Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136372e38382e33322e302f32322d3234203d3e203437353833.roa
File: 3136372e38382e33322e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: nVDjZ/AAU/BtMq3QCOzVlV4/Ya9pwFsa5qsEIeLRgQk=
Subject key identifier: D7:E7:63:1E:D1:1B:FE:55:C9:82:BA:05:56:D9:19:5C:6C:AA:E9:F8
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 182DDE4D80B8982BC2A706A6662E8BB84DCF273E
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136372e38382e33322e302f32322d3234203d3e203437353833.roa
Signing time: Thu 20 Jun 2024 16:00:09 +0000
ROA not before: Thu 20 Jun 2024 15:55:09 +0000
ROA not after: Thu 19 Jun 2025 16:00:09 +0000
asID: 47583
IP address blocks: 167.88.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:2d:de:4d:80:b8:98:2b:c2:a7:06:a6:66:2e:8b:b8:4d:cf:27:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jun 20 15:55:09 2024 GMT
Not After : Jun 19 16:00:09 2025 GMT
Subject: CN=D7E7631ED11BFE55C982BA0556D9195C6CAAE9F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:91:a6:b8:8f:49:ed:c8:5a:3c:2e:1f:9d:
73:cb:b3:a7:ac:3b:71:df:ac:99:dd:55:b9:89:04:
2b:4b:c0:b7:0b:9f:4c:12:c2:ba:86:81:03:24:4d:
5e:c0:07:2e:85:b5:6a:ac:8d:29:8c:62:25:a4:b4:
60:f8:ce:1d:98:0a:80:3f:e4:d7:0f:6c:c3:f8:23:
54:ce:48:cf:71:d9:db:b8:d5:64:a0:3d:ed:97:fe:
24:b0:b6:96:28:c8:cc:6e:50:49:be:e4:35:83:41:
e5:14:f3:27:20:09:ae:c5:f5:6b:d4:41:bc:ea:c4:
62:ec:6c:c2:49:f9:a4:4f:ed:c1:82:df:b7:c1:43:
f5:ce:b3:8d:c4:d5:8c:ed:92:19:8a:dd:ab:33:a0:
7a:d6:28:e1:1b:91:ea:32:78:24:e3:4c:15:c1:79:
5b:32:19:ea:b2:eb:94:5f:f5:95:25:b2:da:99:67:
f6:31:f0:24:ac:bd:6c:97:b5:dc:c1:78:8b:42:12:
c9:75:78:0c:67:cd:a4:a8:d8:09:9e:72:00:c3:3f:
0e:11:5d:43:e4:b9:12:63:99:1d:aa:2b:c4:f7:aa:
0a:93:96:c5:3f:f4:a8:a1:40:28:95:56:c8:70:42:
e5:d3:32:dd:e9:82:89:e6:31:a3:97:21:46:f1:6b:
c6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E7:63:1E:D1:1B:FE:55:C9:82:BA:05:56:D9:19:5C:6C:AA:E9:F8
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136372e38382e33322e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.88.32.0/22
Signature Algorithm: sha256WithRSAEncryption
57:49:e8:61:d1:f7:0d:2a:74:60:76:34:b7:99:eb:52:e9:58:
40:a3:66:38:9b:9c:59:e4:ee:b2:97:10:8d:e5:4e:20:ed:79:
4e:81:a6:34:fc:b7:f7:85:f0:f5:e1:8a:0b:51:e7:10:0f:64:
ff:8a:74:52:9c:9a:70:9c:69:e2:d8:20:3b:65:53:c9:2b:db:
22:f2:1d:28:78:8b:8c:d4:cb:e5:b5:a6:17:86:cf:a3:7a:82:
27:10:71:7c:e2:5f:7c:0f:c2:0f:80:d2:15:f7:28:fe:f2:45:
16:66:76:1f:86:90:89:71:1d:f5:71:43:b2:0e:10:01:fb:aa:
da:b9:6f:54:c9:7e:50:9a:17:db:05:41:54:4c:6b:24:7b:1e:
f6:97:9b:fd:08:ad:77:59:23:58:47:bd:f2:62:a2:9d:f6:eb:
44:6a:df:5d:e2:cc:fd:99:49:72:85:e8:b8:67:fd:a0:f2:7b:
ba:0e:bc:b5:02:92:3d:e6:48:49:26:58:3e:ae:7c:ab:ac:96:
73:af:1c:45:c4:e5:b1:1f:37:0a:f5:1b:b5:f2:d4:9f:b2:3e:
51:2e:49:82:c3:42:6c:eb:7e:b4:7d:1c:3d:ff:3f:7b:a7:a4:
1e:eb:4a:ae:c2:0f:eb:26:ad:11:30:61:78:65:61:e5:5f:8c:
6c:cc:d2:77
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUGC3eTYC4mCvCpwamZi6LuE3PJz4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDA2MjAxNTU1MDlaFw0yNTA2MTkxNjAwMDlaMDMxMTAvBgNV
BAMTKEQ3RTc2MzFFRDExQkZFNTVDOTgyQkEwNTU2RDkxOTVDNkNBQUU5RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDqZGmuI9J7chaPC4fnXPLs6es
O3HfrJndVbmJBCtLwLcLn0wSwrqGgQMkTV7ABy6FtWqsjSmMYiWktGD4zh2YCoA/
5NcPbMP4I1TOSM9x2du41WSgPe2X/iSwtpYoyMxuUEm+5DWDQeUU8ycgCa7F9WvU
QbzqxGLsbMJJ+aRP7cGC37fBQ/XOs43E1YztkhmK3aszoHrWKOEbkeoyeCTjTBXB
eVsyGeqy65Rf9ZUlstqZZ/Yx8CSsvWyXtdzBeItCEsl1eAxnzaSo2AmecgDDPw4R
XUPkuRJjmR2qK8T3qgqTlsU/9KihQCiVVshwQuXTMt3pgonmMaOXIUbxa8ZjAgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQU1+djHtEb/lXJgroFVtkZXGyq6fgwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM2MzcyZTM4Mzgy
ZTMzMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCp1ggMA0GCSqGSIb3DQEBCwUAA4IBAQBXSehh0fcNKnRgdjS3metS6VhAo2Y4
m5xZ5O6ylxCN5U4g7XlOgaY0/Lf3hfD14YoLUecQD2T/inRSnJpwnGni2CA7ZVPJ
K9si8h0oeIuM1MvltaYXhs+jeoInEHF84l98D8IPgNIV9yj+8kUWZnYfhpCJcR31
cUOyDhAB+6rauW9UyX5QmhfbBUFUTGskex72l5v9CK13WSNYR73yYqKd9utEat9d
4sz9mUlyhei4Z/2g8nu6Dry1ApI95khJJlg+rnyrrJZzrxxFxOWxHzcK9Ru18tSf
sj5RLkmCw0Js6360fRw9/z97p6Qe60quwg/rJq0RMGF4ZWHlX4xszNJ3
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:44 2024 by rpki-client on console-ams.rpki-client.org