Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: KNmr1epuHJnPyG2pc9fAU87BYtopgkZFx6nbkn+JDjk=
Subject key identifier: 43:1E:7E:31:13:AE:77:89:84:13:CE:26:D7:F3:C0:66:EE:08:16:22
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2B7163061CFA7E501AE94EECE8CC5D6EE1C00DF0
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS834.roa
Signing time: Wed 01 May 2024 23:48:05 +0000
ROA not before: Wed 01 May 2024 23:43:05 +0000
ROA not after: Wed 30 Apr 2025 23:48:05 +0000
asID: 834
IP address blocks: 91.124.130.0/23 maxlen: 24
91.124.133.0/24 maxlen: 24
91.124.141.0/24 maxlen: 24
91.124.146.0/24 maxlen: 24
91.124.242.0/23 maxlen: 24
91.124.244.0/22 maxlen: 24
91.124.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:71:63:06:1c:fa:7e:50:1a:e9:4e:ec:e8:cc:5d:6e:e1:c0:0d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 1 23:43:05 2024 GMT
Not After : Apr 30 23:48:05 2025 GMT
Subject: CN=431E7E3113AE77898413CE26D7F3C066EE081622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:98:a9:1b:79:05:c7:d5:d8:f7:d3:47:a6:14:
d6:9e:8d:2e:e2:3b:9e:5e:71:1f:bc:cc:55:9d:20:
1f:0d:c9:04:a2:73:ca:6a:48:59:bd:f0:3a:05:b1:
eb:35:ab:a7:b6:25:46:9c:81:25:0f:52:e0:bc:2f:
e3:27:aa:3b:37:55:cb:08:5e:8e:25:e0:2b:b5:3b:
91:9f:87:fd:a3:65:96:17:e8:96:e2:ec:42:3b:bc:
be:66:c0:ee:bc:90:95:44:91:08:ce:9a:6b:ea:7a:
9a:89:43:a5:79:ac:06:54:f9:d8:b7:72:ce:c8:b3:
de:a3:d2:41:cf:67:ca:d9:b3:0d:b9:9b:fd:a9:95:
1c:48:11:18:0d:66:44:7c:72:c5:4c:67:c3:e1:8f:
dd:60:69:4a:77:f1:99:6e:34:f5:66:23:0d:21:49:
0f:2d:a2:c5:e1:fc:91:3b:93:0f:29:fb:04:34:8d:
10:f9:56:7e:de:0d:6a:bb:7e:9f:70:b7:56:95:14:
93:3a:3f:9e:a8:78:a7:ab:77:0b:b6:f1:46:1c:3c:
ef:46:cb:c9:73:d9:d7:e7:d5:c7:0e:4e:42:90:d2:
ba:b8:20:5b:79:92:38:c2:98:a2:e6:40:af:0d:29:
61:ea:59:b9:27:44:2f:65:a8:5e:27:a4:c3:ed:55:
dc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1E:7E:31:13:AE:77:89:84:13:CE:26:D7:F3:C0:66:EE:08:16:22
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.130.0/23
91.124.133.0/24
91.124.141.0/24
91.124.146.0/24
91.124.242.0-91.124.251.255
Signature Algorithm: sha256WithRSAEncryption
8e:24:d0:42:a8:61:de:9d:f1:9b:6a:f2:d4:1b:50:a9:c6:ae:
28:2e:8f:c2:62:dc:83:f8:71:7a:3b:94:a2:cb:b6:92:bc:69:
91:72:ed:0c:c9:19:27:6f:24:da:00:02:25:42:e5:1e:d6:08:
0a:87:4b:fb:3c:2f:e6:b2:3e:49:d1:ac:03:d3:9d:13:d0:8b:
93:c6:14:81:c8:cd:0a:9c:72:6e:f4:b9:55:df:39:aa:90:6e:
fc:32:27:90:11:c7:fb:c8:de:b0:d6:66:6b:ec:13:3c:1c:44:
0c:02:0e:b6:fd:f7:45:d4:d6:2d:e3:3c:f3:6a:a7:e0:79:4e:
3b:b8:99:c1:e4:49:89:18:f8:cc:22:78:02:d3:1b:98:51:4a:
d6:bd:b8:2d:28:d3:49:53:93:77:0f:de:80:1b:ed:88:95:7f:
a4:bf:e3:8a:0f:64:10:fe:55:99:df:2e:b6:51:bc:5d:3b:cf:
f8:5e:f5:70:fc:0a:3a:5a:3b:00:af:5b:72:01:71:88:ff:73:
f2:f3:6c:63:16:f9:12:f4:0d:d4:ad:6f:57:d4:a6:84:f0:7d:
5c:ae:4e:86:7a:70:87:ab:ce:f7:fe:72:4b:ef:4d:aa:97:c1:
a5:c5:c5:d1:8a:84:73:55:b0:6d:be:7f:6b:dc:28:a9:f4:66:
d9:bd:86:92
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIUK3FjBhz6flAa6U7s6MxdbuHADfAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNDA1MDEyMzQzMDVaFw0yNTA0MzAyMzQ4MDVaMDMxMTAvBgNV
BAMTKDQzMUU3RTMxMTNBRTc3ODk4NDEzQ0UyNkQ3RjNDMDY2RUUwODE2MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvmKkbeQXH1dj300emFNaejS7i
O55ecR+8zFWdIB8NyQSic8pqSFm98DoFses1q6e2JUacgSUPUuC8L+Mnqjs3VcsI
Xo4l4Cu1O5Gfh/2jZZYX6Jbi7EI7vL5mwO68kJVEkQjOmmvqepqJQ6V5rAZU+di3
cs7Is96j0kHPZ8rZsw25m/2plRxIERgNZkR8csVMZ8Phj91gaUp38ZluNPVmIw0h
SQ8tosXh/JE7kw8p+wQ0jRD5Vn7eDWq7fp9wt1aVFJM6P56oeKerdwu28UYcPO9G
y8lz2dfn1ccOTkKQ0rq4IFt5kjjCmKLmQK8NKWHqWbknRC9lqF4npMPtVdyrAgMB
AAGjggInMIICIzAdBgNVHQ4EFgQUQx5+MROud4mEE84m1/PAZu4IFiIwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTODM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQBW3yCAwQA
W3yFAwQAW3yNAwQAW3ySMAwDBAFbfPIDBAJbfPgwDQYJKoZIhvcNAQELBQADggEB
AI4k0EKoYd6d8Ztq8tQbUKnGriguj8Ji3IP4cXo7lKLLtpK8aZFy7QzJGSdvJNoA
AiVC5R7WCAqHS/s8L+ayPknRrAPTnRPQi5PGFIHIzQqccm70uVXfOaqQbvwyJ5AR
x/vI3rDWZmvsEzwcRAwCDrb990XU1i3jPPNqp+B5Tju4mcHkSYkY+MwieALTG5hR
Sta9uC0o00lTk3cP3oAb7YiVf6S/44oPZBD+VZnfLrZRvF07z/he9XD8CjpaOwCv
W3IBcYj/c/LzbGMW+RL0DdStb1fUpoTwfVyuToZ6cIerzvf+ckvvTaqXwaXFxdGK
hHNVsG2+f2vcKKn0Ztm9hpI=
-----END CERTIFICATE-----
Generated at Thu May 2 02:26:23 2024 by rpki-client on console-ams.rpki-client.org