Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa
File: 3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa (raw, json)
Hash identifier: qcqTb3VE7m+UGKYwU3pX6Cz4rtaboRvLfOlujiKOavY=
Subject key identifier: C1:31:00:C8:22:DE:93:EA:AA:7B:50:D6:3F:59:B3:6C:43:79:5A:23
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 034C71D42D68B987D82F717AA1005B927FCFFEA3
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa
Signing time: Sun 18 Aug 2024 13:03:40 +0000
ROA not before: Sun 18 Aug 2024 12:58:40 +0000
ROA not after: Sun 17 Aug 2025 13:03:40 +0000
asID: 206446
IP address blocks: 213.139.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:4c:71:d4:2d:68:b9:87:d8:2f:71:7a:a1:00:5b:92:7f:cf:fe:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Aug 18 12:58:40 2024 GMT
Not After : Aug 17 13:03:40 2025 GMT
Subject: CN=C13100C822DE93EAAA7B50D63F59B36C43795A23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:d3:ab:6d:f0:27:13:e6:21:19:2d:48:18:
ae:33:02:36:c4:ca:03:8a:cf:5c:d0:5e:44:88:29:
5f:5b:d2:e2:b9:e7:0e:41:4c:4f:39:0b:4d:86:aa:
5e:6d:0e:67:5c:a1:7c:5a:9b:77:ea:42:2f:8c:41:
32:6b:0f:95:fd:60:e3:62:96:b0:14:76:85:be:16:
c4:30:1b:0c:a7:5a:81:d6:11:dd:0f:c9:ee:23:69:
c6:45:9f:f6:42:0c:7c:b2:2e:df:e1:26:d1:1e:91:
13:b2:fa:a3:a8:fc:a5:c3:c9:ef:49:ed:92:9e:c0:
67:83:cf:16:cd:fa:5b:09:7b:ed:1b:1a:9e:88:ed:
cd:f5:52:c1:19:be:73:2d:74:c1:3f:f1:a3:ef:b3:
d3:dc:f3:66:55:4e:5b:07:11:29:67:7a:f0:6d:49:
c4:b3:79:56:87:15:38:01:03:72:81:59:47:89:0e:
d8:ec:e4:ec:d8:ea:a6:61:76:d3:b3:bc:81:84:53:
0d:3e:94:a3:9f:91:0e:37:7b:dc:3f:94:ee:dd:d5:
8d:63:53:1e:7d:70:20:d1:98:6f:32:ba:7f:ee:0d:
aa:0a:09:f4:97:23:de:55:1b:c5:e3:48:42:56:f1:
1c:3a:b8:f4:e7:4e:7a:46:39:50:32:7e:1a:ba:6d:
bc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:31:00:C8:22:DE:93:EA:AA:7B:50:D6:3F:59:B3:6C:43:79:5A:23
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.78.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:2a:de:53:00:06:f0:86:f8:4a:b7:10:9b:12:86:1c:43:f1:
00:d9:a2:71:e7:c0:a1:17:0a:47:ac:83:f7:84:22:29:71:17:
7b:b1:9a:cc:ad:5e:07:71:7a:ab:d0:a8:36:1b:09:96:aa:de:
1f:e3:59:0e:6f:74:ea:bd:26:d4:b2:73:e0:11:3f:b1:7d:93:
df:52:38:ad:f9:98:8d:e1:59:e3:35:ca:d0:f4:c0:aa:aa:36:
18:98:79:06:ed:90:55:be:89:3f:db:16:b3:58:44:50:89:6c:
ff:dd:ff:0b:7e:ff:3c:4c:9f:76:61:2a:35:38:6a:ac:81:d8:
bf:e6:f7:32:6f:29:74:98:de:b4:70:07:51:1d:bc:d5:51:cf:
96:d4:10:e5:41:99:e2:9b:f3:d3:16:04:fc:d0:8e:53:df:3a:
94:15:e4:53:cb:e5:12:05:31:66:04:4a:8a:56:0e:6d:a2:ac:
34:1d:0c:48:fd:78:d9:a0:aa:c0:24:45:70:8b:12:10:23:f5:
9b:f0:8f:8d:07:71:79:6a:40:6b:ad:1a:d5:02:19:1d:61:7d:
ce:bd:33:10:02:a4:ec:65:f2:27:95:34:f5:2e:9f:18:b9:cd:
ce:e8:ee:26:cf:a1:cd:ed:27:5a:95:2b:c1:f4:d3:54:29:a1:
5c:d3:a6:c0
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUA0xx1C1ouYfYL3F6oQBbkn/P/qMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk
NDhjN2QzZTAeFw0yNDA4MTgxMjU4NDBaFw0yNTA4MTcxMzAzNDBaMDMxMTAvBgNV
BAMTKEMxMzEwMEM4MjJERTkzRUFBQTdCNTBENjNGNTlCMzZDNDM3OTVBMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzztOrbfAnE+YhGS1IGK4zAjbE
ygOKz1zQXkSIKV9b0uK55w5BTE85C02Gql5tDmdcoXxam3fqQi+MQTJrD5X9YONi
lrAUdoW+FsQwGwynWoHWEd0Pye4jacZFn/ZCDHyyLt/hJtEekROy+qOo/KXDye9J
7ZKewGeDzxbN+lsJe+0bGp6I7c31UsEZvnMtdME/8aPvs9Pc82ZVTlsHESlnevBt
ScSzeVaHFTgBA3KBWUeJDtjs5OzY6qZhdtOzvIGEUw0+lKOfkQ43e9w/lO7d1Y1j
Ux59cCDRmG8yun/uDaoKCfSXI95VG8XjSEJW8Rw6uPTnTnpGOVAyfhq6bbybAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUwTEAyCLek+qqe1DWP1mzbEN5WiMwHwYDVR0j
BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj
MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT
TWZUNC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt
YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM3
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzYzNDM0MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADVi04wDQYJKoZIhvcNAQELBQADggEBACsq3lMABvCG+Eq3EJsShhxD8QDZonHn
wKEXCkesg/eEIilxF3uxmsytXgdxeqvQqDYbCZaq3h/jWQ5vdOq9JtSyc+ARP7F9
k99SOK35mI3hWeM1ytD0wKqqNhiYeQbtkFW+iT/bFrNYRFCJbP/d/wt+/zxMn3Zh
KjU4aqyB2L/m9zJvKXSY3rRwB1EdvNVRz5bUEOVBmeKb89MWBPzQjlPfOpQV5FPL
5RIFMWYESopWDm2irDQdDEj9eNmgqsAkRXCLEhAj9Zvwj40HcXlqQGutGtUCGR1h
fc69MxACpOxl8ieVNPUunxi5zc7o7ibPoc3tJ1qVK8H001QpoVzTpsA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:40:00 2024 by rpki-client on console-ams.rpki-client.org