Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa
File: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier: NTiGjgrJWtlD9Roa9FRQtbjOAAcPR35U4Ayfj8SpKuI=
Subject key identifier: 13:B5:FA:CE:1C:F6:0D:61:6C:F3:88:58:96:81:BF:F4:2A:59:0D:62
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 1E8D8FD98919149552F347EE182182D5CA26BB2F
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa
Signing time: Mon 09 Dec 2024 12:52:09 +0000
ROA not before: Mon 09 Dec 2024 12:47:09 +0000
ROA not after: Mon 08 Dec 2025 12:52:09 +0000
asID: 212384
IP address blocks: 91.132.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:8d:8f:d9:89:19:14:95:52:f3:47:ee:18:21:82:d5:ca:26:bb:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Dec 9 12:47:09 2024 GMT
Not After : Dec 8 12:52:09 2025 GMT
Subject: CN=13B5FACE1CF60D616CF388589681BFF42A590D62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1a:ae:46:5e:f0:ac:b8:7a:60:3f:31:cf:0e:
5d:d9:92:80:c6:da:05:ff:f1:4d:27:bb:ea:46:46:
a3:dc:73:85:08:a1:77:d5:1d:1a:5a:dd:a3:59:5b:
e7:19:3f:89:15:c8:dd:42:9a:40:93:0e:33:01:1a:
4b:9a:72:3f:28:93:64:4a:6a:13:26:68:70:33:ed:
3c:74:02:cb:cc:cc:97:bb:68:3e:97:0a:6a:6d:fa:
fb:18:f4:3a:9e:3b:2e:4a:1c:20:5b:3b:58:90:b1:
b7:b1:bf:a9:cb:6d:07:05:11:af:33:64:a5:96:d7:
e2:a4:16:dc:3d:8e:9a:c3:0a:53:b6:7e:c0:51:a3:
f6:fc:93:aa:81:56:8f:0f:2b:75:9c:a7:ca:1d:c3:
a3:04:46:08:6d:d7:cd:0a:76:2f:e6:eb:1e:6b:91:
8c:3a:af:18:7b:30:6a:7e:92:b6:98:e2:49:15:0b:
21:37:17:86:3c:45:90:d4:cd:88:68:cb:b9:80:81:
42:68:6c:fb:c4:dc:50:85:77:f7:a3:3b:48:2e:29:
03:b4:80:ba:c7:eb:97:e4:d8:f3:24:cd:03:9b:c0:
bf:cc:a9:ce:69:2e:9d:2e:ca:60:6f:62:e2:2f:65:
6d:f5:87:26:59:6a:b2:86:66:39:7e:57:9e:eb:4e:
34:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B5:FA:CE:1C:F6:0D:61:6C:F3:88:58:96:81:BF:F4:2A:59:0D:62
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.227.0/24
Signature Algorithm: sha256WithRSAEncryption
52:55:f6:2c:f2:67:6c:42:77:04:43:d3:d9:3b:23:8c:09:24:
ed:79:01:53:dc:f5:b6:d4:f0:35:60:9d:83:3d:7f:07:5d:a7:
76:bd:ca:49:c6:d9:39:da:4a:73:3d:99:be:66:8c:50:9e:36:
a5:06:65:93:02:4e:f9:5c:89:3b:18:e0:f9:97:4e:3e:e5:bf:
c7:73:33:88:fc:6c:8b:cf:2e:db:56:0f:9f:6a:90:9a:57:92:
90:a6:34:8a:7c:f9:c5:8d:c5:f5:66:c7:70:2d:23:60:d1:d8:
49:6b:c5:bc:cd:12:47:4f:52:69:b5:73:81:5d:2f:cb:6b:b6:
d4:41:3d:18:fa:be:c2:62:fe:86:28:40:5f:bd:43:92:f4:c1:
f0:cb:1d:ef:e1:38:7a:a2:58:36:da:76:fd:7b:eb:79:da:ad:
ae:1e:fb:20:73:cc:96:94:ef:23:9c:4f:99:ab:61:59:c8:fd:
5d:27:cf:9b:7d:6a:0c:3e:ef:0a:d9:d1:bb:81:e3:0e:0b:ab:
b3:b4:0b:4d:d7:91:bf:bb:18:f8:8a:41:f5:c9:10:cb:53:c5:
b6:33:a6:99:03:36:29:f0:88:31:e2:11:43:ac:14:65:40:c4:
9d:9d:c0:90:b0:8a:76:c6:01:71:d0:cc:54:e9:1d:13:78:07:
c3:58:70:74
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUHo2P2YkZFJVS80fuGCGC1comuy8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm
Yjc3YjRhOTAeFw0yNDEyMDkxMjQ3MDlaFw0yNTEyMDgxMjUyMDlaMDMxMTAvBgNV
BAMTKDEzQjVGQUNFMUNGNjBENjE2Q0YzODg1ODk2ODFCRkY0MkE1OTBENjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Gq5GXvCsuHpgPzHPDl3ZkoDG
2gX/8U0nu+pGRqPcc4UIoXfVHRpa3aNZW+cZP4kVyN1CmkCTDjMBGkuacj8ok2RK
ahMmaHAz7Tx0AsvMzJe7aD6XCmpt+vsY9DqeOy5KHCBbO1iQsbexv6nLbQcFEa8z
ZKWW1+KkFtw9jprDClO2fsBRo/b8k6qBVo8PK3Wcp8odw6MERght180Kdi/m6x5r
kYw6rxh7MGp+kraY4kkVCyE3F4Y8RZDUzYhoy7mAgUJobPvE3FCFd/ejO0guKQO0
gLrH65fk2PMkzQObwL/Mqc5pLp0uymBvYuIvZW31hyZZarKGZjl+V57rTjQ1AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUE7X6zhz2DWFs84hYloG/9CpZDWIwHwYDVR0j
BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy
Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190
M3RLay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzVkMThlODIt
NGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQyMjc5LzAvMzkzMTJlMzEzMzMyMmUzMjMy
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMzM4MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABbhOMwDQYJKoZIhvcNAQELBQADggEBAFJV9izyZ2xCdwRD09k7I4wJJO15AVPc
9bbU8DVgnYM9fwddp3a9yknG2TnaSnM9mb5mjFCeNqUGZZMCTvlciTsY4PmXTj7l
v8dzM4j8bIvPLttWD59qkJpXkpCmNIp8+cWNxfVmx3AtI2DR2ElrxbzNEkdPUmm1
c4FdL8trttRBPRj6vsJi/oYoQF+9Q5L0wfDLHe/hOHqiWDbadv1763nara4e+yBz
zJaU7yOcT5mrYVnI/V0nz5t9agw+7wrZ0buB4w4Lq7O0C03Xkb+7GPiKQfXJEMtT
xbYzppkDNinwiDHiEUOsFGVAxJ2dwJCwinbGAXHQzFTpHRN4B8NYcHQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:27 2025 by rpki-client