Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32342d3234203d3e203634323637.roa
File: 3130392e3131302e3137362e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier: V+0pTrhYREJWSwDo5NL8W6hFXFew/Ddah5A/WJNvblM=
Subject key identifier: 6C:C9:A4:98:D0:3A:8F:C9:9F:02:FA:98:AA:EB:FF:9D:D7:F2:44:E8
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 096AE58D4A5F6A138EC6D6EC1ECD233A0C9731C2
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32342d3234203d3e203634323637.roa
Signing time: Tue 20 Aug 2024 05:19:34 +0000
ROA not before: Tue 20 Aug 2024 05:14:34 +0000
ROA not after: Tue 19 Aug 2025 05:19:34 +0000
asID: 64267
IP address blocks: 109.110.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:6a:e5:8d:4a:5f:6a:13:8e:c6:d6:ec:1e:cd:23:3a:0c:97:31:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Aug 20 05:14:34 2024 GMT
Not After : Aug 19 05:19:34 2025 GMT
Subject: CN=6CC9A498D03A8FC99F02FA98AAEBFF9DD7F244E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:c2:a8:de:b4:2c:63:4f:81:d4:0a:3b:8c:
f7:d9:05:2f:ab:92:96:ef:e9:71:c7:f0:3c:3c:ec:
95:ac:e7:89:ac:9c:07:ac:ee:58:81:87:8f:ac:9a:
b5:b6:2e:8c:a3:f1:a1:a6:a4:88:77:1a:38:fe:a5:
c1:a5:8b:e6:37:ea:f4:9e:44:06:fe:98:d7:b9:5f:
ab:ac:01:71:dc:b6:e0:b7:6a:0c:4c:91:0a:73:0d:
ab:0f:90:1e:97:f7:20:41:bb:73:4b:60:e4:30:32:
2c:86:81:88:1c:76:e7:d4:fe:02:e4:c8:70:d0:b9:
91:f6:76:b5:8f:27:cc:1c:1d:d1:8f:47:ca:c5:30:
93:f9:76:59:14:aa:2a:0a:07:37:5c:9b:0f:5c:cf:
34:76:96:d8:16:17:e2:98:0a:7c:2a:bb:6d:4e:ae:
c5:8c:00:f1:e2:6b:30:2d:f3:3c:15:a0:24:3f:88:
3f:93:b8:84:80:32:e1:2d:ea:65:c2:49:de:4f:34:
a8:77:79:77:07:13:59:ae:79:f9:b9:cb:3d:1b:9e:
fb:6d:3e:f5:a6:f5:bd:5e:aa:d5:75:97:b9:df:b1:
6e:12:fa:ab:3d:51:56:1f:8d:fa:80:24:0e:2d:95:
8c:bc:89:55:5c:4a:b4:0a:7f:2e:bf:5f:5a:5b:29:
90:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C9:A4:98:D0:3A:8F:C9:9F:02:FA:98:AA:EB:FF:9D:D7:F2:44:E8
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32342d3234203d3e203634323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.176.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ae:e5:76:5a:57:34:65:16:e4:d7:95:a2:3f:c5:ba:26:02:
87:c7:95:02:f9:18:e0:13:a2:f8:f7:51:1e:4a:b6:c3:88:5f:
e5:f3:46:c4:2c:03:56:e2:a8:b1:29:63:ec:a5:aa:26:fd:0b:
5d:7f:a3:7e:b4:49:0e:b3:82:4d:0b:d8:f1:49:f9:53:db:e9:
a2:c9:9f:43:97:59:33:0d:b0:cd:96:8a:e2:81:78:ba:bf:4b:
ce:c3:db:bf:64:3b:3f:eb:35:16:63:ca:5b:c6:eb:46:72:59:
ff:b4:52:53:6b:ad:5d:14:07:1d:20:de:5c:aa:00:83:88:0c:
2f:fe:74:0e:02:3d:43:10:6e:0a:7a:c7:52:12:c0:ab:c0:74:
40:90:b4:49:bd:f9:44:89:3d:23:6c:ad:8e:32:ce:a2:81:ad:
ac:84:05:d3:d9:aa:8c:5b:bc:2c:4a:d6:8c:5a:15:e5:a4:af:
eb:96:94:e5:ec:f5:a3:d9:94:c2:7e:6e:0f:3d:d9:bb:b7:c5:
f0:d8:b6:e2:1a:6d:c4:f0:85:79:95:54:ea:2f:5a:b7:ea:e2:
48:75:3c:52:39:14:da:b0:0e:29:4a:ad:a4:5f:98:47:71:8c:
44:91:97:49:56:8b:4d:b1:fe:a3:59:6d:10:f9:ef:a4:58:f5:
b3:df:95:b7
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUCWrljUpfahOOxtbsHs0jOgyXMcIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNDA4MjAwNTE0MzRaFw0yNTA4MTkwNTE5MzRaMDMxMTAvBgNV
BAMTKDZDQzlBNDk4RDAzQThGQzk5RjAyRkE5OEFBRUJGRjlERDdGMjQ0RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8LMKo3rQsY0+B1Ao7jPfZBS+r
kpbv6XHH8Dw87JWs54msnAes7liBh4+smrW2Loyj8aGmpIh3Gjj+pcGli+Y36vSe
RAb+mNe5X6usAXHctuC3agxMkQpzDasPkB6X9yBBu3NLYOQwMiyGgYgcdufU/gLk
yHDQuZH2drWPJ8wcHdGPR8rFMJP5dlkUqioKBzdcmw9czzR2ltgWF+KYCnwqu21O
rsWMAPHiazAt8zwVoCQ/iD+TuISAMuEt6mXCSd5PNKh3eXcHE1muefm5yz0bnvtt
PvWm9b1eqtV1l7nfsW4S+qs9UVYfjfqAJA4tlYy8iVVcSrQKfy6/X1pbKZBpAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUbMmkmNA6j8mfAvqYquv/ndfyROgwHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzczNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzQzMjM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABtbrAwDQYJKoZIhvcNAQELBQADggEBAEuu5XZaVzRlFuTXlaI/xbomAofHlQL5
GOATovj3UR5KtsOIX+XzRsQsA1biqLEpY+ylqib9C11/o360SQ6zgk0L2PFJ+VPb
6aLJn0OXWTMNsM2WiuKBeLq/S87D279kOz/rNRZjylvG60ZyWf+0UlNrrV0UBx0g
3lyqAIOIDC/+dA4CPUMQbgp6x1ISwKvAdECQtEm9+USJPSNsrY4yzqKBrayEBdPZ
qoxbvCxK1oxaFeWkr+uWlOXs9aPZlMJ+bg892bu3xfDYtuIabcTwhXmVVOovWrfq
4kh1PFI5FNqwDilKraRfmEdxjESRl0lWi02x/qNZbRD576RY9bPflbc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org