Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa
File: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (raw, json)
Hash identifier: W9NdT6aoX4s9PghUA97T0GAxnEF0Q0u3VMj+QX70R5Y=
Subject key identifier: EA:92:ED:60:E0:D1:79:A1:5A:E1:D5:01:EF:28:AF:31:B9:EA:42:E1
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 35614F96BAB7B888BAC8E982ED84FDFAF9D86EF9
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa
Signing time: Thu 31 Oct 2024 07:33:27 +0000
ROA not before: Thu 31 Oct 2024 07:28:27 +0000
ROA not after: Thu 30 Oct 2025 07:33:27 +0000
asID: 204928
IP address blocks: 185.213.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:61:4f:96:ba:b7:b8:88:ba:c8:e9:82:ed:84:fd:fa:f9:d8:6e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Oct 31 07:28:27 2024 GMT
Not After : Oct 30 07:33:27 2025 GMT
Subject: CN=EA92ED60E0D179A15AE1D501EF28AF31B9EA42E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:41:a8:ca:28:5a:07:9f:e6:d2:15:df:bf:f2:
35:75:4b:fa:e3:2e:f8:0b:59:68:16:31:31:df:b0:
1b:f6:89:26:d0:f1:36:cc:8f:87:96:b5:c6:92:e7:
47:b2:40:ed:94:b1:8b:33:f5:f7:fa:81:5a:03:d6:
7a:11:91:26:fd:c3:e3:5d:92:93:6c:7b:32:a9:97:
c8:3f:7e:91:22:c0:9a:09:2a:3b:97:10:0b:e7:ea:
96:f9:77:de:a1:e2:6b:4f:79:b8:71:49:70:13:9c:
46:a0:ef:0c:84:4c:3e:10:c2:3f:86:00:6f:54:6c:
9f:31:7a:9c:d2:34:01:4e:ba:9c:52:d2:ee:27:ea:
10:25:89:0e:78:14:c0:21:72:88:3f:92:19:58:ec:
09:2d:b8:08:a1:0a:c5:0a:29:3e:96:6d:95:91:e6:
bf:1f:cf:b3:d4:e7:fd:cb:04:f3:1a:ee:0e:4c:4f:
76:86:c6:fa:8e:71:72:1a:44:2f:2e:8b:69:a2:66:
7c:17:39:73:97:67:42:2f:59:a8:58:6f:53:8a:ff:
f0:9b:09:4f:05:3a:18:dd:7c:57:a4:4c:b9:4e:f8:
50:de:d0:b8:30:58:2e:64:a4:8f:d0:99:48:26:a2:
51:b8:78:c5:30:96:94:bd:5d:64:70:a4:aa:06:1e:
51:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:92:ED:60:E0:D1:79:A1:5A:E1:D5:01:EF:28:AF:31:B9:EA:42:E1
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:d0:09:7f:5e:47:0e:6a:24:b4:fc:d2:6f:10:62:bb:f0:97:
37:0f:b9:c7:e5:c1:fe:df:ff:d0:ab:e6:a5:a9:ad:4e:e3:df:
47:0b:63:7e:3f:d2:f1:6f:8a:1a:68:81:2f:15:f2:6e:ff:35:
13:03:af:78:b4:cf:45:57:a5:d7:19:8a:73:0b:c4:30:a8:b3:
67:3d:1f:4a:33:d9:6e:51:94:90:2a:c0:6f:79:1d:d7:c1:08:
9d:df:d5:24:94:b8:ae:ca:d8:5f:a9:fe:34:0c:de:f2:f8:13:
12:08:fb:6a:24:00:fa:f0:e3:f0:ce:3c:8d:4d:aa:95:66:3e:
6c:c8:3d:59:46:b8:61:8f:8e:74:81:30:8f:e2:f1:e5:05:5f:
6f:28:82:33:99:9a:7b:1a:e5:65:a0:14:2d:73:82:71:5a:d7:
0c:32:b4:11:8b:a1:e6:4a:18:b3:2f:c2:75:fa:5f:01:3c:4c:
a1:5c:e1:de:32:1b:34:6f:a4:d2:80:0f:e1:2d:d2:ce:2d:36:
48:d4:63:d9:31:f0:62:9e:c4:74:5c:48:e4:52:87:9c:47:b3:
a1:e3:7d:08:36:df:b6:97:d1:33:47:a1:e7:90:9d:c8:01:0d:
ca:98:dc:6f:5a:0b:9c:9f:58:71:b4:34:d2:a6:2c:5f:ac:56:
d8:ec:d3:88
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUNWFPlrq3uIi6yOmC7YT9+vnYbvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm
Yjc3YjRhOTAeFw0yNDEwMzEwNzI4MjdaFw0yNTEwMzAwNzMzMjdaMDMxMTAvBgNV
BAMTKEVBOTJFRDYwRTBEMTc5QTE1QUUxRDUwMUVGMjhBRjMxQjlFQTQyRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbQajKKFoHn+bSFd+/8jV1S/rj
LvgLWWgWMTHfsBv2iSbQ8TbMj4eWtcaS50eyQO2UsYsz9ff6gVoD1noRkSb9w+Nd
kpNsezKpl8g/fpEiwJoJKjuXEAvn6pb5d96h4mtPebhxSXATnEag7wyETD4Qwj+G
AG9UbJ8xepzSNAFOupxS0u4n6hAliQ54FMAhcog/khlY7AktuAihCsUKKT6WbZWR
5r8fz7PU5/3LBPMa7g5MT3aGxvqOcXIaRC8ui2miZnwXOXOXZ0IvWahYb1OK//Cb
CU8FOhjdfFekTLlO+FDe0LgwWC5kpI/QmUgmolG4eMUwlpS9XWRwpKoGHlGvAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU6pLtYODReaFa4dUB7yivMbnqQuEwHwYDVR0j
BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy
Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190
M3RLay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzVkMThlODIt
NGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQyMjc5LzAvMzEzODM1MmUzMjMxMzMyZTMy
MzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM5MzIzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnV8zANBgkqhkiG9w0BAQsFAAOCAQEAX9AJf15HDmoktPzSbxBiu/CXNw+5
x+XB/t//0KvmpamtTuPfRwtjfj/S8W+KGmiBLxXybv81EwOveLTPRVel1xmKcwvE
MKizZz0fSjPZblGUkCrAb3kd18EInd/VJJS4rsrYX6n+NAze8vgTEgj7aiQA+vDj
8M48jU2qlWY+bMg9WUa4YY+OdIEwj+Lx5QVfbyiCM5maexrlZaAULXOCcVrXDDK0
EYuh5koYsy/CdfpfATxMoVzh3jIbNG+k0oAP4S3Szi02SNRj2THwYp7EdFxI5FKH
nEezoeN9CDbftpfRM0eh55CdyAENypjcb1oLnJ9YcbQ00qYsX6xW2OzTiA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 07:55:00 2024 by rpki-client on console-ams.rpki-client.org