Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e31382e3131362e302f32342d3234203d3e203139343337.roa
File: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier: Ro1lpTz9rpOFRcpKRxfuZnm3EW/PVF8k4xUf6rTgwW0=
Subject key identifier: FE:6F:D1:24:2A:BD:04:E8:50:39:04:EB:1E:4A:39:21:88:84:86:B1
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 08834CE4C461FDDDDE96E17EEA414C88976548AF
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e31382e3131362e302f32342d3234203d3e203139343337.roa
Signing time: Sun 27 Oct 2024 08:43:25 +0000
ROA not before: Sun 27 Oct 2024 08:38:25 +0000
ROA not after: Sun 26 Oct 2025 08:43:25 +0000
asID: 19437
IP address blocks: 212.18.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:83:4c:e4:c4:61:fd:dd:de:96:e1:7e:ea:41:4c:88:97:65:48:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Oct 27 08:38:25 2024 GMT
Not After : Oct 26 08:43:25 2025 GMT
Subject: CN=FE6FD1242ABD04E8503904EB1E4A3921888486B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:22:73:40:5e:a2:e3:58:f7:dc:02:4b:95:
45:ab:9d:69:2a:33:b5:3c:76:25:ed:f0:68:f3:88:
c8:52:9a:6b:6d:20:a9:97:47:2e:18:0f:78:d9:92:
9f:6d:55:e0:ff:96:07:f4:b2:89:7e:57:ea:79:08:
92:22:0b:93:b2:5f:60:1a:db:06:e8:01:47:6a:3a:
24:1e:88:ce:4b:08:f1:ef:51:e0:bd:14:a9:8a:94:
84:2e:9d:3e:5f:2e:71:75:5a:6b:84:2b:1e:e9:6c:
c6:40:33:86:ce:65:86:a5:cb:a8:df:bc:4b:9b:46:
f0:e7:de:b8:d3:0b:b0:b7:f2:6e:01:0f:c1:25:77:
df:b7:de:1c:d8:e2:e2:22:a3:05:f1:4e:77:6e:aa:
8b:69:62:fe:64:f6:8a:e2:8e:bb:07:8c:97:21:d1:
01:31:be:1b:b9:b2:b3:19:61:03:0a:43:fb:ca:56:
b1:86:d1:6b:84:09:1b:c4:b2:94:f1:8e:0b:0d:76:
5f:db:be:d2:db:5f:af:26:b3:73:8f:b9:94:05:34:
24:6f:c0:43:ed:4a:82:45:55:fd:53:a9:2d:6d:49:
57:a3:03:89:84:28:dd:da:f5:24:04:0c:14:02:72:
c4:27:25:01:2a:c3:e0:a5:a2:86:73:e7:b8:b2:05:
1f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6F:D1:24:2A:BD:04:E8:50:39:04:EB:1E:4A:39:21:88:84:86:B1
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e31382e3131362e302f32342d3234203d3e203139343337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.116.0/24
Signature Algorithm: sha256WithRSAEncryption
32:7a:4a:b2:86:82:c2:99:25:0a:1f:0d:89:2c:8d:1c:48:34:
95:8d:86:52:ab:25:dd:24:85:7e:97:37:d3:03:46:43:74:0c:
58:e5:18:ec:65:dd:51:c9:88:5f:e9:a4:93:1b:a3:53:ae:95:
b7:8a:0e:99:10:75:7c:74:9c:13:61:f2:7e:a6:80:5d:a4:83:
2e:f7:df:95:a9:52:64:cf:75:94:4f:8d:58:a3:19:b5:34:bc:
27:76:de:67:70:ec:e6:56:01:20:2f:00:4a:ac:ee:33:f8:45:
60:e7:c2:e1:cc:83:8f:81:42:1c:65:b4:fd:a8:c4:8c:1e:81:
80:f6:6c:69:f1:76:b0:21:59:58:b8:93:b9:e2:8d:34:fe:11:
5a:11:ba:a4:ae:8d:66:a1:72:0e:44:df:ba:c5:c0:8b:c4:65:
d5:cc:87:ff:bf:5e:6f:0f:8d:74:fd:20:16:1e:0f:6b:37:82:
6f:c7:26:80:d6:c3:9d:d5:f4:0a:5c:6e:58:2c:98:b3:6c:b9:
c9:ee:25:fe:17:c8:f8:8f:fa:e9:a7:bd:8c:80:72:13:d1:b9:
bb:4e:0c:5e:91:ec:cf:23:cd:41:8f:bd:28:f3:69:1a:9c:c5:
1a:2e:6c:18:b5:0f:5b:52:9c:a0:46:d3:3a:ba:91:78:da:09:
dc:d2:bc:27
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUCINM5MRh/d3eluF+6kFMiJdlSK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm
NTg3M2RjNDAeFw0yNDEwMjcwODM4MjVaFw0yNTEwMjYwODQzMjVaMDMxMTAvBgNV
BAMTKEZFNkZEMTI0MkFCRDA0RTg1MDM5MDRFQjFFNEEzOTIxODg4NDg2QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzXyJzQF6i41j33AJLlUWrnWkq
M7U8diXt8GjziMhSmmttIKmXRy4YD3jZkp9tVeD/lgf0sol+V+p5CJIiC5OyX2Aa
2wboAUdqOiQeiM5LCPHvUeC9FKmKlIQunT5fLnF1WmuEKx7pbMZAM4bOZYaly6jf
vEubRvDn3rjTC7C38m4BD8Eld9+33hzY4uIiowXxTnduqotpYv5k9orijrsHjJch
0QExvhu5srMZYQMKQ/vKVrGG0WuECRvEspTxjgsNdl/bvtLbX68ms3OPuZQFNCRv
wEPtSoJFVf1TqS1tSVejA4mEKN3a9SQEDBQCcsQnJQEqw+ClooZz57iyBR+1AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU/m/RJCq9BOhQOQTrHko5IYiEhrEwHwYDVR0j
BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj
ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX
SFBjUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDFiMzVmOGIt
NmY0OC00YmFkLWIxODUtNWMxZGFhOGFjZGE5LzAvMzIzMTMyMmUzMTM4MmUzMTMx
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzQzMzM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
1BJ0MA0GCSqGSIb3DQEBCwUAA4IBAQAyekqyhoLCmSUKHw2JLI0cSDSVjYZSqyXd
JIV+lzfTA0ZDdAxY5RjsZd1RyYhf6aSTG6NTrpW3ig6ZEHV8dJwTYfJ+poBdpIMu
99+VqVJkz3WUT41Yoxm1NLwndt5ncOzmVgEgLwBKrO4z+EVg58LhzIOPgUIcZbT9
qMSMHoGA9mxp8XawIVlYuJO54o00/hFaEbqkro1moXIORN+6xcCLxGXVzIf/v15v
D410/SAWHg9rN4JvxyaA1sOd1fQKXG5YLJizbLnJ7iX+F8j4j/rpp72MgHIT0bm7
TgxekezPI81Bj70o82kanMUaLmwYtQ9bUpygRtM6upF42gnc0rwn
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:59:20 2024 by rpki-client on console-fra.rpki-client.org