Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233352e302f32342d3234203d3e203438303730.roa
File: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (raw, json)
Hash identifier: OiF9NTgLIvpgOtsU+ET8v0G7trHw/6kgGm+sQfii6jA=
Subject key identifier: FB:1B:95:14:94:7F:EB:88:C9:2D:BE:2D:6E:AE:DA:FB:25:9A:A1:7A
Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8
Certificate serial: 14BEDB69791A82EE40C320652243C4DF96550EE3
Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233352e302f32342d3234203d3e203438303730.roa
Signing time: Tue 25 Jun 2024 15:49:19 +0000
ROA not before: Tue 25 Jun 2024 15:44:19 +0000
ROA not after: Tue 24 Jun 2025 15:49:19 +0000
asID: 48070
IP address blocks: 94.126.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 00:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:be:db:69:79:1a:82:ee:40:c3:20:65:22:43:c4:df:96:55:0e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8
Validity
Not Before: Jun 25 15:44:19 2024 GMT
Not After : Jun 24 15:49:19 2025 GMT
Subject: CN=FB1B9514947FEB88C92DBE2D6EAEDAFB259AA17A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6f:51:f2:83:86:f7:4c:ec:98:af:d5:09:fb:
c3:6e:65:11:6f:e0:49:14:bb:e8:5f:d8:47:f3:47:
7c:bc:88:b9:b0:ec:12:49:55:2d:b6:06:78:81:65:
e2:31:8f:69:6c:21:81:74:23:0e:0e:72:c6:ed:60:
d8:75:86:f2:33:9f:3b:63:bf:d3:af:cd:ae:30:57:
b9:2e:e9:26:48:fd:46:b2:23:5f:d0:66:83:20:95:
aa:be:7e:91:d8:11:ac:94:d8:32:5c:2f:6a:0f:c0:
1a:51:2d:2e:d9:e4:06:e5:06:d5:a8:f1:a3:a4:92:
66:2c:b5:3f:f1:b9:4c:5d:55:69:a9:cc:d0:9d:40:
bf:94:91:53:2c:ce:dc:83:1d:0b:83:7f:54:17:3b:
2d:65:91:27:8d:fc:3e:90:a1:73:33:2f:70:88:23:
c3:1a:e0:84:f7:06:92:23:f1:4a:e1:2a:68:ed:84:
25:2b:b6:a8:b9:c4:f6:bb:ac:8a:8c:f3:bc:82:3e:
56:23:69:38:ab:f8:70:88:e2:8b:fc:02:5f:2f:54:
b9:36:f7:e6:59:2c:26:81:bf:1e:f0:70:90:a3:25:
52:c8:cc:7e:00:32:56:f4:f0:a2:e0:df:e1:0f:7f:
38:28:f6:9a:31:32:2e:01:c7:31:2e:49:25:70:66:
fd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1B:95:14:94:7F:EB:88:C9:2D:BE:2D:6E:AE:DA:FB:25:9A:A1:7A
X509v3 Authority Key Identifier:
keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233352e302f32342d3234203d3e203438303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.235.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f5:5e:63:95:2e:42:20:5e:70:a3:db:e9:52:25:2b:52:fd:
02:f9:46:62:98:0c:d9:6c:2b:1a:42:ec:35:63:2f:98:bb:3a:
25:d0:c1:e1:57:50:ca:1f:8d:1a:78:fd:06:2f:84:d0:8a:98:
f5:fb:f7:9a:ef:9b:50:eb:86:fd:73:a5:ab:de:ca:bb:9d:d9:
12:a9:33:37:dc:f0:e6:63:ab:a3:1d:ea:d7:d8:dc:28:b5:ca:
fe:d8:5f:43:9c:8b:18:3d:74:56:94:cf:d5:7a:ab:7b:6e:11:
9b:af:4d:44:24:29:d8:9a:b8:1c:c1:6e:55:c7:10:e7:5e:a5:
65:3e:b1:9d:e8:60:04:90:d1:b9:8d:62:cc:05:f2:96:4b:43:
2b:32:ee:93:de:a5:22:ea:a7:cd:78:70:58:a9:f7:43:86:99:
49:44:04:de:5a:b2:e4:be:da:94:33:66:b2:da:5f:da:21:4c:
ec:2b:ad:07:96:a7:02:bc:75:27:24:66:8e:5c:e7:6a:0a:36:
f1:a9:eb:9a:11:4b:13:2f:80:23:49:b2:c8:88:3b:51:20:31:
eb:c2:40:12:40:2a:29:62:62:f7:3c:52:20:85:44:0a:0a:f9:
0d:fd:c3:88:83:de:53:4a:31:d4:1d:39:95:8d:44:31:8d:9b:
04:1a:a9:9a
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUFL7baXkagu5AwyBlIkPE35ZVDuMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz
ODI0ZTZiODAeFw0yNDA2MjUxNTQ0MTlaFw0yNTA2MjQxNTQ5MTlaMDMxMTAvBgNV
BAMTKEZCMUI5NTE0OTQ3RkVCODhDOTJEQkUyRDZFQUVEQUZCMjU5QUExN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeb1Hyg4b3TOyYr9UJ+8NuZRFv
4EkUu+hf2EfzR3y8iLmw7BJJVS22BniBZeIxj2lsIYF0Iw4OcsbtYNh1hvIznztj
v9Ovza4wV7ku6SZI/UayI1/QZoMglaq+fpHYEayU2DJcL2oPwBpRLS7Z5AblBtWo
8aOkkmYstT/xuUxdVWmpzNCdQL+UkVMsztyDHQuDf1QXOy1lkSeN/D6QoXMzL3CI
I8Ma4IT3BpIj8UrhKmjthCUrtqi5xPa7rIqM87yCPlYjaTir+HCI4ov8Al8vVLk2
9+ZZLCaBvx7wcJCjJVLIzH4AMlb08KLg3+EPfzgo9poxMi4BxzEuSSVwZv1DAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU+xuVFJR/64jJLb4tbq7a+yWaoXowHwYDVR0j
BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh
NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn
azVyZy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUt
NGIxYS00NmVhLTljOTUtNGFmMTI5NjRhNDlkLzAvMzkzNDJlMzEzMjM2MmUzMjMz
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzNzMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
Xn7rMA0GCSqGSIb3DQEBCwUAA4IBAQBg9V5jlS5CIF5wo9vpUiUrUv0C+UZimAzZ
bCsaQuw1Yy+Yuzol0MHhV1DKH40aeP0GL4TQipj1+/ea75tQ64b9c6Wr3sq7ndkS
qTM33PDmY6ujHerX2Nwotcr+2F9DnIsYPXRWlM/Veqt7bhGbr01EJCnYmrgcwW5V
xxDnXqVlPrGd6GAEkNG5jWLMBfKWS0MrMu6T3qUi6qfNeHBYqfdDhplJRATeWrLk
vtqUM2ay2l/aIUzsK60HlqcCvHUnJGaOXOdqCjbxqeuaEUsTL4AjSbLIiDtRIDHr
wkASQCopYmL3PFIghUQKCvkN/cOIg95TSjHUHTmVjUQxjZsEGqma
-----END CERTIFICATE-----
Generated at Tue Dec 3 08:07:10 2024 by rpki-client on console-ams.rpki-client.org