Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135352e302f32342d3234203d3e203230343733.roa
File: 3139332e39332e3135352e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: Yia13ZpyH/rxCHPO1ZKxkaJKT40u4xmMRfCLnQCmpaw=
Subject key identifier: DD:EE:15:CB:A3:D2:47:16:2E:45:85:7F:93:96:DA:02:21:71:87:EB
Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Certificate serial: 5C080FAB042C377F060ADD9456C0F2A95EA4174C
Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135352e302f32342d3234203d3e203230343733.roa
Signing time: Tue 03 Sep 2024 07:23:50 +0000
ROA not before: Tue 03 Sep 2024 07:18:50 +0000
ROA not after: Tue 02 Sep 2025 07:23:50 +0000
asID: 20473
IP address blocks: 193.93.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft
rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 00:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:08:0f:ab:04:2c:37:7f:06:0a:dd:94:56:c0:f2:a9:5e:a4:17:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Validity
Not Before: Sep 3 07:18:50 2024 GMT
Not After : Sep 2 07:23:50 2025 GMT
Subject: CN=DDEE15CBA3D247162E45857F9396DA02217187EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fb:d0:ee:39:7c:88:7a:58:e5:3c:aa:a5:a0:
a6:11:bd:23:81:45:4e:27:e1:46:ce:36:9b:22:e8:
b8:44:8f:1b:4e:09:4b:fc:5e:3a:69:38:b4:42:f0:
10:c5:47:ac:a1:d2:80:25:9a:e5:a8:72:68:62:6c:
26:f1:e6:8a:f4:be:90:12:6d:a1:b3:24:96:30:1f:
43:83:09:a0:c5:f0:fe:cc:fe:b2:7a:00:15:da:90:
19:7b:dc:ca:6f:ba:fa:c4:e2:26:6a:7f:98:12:e7:
82:5b:d6:ba:a5:33:ca:32:05:1c:a7:a7:b5:ea:58:
d9:99:7e:31:93:cc:33:be:f2:fe:64:6d:5a:3c:d4:
71:6f:7a:d3:c7:44:f6:fa:29:f6:2c:c2:aa:6b:8b:
dd:98:9c:a6:df:5c:b1:2b:1f:5f:bc:10:54:bf:d5:
e7:b4:96:e1:22:a2:60:c0:6e:6f:bc:9f:3c:a4:72:
d6:ec:86:7a:81:06:93:fc:a1:02:dc:cb:95:16:15:
49:8e:bb:c8:80:4f:43:a4:7e:ec:1c:91:05:f2:81:
ba:00:37:dc:b2:f5:b4:30:7f:29:97:46:01:c5:e6:
df:99:7d:32:43:18:62:f4:a6:3e:8b:b0:91:33:cf:
4c:39:5a:85:9f:55:cb:8c:12:9b:fc:ae:5e:77:35:
d6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EE:15:CB:A3:D2:47:16:2E:45:85:7F:93:96:DA:02:21:71:87:EB
X509v3 Authority Key Identifier:
keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135352e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.155.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:2e:b8:6b:d0:3c:48:54:7a:ae:9e:48:2f:82:85:d4:d9:c1:
69:45:20:1f:fa:1b:c0:06:bd:92:4f:f7:0e:83:6c:97:4d:7b:
0e:c4:de:d1:be:b9:ee:49:3b:05:c4:31:30:a1:b6:f8:03:da:
11:fb:d1:ae:3e:94:bc:98:ec:f7:13:37:22:7b:af:8f:5a:d1:
05:19:82:a3:49:18:33:77:17:af:db:2c:76:68:ea:fc:99:24:
27:dc:a8:b6:a3:36:24:d8:c9:58:54:e8:62:04:f3:56:5e:6c:
84:da:f9:50:3e:7e:8d:c2:7f:46:a0:ca:35:f0:cb:c5:ad:f5:
97:c5:fe:b2:aa:a0:9f:52:56:c2:83:1b:00:ac:ec:42:75:fe:
9d:78:8d:5c:08:23:99:3e:17:3d:96:34:f5:b3:6c:44:9c:d7:
6d:70:de:1e:4b:bc:d6:fc:2d:7a:fe:8b:6e:e9:63:cc:61:21:
ae:f4:71:ed:05:1a:8a:e8:2d:89:2c:f1:23:16:a1:05:7e:77:
06:4e:b3:2a:85:17:7e:b5:ab:ee:17:ef:d0:6e:a0:5a:43:1d:
61:fc:5f:36:24:70:e3:4f:af:5f:9a:48:40:95:a4:cf:d6:4f:
7e:74:3e:8b:9b:da:40:b7:08:20:2c:b3:91:85:dc:20:13:48:
f7:39:41:45
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUXAgPqwQsN38GCt2UVsDyqV6kF0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx
NjJlMWFhZDAeFw0yNDA5MDMwNzE4NTBaFw0yNTA5MDIwNzIzNTBaMDMxMTAvBgNV
BAMTKERERUUxNUNCQTNEMjQ3MTYyRTQ1ODU3RjkzOTZEQTAyMjE3MTg3RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh+9DuOXyIeljlPKqloKYRvSOB
RU4n4UbONpsi6LhEjxtOCUv8XjppOLRC8BDFR6yh0oAlmuWocmhibCbx5or0vpAS
baGzJJYwH0ODCaDF8P7M/rJ6ABXakBl73MpvuvrE4iZqf5gS54Jb1rqlM8oyBRyn
p7XqWNmZfjGTzDO+8v5kbVo81HFvetPHRPb6KfYswqpri92YnKbfXLErH1+8EFS/
1ee0luEiomDAbm+8nzykctbshnqBBpP8oQLcy5UWFUmOu8iAT0OkfuwckQXygboA
N9yy9bQwfymXRgHF5t+ZfTJDGGL0pj6LsJEzz0w5WoWfVcuMEpv8rl53NdZrAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU3e4Vy6PSRxYuRYV/k5baAiFxh+swHwYDVR0j
BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0
OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ
dUdxMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQt
M2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0OTEyLzAvMzEzOTMzMmUzOTMzMmUzMTM1
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzQzNzMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
wV2bMA0GCSqGSIb3DQEBCwUAA4IBAQCuLrhr0DxIVHqunkgvgoXU2cFpRSAf+hvA
Br2ST/cOg2yXTXsOxN7RvrnuSTsFxDEwobb4A9oR+9GuPpS8mOz3Ezcie6+PWtEF
GYKjSRgzdxev2yx2aOr8mSQn3Ki2ozYk2MlYVOhiBPNWXmyE2vlQPn6Nwn9GoMo1
8MvFrfWXxf6yqqCfUlbCgxsArOxCdf6deI1cCCOZPhc9ljT1s2xEnNdtcN4eS7zW
/C16/otu6WPMYSGu9HHtBRqK6C2JLPEjFqEFfncGTrMqhRd+tavuF+/QbqBaQx1h
/F82JHDjT69fmkhAlaTP1k9+dD6Lm9pAtwggLLORhdwgE0j3OUFF
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:49 2025 by rpki-client