Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130342e302f32342d3234203d3e20313938303230.roa
File: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (raw, json)
Hash identifier: yHVodRBAsBlx/8p8lQvX33hmgwPZB9Uj6k/5yqbIyfs=
Subject key identifier: 83:2E:2D:D3:5E:64:F8:B2:28:74:56:CA:C0:23:FF:70:21:40:E4:43
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 206391CA6E3981FBD7550A4341293526844BAFB2
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130342e302f32342d3234203d3e20313938303230.roa
Signing time: Mon 23 Dec 2024 10:05:32 +0000
ROA not before: Mon 23 Dec 2024 10:00:32 +0000
ROA not after: Mon 22 Dec 2025 10:05:32 +0000
asID: 198020
IP address blocks: 31.22.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:63:91:ca:6e:39:81:fb:d7:55:0a:43:41:29:35:26:84:4b:af:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Dec 23 10:00:32 2024 GMT
Not After : Dec 22 10:05:32 2025 GMT
Subject: CN=832E2DD35E64F8B2287456CAC023FF702140E443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:35:2a:fc:dd:02:1f:e3:24:c7:c1:8d:f4:
5f:4b:f2:fa:e4:80:59:32:b9:c3:13:ad:77:5b:8f:
f2:77:bd:06:3a:82:aa:e7:ae:6e:21:d4:72:1d:6a:
da:7c:64:63:6a:ae:47:61:c6:85:c1:d7:a3:6c:27:
9e:57:c3:80:92:5c:4d:4b:44:23:34:8a:d9:b1:17:
6d:a3:77:8b:42:84:e8:60:c2:cb:1b:e5:92:f4:72:
03:ce:68:c9:6a:61:44:7f:5b:2f:82:9d:c2:f1:c8:
82:bc:8a:5a:7a:69:90:fd:15:0e:bd:a6:8d:92:5b:
ee:45:36:2d:b7:8d:6c:3f:8e:8a:47:a5:f5:0e:2e:
26:3b:11:87:4e:cf:e9:c9:a4:5b:a1:08:81:06:af:
58:92:0c:91:5c:7d:52:20:77:39:8f:57:61:f7:4e:
8d:92:8c:48:2a:d3:37:c7:f7:eb:5b:0f:f0:36:be:
52:f3:54:85:49:46:8b:a5:ef:09:7d:d7:7d:42:ec:
38:96:df:af:3d:a0:34:b9:fe:f2:d0:6e:3b:b6:59:
1f:2b:64:97:9d:8c:05:35:67:30:82:ca:dd:d6:98:
78:4a:4c:ec:75:24:c5:fa:51:e5:ed:8b:3e:82:13:
28:12:8f:68:fa:e2:76:7a:ce:0b:68:8a:fd:d2:57:
08:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2E:2D:D3:5E:64:F8:B2:28:74:56:CA:C0:23:FF:70:21:40:E4:43
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130342e302f32342d3234203d3e20313938303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.104.0/24
Signature Algorithm: sha256WithRSAEncryption
96:df:4b:15:3a:05:84:8c:09:e5:90:d5:44:ba:61:37:99:5a:
26:f4:d8:4e:e8:03:90:d1:28:0a:1b:e9:54:54:b8:8e:ae:4c:
ea:3f:c2:42:ee:fb:a1:e3:ef:a5:01:e5:bf:c0:db:0c:37:50:
5a:34:2d:40:d8:25:d8:97:2b:0e:68:61:2d:5b:f5:a2:c5:fd:
d2:58:e5:ab:88:92:07:60:ea:1b:10:d4:ed:cb:b8:4c:28:0d:
54:d3:e2:c5:0b:b4:b1:9f:b5:3f:ad:ed:e6:8c:6c:d6:9f:80:
a2:01:b0:ce:b0:d2:20:37:30:1a:3e:47:cd:f5:1a:ad:e1:c7:
09:28:65:55:f5:7c:84:d5:b9:63:c0:f8:c4:13:4e:6e:45:8b:
3c:fc:38:35:8b:4c:70:dd:d7:38:82:5f:26:b5:ba:83:18:a2:
f9:f4:e0:63:6c:3e:11:f6:84:d6:05:fc:b6:d2:b5:b5:7b:cc:
16:e2:41:09:04:c8:f8:e8:1f:28:fc:ba:cf:7a:5e:63:cd:8c:
6b:14:57:f9:f1:2f:b0:b2:ae:5e:f7:83:82:62:81:66:f8:0c:
b9:26:74:9b:ee:b4:c2:cb:b0:41:7f:b4:e5:a8:d4:8e:d4:19:
50:6f:ab:b9:c6:ed:38:8c:79:39:74:30:73:a0:cf:74:0e:ea:
0e:5d:a3:b4
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUIGORym45gfvXVQpDQSk1JoRLr7IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw
YWVhYjI5ZDAeFw0yNDEyMjMxMDAwMzJaFw0yNTEyMjIxMDA1MzJaMDMxMTAvBgNV
BAMTKDgzMkUyREQzNUU2NEY4QjIyODc0NTZDQUMwMjNGRjcwMjE0MEU0NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF4zUq/N0CH+Mkx8GN9F9L8vrk
gFkyucMTrXdbj/J3vQY6gqrnrm4h1HIdatp8ZGNqrkdhxoXB16NsJ55Xw4CSXE1L
RCM0itmxF22jd4tChOhgwssb5ZL0cgPOaMlqYUR/Wy+CncLxyIK8ilp6aZD9FQ69
po2SW+5FNi23jWw/jopHpfUOLiY7EYdOz+nJpFuhCIEGr1iSDJFcfVIgdzmPV2H3
To2SjEgq0zfH9+tbD/A2vlLzVIVJRoul7wl9131C7DiW3689oDS5/vLQbju2WR8r
ZJedjAU1ZzCCyt3WmHhKTOx1JMX6UeXtiz6CEygSj2j64nZ6zgtoiv3SVwhtAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUgy4t015k+LIodFbKwCP/cCFA5EMwHwYDVR0j
BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2
NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy
cXNwMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQt
NmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2NjIwLzAvMzMzMTJlMzIzMjJlMzEzMDM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzOTM4MzAzMjMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
HxZoMA0GCSqGSIb3DQEBCwUAA4IBAQCW30sVOgWEjAnlkNVEumE3mVom9NhO6AOQ
0SgKG+lUVLiOrkzqP8JC7vuh4++lAeW/wNsMN1BaNC1A2CXYlysOaGEtW/Wixf3S
WOWriJIHYOobENTty7hMKA1U0+LFC7Sxn7U/re3mjGzWn4CiAbDOsNIgNzAaPkfN
9Rqt4ccJKGVV9XyE1bljwPjEE05uRYs8/Dg1i0xw3dc4gl8mtbqDGKL59OBjbD4R
9oTWBfy20rW1e8wW4kEJBMj46B8o/LrPel5jzYxrFFf58S+wsq5e94OCYoFm+Ay5
JnSb7rTCy7BBf7TlqNSO1BlQb6u5xu04jHk5dDBzoM90DuoOXaO0
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:58:25 2025 by rpki-client