Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38322e302f32332d3234203d3e20383334.roa
File: 3231332e3133392e38322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: s33mwWq2D5kOFLWhov5D2KJCG2pVbaFzL7G9UmQ///E=
Subject key identifier: 5B:3C:6D:AE:17:51:03:9C:F4:C4:DD:FA:E0:47:18:01:87:F9:9A:A5
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 0995041F7E0669BDF64948FB01AC2B14DBAF44F2
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38322e302f32332d3234203d3e20383334.roa
Signing time: Wed 27 Dec 2023 13:05:08 +0000
ROA not before: Wed 27 Dec 2023 13:00:08 +0000
ROA not after: Wed 25 Dec 2024 13:05:08 +0000
asID: 834
IP address blocks: 213.139.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:95:04:1f:7e:06:69:bd:f6:49:48:fb:01:ac:2b:14:db:af:44:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Dec 27 13:00:08 2023 GMT
Not After : Dec 25 13:05:08 2024 GMT
Subject: CN=5B3C6DAE1751039CF4C4DDFAE047180187F99AA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:d7:4e:89:87:dd:47:14:48:71:bc:8c:8e:
e0:a2:6c:b7:db:8e:06:9e:93:19:d2:d5:dd:a4:50:
58:d7:d9:4d:67:32:c4:e4:55:ab:30:13:30:56:96:
ee:6c:27:b6:58:2d:94:24:4b:42:95:88:f2:07:85:
69:fd:1c:73:16:9f:0a:7c:36:6f:45:5e:5a:03:f8:
99:19:13:b8:7f:35:88:05:da:b0:17:19:cc:7c:e7:
2e:1b:9d:c5:37:50:d9:de:b4:05:d4:b4:fe:f6:bb:
b0:53:ca:0b:b4:62:2c:c4:d0:92:ca:a0:98:fb:f4:
58:f3:f8:4d:c3:7e:46:a6:0c:b8:06:10:3d:ed:8c:
ca:3c:da:a9:98:c5:c3:04:c8:79:34:9e:0c:03:ad:
39:3b:0f:68:71:49:0a:28:97:bb:32:fd:c8:8d:8f:
b2:a0:dc:22:c9:43:62:fd:80:e2:ab:5f:66:46:81:
8e:ca:06:d4:94:29:51:cf:da:0a:b8:c6:db:60:40:
5a:62:d8:86:1d:3f:1f:a5:c4:78:b8:86:fe:37:30:
5a:d9:7c:01:8c:69:0a:0d:56:ae:00:56:6c:b9:5a:
80:5b:b8:f0:c7:92:71:15:e4:8a:7d:44:fa:f9:61:
f5:20:28:3f:4d:7c:88:4f:6e:6e:a5:f9:95:c0:25:
dd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3C:6D:AE:17:51:03:9C:F4:C4:DD:FA:E0:47:18:01:87:F9:9A:A5
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.82.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:95:de:d5:d5:75:79:d9:93:22:c6:c7:b2:e0:82:6b:0e:34:
e4:a5:07:39:bb:95:db:28:a4:e0:b7:0d:b4:77:10:98:bd:75:
f9:d1:80:3f:14:d9:95:39:10:58:9b:0c:7c:8d:c7:5f:5a:eb:
d6:e3:90:35:a4:b7:93:df:6e:a0:2f:52:32:19:68:94:b6:21:
d1:a2:29:c6:84:e3:0d:7f:e1:d9:d2:5a:8e:04:0f:bd:db:4d:
9c:85:39:f7:6e:42:76:34:5b:39:1d:07:b7:06:27:06:fb:a8:
cf:ec:2f:63:7e:47:43:01:9e:63:76:4d:a7:0d:11:d7:ea:4f:
fe:35:25:3e:55:f0:1b:0a:46:a2:37:a0:a1:3d:51:83:c4:2a:
c8:38:d2:2e:af:dd:3e:2d:bf:2c:40:43:6c:ad:ef:7b:30:40:
bf:e5:26:63:37:26:87:64:e0:2d:db:64:33:7d:ad:52:cf:3a:
03:16:b1:9c:28:7d:7b:af:31:b5:01:4d:53:81:c4:e9:dc:9e:
58:40:c2:7a:0e:4f:9e:f9:32:32:a6:9d:82:31:2d:bf:71:18:
3e:37:4d:4d:c5:7e:5c:6f:0b:df:42:c7:76:3b:8d:25:53:ce:
ba:2a:cc:d4:93:87:f8:9a:dc:ef:95:ad:89:eb:c3:69:c5:74:
79:d9:86:08
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUCZUEH34Gab32SUj7AawrFNuvRPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk
NDhjN2QzZTAeFw0yMzEyMjcxMzAwMDhaFw0yNDEyMjUxMzA1MDhaMDMxMTAvBgNV
BAMTKDVCM0M2REFFMTc1MTAzOUNGNEM0RERGQUUwNDcxODAxODdGOTlBQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP3tdOiYfdRxRIcbyMjuCibLfb
jgaekxnS1d2kUFjX2U1nMsTkVaswEzBWlu5sJ7ZYLZQkS0KViPIHhWn9HHMWnwp8
Nm9FXloD+JkZE7h/NYgF2rAXGcx85y4bncU3UNnetAXUtP72u7BTygu0YizE0JLK
oJj79Fjz+E3DfkamDLgGED3tjMo82qmYxcMEyHk0ngwDrTk7D2hxSQool7sy/ciN
j7Kg3CLJQ2L9gOKrX2ZGgY7KBtSUKVHP2gq4xttgQFpi2IYdPx+lxHi4hv43MFrZ
fAGMaQoNVq4AVmy5WoBbuPDHknEV5Ip9RPr5YfUgKD9NfIhPbm6l+ZXAJd39AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUWzxtrhdRA5z0xN364EcYAYf5mqUwHwYDVR0j
BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj
MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT
TWZUNC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt
YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM4
MzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHVi1Iw
DQYJKoZIhvcNAQELBQADggEBAIqV3tXVdXnZkyLGx7LggmsONOSlBzm7ldsopOC3
DbR3EJi9dfnRgD8U2ZU5EFibDHyNx19a69bjkDWkt5PfbqAvUjIZaJS2IdGiKcaE
4w1/4dnSWo4ED73bTZyFOfduQnY0WzkdB7cGJwb7qM/sL2N+R0MBnmN2TacNEdfq
T/41JT5V8BsKRqI3oKE9UYPEKsg40i6v3T4tvyxAQ2yt73swQL/lJmM3Jodk4C3b
ZDN9rVLPOgMWsZwofXuvMbUBTVOBxOncnlhAwnoOT575MjKmnYIxLb9xGD43TU3F
flxvC99Cx3Y7jSVTzroqzNSTh/ia3O+VrYnrw2nFdHnZhgg=
-----END CERTIFICATE-----
Generated at Wed May 1 12:38:26 2024 by rpki-client on console-ams.rpki-client.org