Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137332e302f32342d3234203d3e20323135303335.roa
File: 3130392e3131302e3137332e302f32342d3234203d3e20323135303335.roa (raw, json)
Hash identifier: aqQYjm8ggikcxWdWH0oviTXErhnca+LOUaRCG9DrN5s=
Subject key identifier: 8A:CF:FC:0B:11:A1:3D:32:35:8A:63:FC:A1:AE:9E:4C:82:F3:A2:BB
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 25A5AE3F3555F8574375BEE3DEC8C26AAF7405EC
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137332e302f32342d3234203d3e20323135303335.roa
Signing time: Fri 01 Nov 2024 15:37:03 +0000
ROA not before: Fri 01 Nov 2024 15:32:03 +0000
ROA not after: Fri 31 Oct 2025 15:37:03 +0000
asID: 215035
IP address blocks: 109.110.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:a5:ae:3f:35:55:f8:57:43:75:be:e3:de:c8:c2:6a:af:74:05:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Nov 1 15:32:03 2024 GMT
Not After : Oct 31 15:37:03 2025 GMT
Subject: CN=8ACFFC0B11A13D32358A63FCA1AE9E4C82F3A2BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9c:d3:14:5a:cc:a6:dd:46:3b:e5:82:e4:cc:
6e:45:03:31:b2:91:84:ea:01:05:ef:6f:fb:6c:13:
32:de:4f:c9:7e:3b:81:9a:80:a7:c8:84:35:5c:de:
bf:93:ca:40:50:e2:73:20:c1:74:6e:38:b6:df:95:
4b:6c:6d:ae:8f:9a:ac:b3:22:94:b7:5c:12:a3:fd:
a4:fc:ac:c0:17:a9:80:e7:40:0b:af:4d:7a:25:dc:
ad:eb:63:c3:f4:87:27:f3:99:55:cc:37:c6:15:3c:
c7:b9:bc:c0:83:b7:ea:0d:1f:94:24:cf:0b:af:5a:
6a:42:46:32:6d:50:e1:5f:1f:96:00:1d:cc:98:22:
0a:76:6b:64:d2:7c:63:a2:80:d9:31:71:ee:fa:e8:
87:81:34:49:20:ad:26:78:f9:8c:73:ab:eb:ed:93:
e8:61:07:07:aa:ce:a0:73:1c:48:cd:f9:e7:7d:67:
6d:c9:f1:47:7c:ae:e1:39:12:76:e4:9d:dd:5a:bc:
90:34:55:c0:eb:f5:f7:38:a7:bc:05:4f:a2:93:82:
61:e2:7c:bc:db:b2:47:d6:11:59:c7:37:fc:7f:b7:
85:43:3d:30:3f:60:df:b1:63:c0:ab:77:42:73:49:
60:d6:d1:fc:69:e6:ee:55:53:81:c4:97:53:3b:9d:
cb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CF:FC:0B:11:A1:3D:32:35:8A:63:FC:A1:AE:9E:4C:82:F3:A2:BB
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137332e302f32342d3234203d3e20323135303335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.173.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:f5:d0:22:e0:87:7f:54:dc:df:74:51:73:97:00:7f:0f:b1:
24:70:0a:21:92:0d:d5:43:af:b6:73:09:86:67:84:29:43:48:
d2:4c:b0:14:e2:35:90:91:ed:e9:eb:09:34:61:2f:33:5d:ed:
ab:81:b8:d3:e6:28:91:90:4e:9e:b0:db:01:e7:05:9d:be:a8:
50:4e:8e:9f:1a:ff:e3:5d:c1:c8:5c:f5:ce:62:82:d2:d3:a7:
47:a8:87:b3:ce:5a:a7:43:4e:0c:d4:89:7e:4f:75:98:ab:e2:
40:ff:4b:e9:e2:33:06:31:ef:b1:ec:2f:59:b8:d5:3a:6b:a6:
d2:b8:79:9e:c0:31:f9:68:7b:5b:ce:a5:11:67:06:07:81:06:
22:45:79:53:91:bb:7e:46:9a:ce:f3:95:60:4e:84:ad:a2:4f:
33:e3:3c:42:bc:c7:c6:e3:8b:40:9c:30:ed:91:9b:3d:3e:9d:
0a:52:68:a2:bb:ea:13:ff:06:cd:43:28:de:80:32:c2:6b:b9:
6a:5d:14:56:10:92:eb:03:a6:a9:a6:93:8e:59:0d:2d:a8:86:
7d:9f:c5:4e:56:dd:4d:90:46:39:ab:76:4a:8e:ab:67:d6:c1:
02:2c:ac:88:8a:64:47:d1:8b:3f:48:ba:6c:a8:8c:fd:5c:f0:
be:69:88:eb
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUJaWuPzVV+FdDdb7j3sjCaq90BewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNDExMDExNTMyMDNaFw0yNTEwMzExNTM3MDNaMDMxMTAvBgNV
BAMTKDhBQ0ZGQzBCMTFBMTNEMzIzNThBNjNGQ0ExQUU5RTRDODJGM0EyQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPnNMUWsym3UY75YLkzG5FAzGy
kYTqAQXvb/tsEzLeT8l+O4GagKfIhDVc3r+TykBQ4nMgwXRuOLbflUtsba6Pmqyz
IpS3XBKj/aT8rMAXqYDnQAuvTXol3K3rY8P0hyfzmVXMN8YVPMe5vMCDt+oNH5Qk
zwuvWmpCRjJtUOFfH5YAHcyYIgp2a2TSfGOigNkxce766IeBNEkgrSZ4+Yxzq+vt
k+hhBweqzqBzHEjN+ed9Z23J8Ud8ruE5Enbknd1avJA0VcDr9fc4p7wFT6KTgmHi
fLzbskfWEVnHN/x/t4VDPTA/YN+xY8Crd0JzSWDW0fxp5u5VU4HEl1M7ncs9AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUis/8CxGhPTI1imP8oa6eTILzorswHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzczMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNTMwMzMzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAG1urTANBgkqhkiG9w0BAQsFAAOCAQEAnfXQIuCHf1Tc33RRc5cAfw+xJHAK
IZIN1UOvtnMJhmeEKUNI0kywFOI1kJHt6esJNGEvM13tq4G40+YokZBOnrDbAecF
nb6oUE6Onxr/413ByFz1zmKC0tOnR6iHs85ap0NODNSJfk91mKviQP9L6eIzBjHv
sewvWbjVOmum0rh5nsAx+Wh7W86lEWcGB4EGIkV5U5G7fkaazvOVYE6EraJPM+M8
QrzHxuOLQJww7ZGbPT6dClJoorvqE/8GzUMo3oAywmu5al0UVhCS6wOmqaaTjlkN
LaiGfZ/FTlbdTZBGOat2So6rZ9bBAiysiIpkR9GLP0i6bKiM/VzwvmmI6w==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:58:16 2024 by rpki-client on console-ams.rpki-client.org