9a:02:6e:d5:05:27:17:12:d5:34:
28:66:e3:81:af:bb:c8:f2:c8:76:f4:61:32:bf:19:
17:7f:e2:69:b1:fe:b4:f5:62:16:79:55:0b:40:2b:
27:70:49:35:bf:fc:1b:fa:69:3a:d1:7e:1a:b9:2f:
e5:16:02:2c:dc:6a:fc:e2:bd:3c:31:7c:9d:f4:22:
34:2c:70:66:08:3a:5d:93:97:1f:be:37:a4:a3:a4:
00:0b:5a:4b:1a:42:71:17:37:b3:df:6f:e3:5a:67:
fb:b9:73:25:74:49:f6:d2:ca:6c:74:ed:41:16:ed:
58:b2:9b:3c:97:c2:78:8e:22:b8:6f:fb:47:09:e2:
89:4b:85:04:af:68:9c:69:33:5d:03:0a:62:6d:bf:
ac:81:be:d6:42:98:49:1b:f3:2b:fe:bf:31:3a:18:
d4:82:8e:ac:9d:dc:87:1b:16:d5:e4:29:6b:bc:73:
96:e1:91:00:de:57:fd:f4:b5:f1:65:09:88:31:05:
17:f6:56:a3:ee:75:a1:93:25:af:a0:4f:a6:2c:db:
cc:63:6f:76:53:2d:08:71:d7:32:0c:29:5b:66:45:
39:f1:bc:f6:e9:01:74:81:aa:c9:1c:c3:5e:c9:6b:
ce:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:66:40:21:51:2F:3E:3E:1E:91:80:FC:8B:0F:CE:AB:1A:3E:72:C5
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e203232333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.164.0/24
Signature Algorithm: sha256WithRSAEncryption
18:d5:ae:c5:24:44:45:cc:d4:57:42:28:31:b1:cc:a1:c8:8a:
d8:9f:e1:93:6c:93:30:d1:36:b1:6d:84:d0:2b:da:23:f7:cf:
87:85:a4:f1:9a:ca:15:c0:4c:d9:98:fb:74:8f:72:c1:d1:50:
5b:2e:be:2b:cf:73:16:8e:c1:fc:ae:5b:1b:53:af:c8:38:ac:
75:1b:e6:6e:b1:b8:b0:8e:48:87:c2:cb:a3:a8:dc:5d:92:63:
ef:f5:41:87:01:5e:9a:7c:ea:fd:39:c9:51:3b:d3:6f:cf:28:
de:27:0d:ad:48:e4:c0:a3:52:fd:67:e5:53:a1:73:8f:76:59:
dd:b9:94:24:9f:d2:b0:ef:49:fb:16:9b:73:a9:74:be:d8:02:
20:40:b9:37:0e:cd:00:84:41:d6:97:2a:c3:d2:2e:47:03:d4:
f2:99:02:a4:2c:c6:69:65:90:fa:2d:ad:af:2c:87:62:81:a9:
82:1a:71:6c:67:5f:b3:43:34:b6:bb:4b:2c:87:c0:cc:75:30:
e9:5a:69:86:a9:7f:f8:7e:85:8a:ec:a0:37:e8:6c:05:2a:eb:
65:bb:ee:1b:e5:8a:01:df:18:94:97:64:32:c9:cf:8b:84:da:
5b:1d:f5:96:36:a3:93:8b:61:9b:8c:0e:00:2b:18:1d:cc:0e:
35:b7:9b:e8
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUN5YyyOFsTTFFjSJSClkVGvcdcOEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDA5MDIwNjAwMTlaFw0yNTA5MDEwNjA1MTlaMDMxMTAvBgNV
BAMTKEVFNjY0MDIxNTEyRjNFM0UxRTkxODBGQzhCMEZDRUFCMUEzRTcyQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqMW1J/p0K0k419t64OGjLCkvz
mgJu1QUnFxLVNChm44Gvu8jyyHb0YTK/GRd/4mmx/rT1YhZ5VQtAKydwSTW//Bv6
aTrRfhq5L+UWAizcavzivTwxfJ30IjQscGYIOl2Tlx++N6SjpAALWksaQnEXN7Pf
b+NaZ/u5cyV0SfbSymx07UEW7ViymzyXwniOIrhv+0cJ4olLhQSvaJxpM10DCmJt
v6yBvtZCmEkb8yv+vzE6GNSCjqyd3IcbFtXkKWu8c5bhkQDeV/30tfFlCYgxBRf2
VqPudaGTJa+gT6Ys28xjb3ZTLQhx1zIMKVtmRTnxvPbpAXSBqskcw17Ja86pAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU7mZAIVEvPj4ekYD8iw/Oqxo+csUwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzODM1MmUzMjM5MmUzMTM2
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzMzNjMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
uR2kMA0GCSqGSIb3DQEBCwUAA4IBAQAY1a7FJERFzNRXQigxscyhyIrYn+GTbJMw
0TaxbYTQK9oj98+HhaTxmsoVwEzZmPt0j3LB0VBbLr4rz3MWjsH8rlsbU6/IOKx1
G+ZusbiwjkiHwsujqNxdkmPv9UGHAV6afOr9OclRO9NvzyjeJw2tSOTAo1L9Z+VT
oXOPdlnduZQkn9Kw70n7FptzqXS+2AIgQLk3Ds0AhEHWlyrD0i5HA9TymQKkLMZp
ZZD6La2vLIdigamCGnFsZ1+zQzS2u0ssh8DMdTDpWmmGqX/4foWK7KA36GwFKutl
u+4b5YoB3xiUl2Qyyc+LhNpbHfWWNqOTi2GbjA4AKxgdzA41t5vo
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:19:05 2024 by rpki-client on console-fra.rpki-client.org