Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233322e302f32332d3233203d3e203530333030.roa
File: 3139332e32342e3233322e302f32332d3233203d3e203530333030.roa (raw, json)
Hash identifier: 0GRRCttIttRIMhB7V0vunXGAKORf14Pml5dL3sloPKI=
Subject key identifier: 31:A1:E7:E8:2E:8F:09:2F:EF:75:0C:1F:68:56:56:50:0F:D1:12:6E
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 1A696C2CD929A592AF6660AFFDCBAC1E8E3929E4
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233322e302f32332d3233203d3e203530333030.roa
Signing time: Mon 07 Oct 2024 11:49:02 +0000
ROA not before: Mon 07 Oct 2024 11:44:02 +0000
ROA not after: Mon 06 Oct 2025 11:49:02 +0000
asID: 50300
IP address blocks: 193.24.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:69:6c:2c:d9:29:a5:92:af:66:60:af:fd:cb:ac:1e:8e:39:29:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Oct 7 11:44:02 2024 GMT
Not After : Oct 6 11:49:02 2025 GMT
Subject: CN=31A1E7E82E8F092FEF750C1F685656500FD1126E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8a:56:02:bb:09:eb:20:67:30:40:29:b1:41:
bd:f6:24:78:8f:f7:b5:d7:7b:78:b6:87:84:34:25:
f3:d0:dd:5c:94:25:d7:67:06:7e:b8:9d:60:9d:c5:
84:13:e4:d2:10:21:da:60:6d:5b:4b:f2:82:55:e9:
18:8e:15:99:fb:48:01:a7:fa:7f:ce:0a:d0:2f:01:
3e:11:36:64:88:c1:60:b8:0b:8a:45:f4:04:d0:e4:
b3:95:ff:29:2f:cd:86:93:d1:3b:07:cf:da:1c:f8:
b1:73:3f:ea:71:a8:65:63:e4:55:18:1b:61:ba:ce:
7a:c7:6d:a0:9b:e7:9b:2b:d5:17:8b:b8:fc:2c:e1:
ad:ac:ae:ae:19:cc:ff:b2:3b:5b:87:88:68:9f:3d:
58:fb:2c:dc:ee:01:6e:7c:e0:b4:72:5c:d9:97:e9:
51:84:77:4d:a5:bb:99:93:60:02:b3:8f:49:a6:7d:
34:dd:a8:da:b1:e1:7b:43:a3:3c:67:34:ad:b2:fd:
8c:ed:8a:36:b0:d3:61:78:d5:d6:8e:7c:cc:ea:e4:
6d:4d:ad:f4:9c:54:d1:2c:28:57:d7:08:c6:fc:df:
8e:63:4b:26:5b:49:f2:99:b0:be:e6:0c:60:c7:2e:
f8:f8:fa:5b:82:d8:31:06:23:02:dc:24:d2:12:e1:
13:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A1:E7:E8:2E:8F:09:2F:EF:75:0C:1F:68:56:56:50:0F:D1:12:6E
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233322e302f32332d3233203d3e203530333030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.232.0/23
Signature Algorithm: sha256WithRSAEncryption
31:5d:48:ea:20:56:81:23:53:12:3c:f0:b8:c0:6b:cd:00:0a:
db:09:c5:cc:77:a8:bf:b3:80:d4:90:bd:31:a9:6b:c3:32:39:
f7:90:6d:14:62:61:26:28:fd:a8:d0:91:01:84:ec:a0:e7:28:
58:a2:6b:ad:21:93:65:19:40:e6:34:a4:58:1f:82:40:fa:01:
25:ee:f7:f3:02:e8:56:16:f3:19:f1:f4:ce:96:15:48:9a:85:
bd:f1:a5:a2:dc:10:f8:70:fe:98:b2:2a:4d:79:55:0c:38:6b:
d9:59:a7:04:f7:7b:d6:41:89:c7:18:1d:9d:b7:3f:69:e3:f4:
24:88:6b:7d:bf:8b:5c:9e:b5:75:f8:7f:32:23:a1:7b:44:92:
64:49:f2:37:69:6b:fb:4b:d5:ba:5c:f5:4c:d7:a0:d6:f1:8d:
77:7b:c3:3b:0b:f9:55:6c:d6:23:79:21:ff:53:40:18:5f:de:
5c:ed:69:7d:99:32:16:9b:22:dc:d1:8d:07:6d:e3:06:c1:8c:
fd:af:20:8e:0b:1d:20:72:36:e1:53:84:b4:3c:de:d0:79:b4:
8b:17:62:b3:50:8a:cb:a7:21:52:3d:c6:3c:b1:e7:dd:3a:c6:
ac:52:da:3e:73:c0:20:60:65:be:13:c4:e8:09:e9:63:67:41:
ce:73:84:1e
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUGmlsLNkppZKvZmCv/cusHo45KeQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGMxMmI0MjczODMyYjQxNTZmZTAwOTJmNmFlN2U1YjNj
ZTIzYWQ4YjAeFw0yNDEwMDcxMTQ0MDJaFw0yNTEwMDYxMTQ5MDJaMDMxMTAvBgNV
BAMTKDMxQTFFN0U4MkU4RjA5MkZFRjc1MEMxRjY4NTY1NjUwMEZEMTEyNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZilYCuwnrIGcwQCmxQb32JHiP
97XXe3i2h4Q0JfPQ3VyUJddnBn64nWCdxYQT5NIQIdpgbVtL8oJV6RiOFZn7SAGn
+n/OCtAvAT4RNmSIwWC4C4pF9ATQ5LOV/ykvzYaT0TsHz9oc+LFzP+pxqGVj5FUY
G2G6znrHbaCb55sr1ReLuPws4a2srq4ZzP+yO1uHiGifPVj7LNzuAW584LRyXNmX
6VGEd02lu5mTYAKzj0mmfTTdqNqx4XtDozxnNK2y/Yztijaw02F41daOfMzq5G1N
rfScVNEsKFfXCMb8345jSyZbSfKZsL7mDGDHLvj4+luC2DEGIwLcJNIS4RPBAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUMaHn6C6PCS/vdQwfaFZWUA/REm4wHwYDVR0j
BBgwFoAUjBK0JzgytBVv4Akvaufls84jrYswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGJmZDY4ODItZDZiMy00YWE4LWJjMGEtNzExZDY4YmQx
OThiLzAvOEMxMkI0MjczODMyQjQxNTZGRTAwOTJGNkFFN0U1QjNDRTIzQUQ4Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pCSzBKemd5dEJWdjRBa3ZhdWZsczg0
anJZcy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGJmZDY4ODIt
ZDZiMy00YWE4LWJjMGEtNzExZDY4YmQxOThiLzAvMzEzOTMzMmUzMjM0MmUzMjMz
MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMwMzMzMDMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
wRjoMA0GCSqGSIb3DQEBCwUAA4IBAQAxXUjqIFaBI1MSPPC4wGvNAArbCcXMd6i/
s4DUkL0xqWvDMjn3kG0UYmEmKP2o0JEBhOyg5yhYomutIZNlGUDmNKRYH4JA+gEl
7vfzAuhWFvMZ8fTOlhVImoW98aWi3BD4cP6YsipNeVUMOGvZWacE93vWQYnHGB2d
tz9p4/QkiGt9v4tcnrV1+H8yI6F7RJJkSfI3aWv7S9W6XPVM16DW8Y13e8M7C/lV
bNYjeSH/U0AYX95c7Wl9mTIWmyLc0Y0HbeMGwYz9ryCOCx0gcjbhU4S0PN7QebSL
F2KzUIrLpyFSPcY8sefdOsasUto+c8AgYGW+E8ToCeljZ0HOc4Qe
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:59:02 2024 by rpki-client on console-ams.rpki-client.org