Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e3235352e3133312e302f32342d3332203d3e203531313637.roa
File: 3138352e3235352e3133312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: V1qzUWsEviqyPS1mFPdxka23Sk+8TWgznYqjoZg98l4=
Subject key identifier: AF:AE:DC:F1:38:BD:CC:4B:41:E6:70:2C:64:F2:0B:BE:98:05:5B:BF
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 16CF39DA8D7E730695DC78A253627CCC6F25AAAA
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e3235352e3133312e302f32342d3332203d3e203531313637.roa
Signing time: Mon 26 Feb 2024 08:52:46 +0000
ROA not before: Mon 26 Feb 2024 08:47:46 +0000
ROA not after: Mon 24 Feb 2025 08:52:46 +0000
asID: 51167
IP address blocks: 185.255.131.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:cf:39:da:8d:7e:73:06:95:dc:78:a2:53:62:7c:cc:6f:25:aa:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Feb 26 08:47:46 2024 GMT
Not After : Feb 24 08:52:46 2025 GMT
Subject: CN=AFAEDCF138BDCC4B41E6702C64F20BBE98055BBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b8:0a:1f:b5:d0:5b:ec:76:ac:73:a1:60:fa:
a3:2c:86:8b:39:9c:e6:a5:d6:5e:e8:8b:d9:55:c4:
90:37:26:89:58:63:3a:2f:b7:0a:66:91:7d:48:16:
39:14:75:11:cb:b8:20:fe:30:32:75:e4:f3:3f:df:
43:5d:a4:31:21:bd:d1:c3:ce:75:d2:44:ff:6d:1a:
fc:b4:27:7d:cf:04:b9:f4:e2:23:07:4e:35:dc:1e:
3e:e2:62:62:f5:17:d4:82:39:20:8e:89:48:26:17:
58:7f:d2:0a:01:a0:01:d4:65:8a:51:0c:67:f5:4b:
12:53:9a:8f:19:cd:78:41:31:31:71:3f:7e:f5:ac:
4f:0b:33:56:49:f4:26:ce:45:86:95:2a:d5:b5:e2:
39:31:68:e2:18:21:f5:ce:7e:ce:48:ab:f1:36:e7:
78:f3:25:ac:e3:68:8a:e3:21:09:ee:94:25:d0:e4:
34:6d:88:fa:eb:1c:20:a6:d6:dc:a2:aa:f8:52:07:
7c:9a:8d:c2:4d:2d:f3:53:07:ca:87:f3:36:7d:4e:
26:3a:d7:8c:8f:bb:7b:68:a7:80:72:76:fb:25:f5:
8f:84:0c:db:b3:84:63:3c:ca:6a:6d:97:de:1b:3d:
08:e3:ca:53:fa:48:2a:f6:66:3d:63:76:8f:e0:ce:
1c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AE:DC:F1:38:BD:CC:4B:41:E6:70:2C:64:F2:0B:BE:98:05:5B:BF
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e3235352e3133312e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.131.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:75:b3:bb:ea:d1:f7:31:8a:45:68:27:93:a6:ed:f8:c3:80:
cb:93:fa:a6:14:e6:a6:12:fa:54:ee:40:0b:f1:98:08:7a:67:
35:c1:a9:e8:3f:08:1e:b3:f1:0b:f1:d9:9d:ae:82:b7:b1:6c:
3e:ff:57:7f:be:75:96:30:6f:63:5d:21:6b:ba:9c:68:f1:ea:
a1:81:f3:ad:ef:d9:3a:eb:96:6c:14:2c:51:70:16:ea:f5:ba:
5d:4a:d9:a1:31:7e:a6:99:0f:11:17:f9:47:2f:45:77:a3:fd:
a2:30:f7:33:77:96:dd:ee:c1:24:61:43:99:ce:42:a6:4a:f8:
e6:c5:1c:a7:c4:5b:dd:ec:1f:33:52:b4:2d:86:78:7b:28:ff:
42:14:50:8e:ed:cf:c2:ed:6e:79:b1:40:83:39:32:0e:ae:ce:
02:6c:c4:e5:f2:fc:71:44:50:9a:a4:58:c7:9a:f3:22:b2:b1:
ef:36:bd:3e:1d:e8:f0:bb:25:05:f3:84:e4:46:ab:2b:a5:18:
20:32:bf:88:fe:a0:f6:f1:46:bb:45:aa:2f:67:d9:24:a5:f5:
d1:23:f9:1c:69:84:35:e2:dd:c4:19:50:9b:6a:41:28:8e:94:
f3:1c:32:f0:0f:28:35:c6:af:04:98:cd:7a:e5:62:f6:af:79:
57:a3:e7:c0
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUFs852o1+cwaV3HiiU2J8zG8lqqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhmYjliYTgyN2U2ZjEwYTdhZjM3NDkwODAzZGQ1YTA3
NjM5NzIzNTAeFw0yNDAyMjYwODQ3NDZaFw0yNTAyMjQwODUyNDZaMDMxMTAvBgNV
BAMTKEFGQUVEQ0YxMzhCRENDNEI0MUU2NzAyQzY0RjIwQkJFOTgwNTVCQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVuAoftdBb7Hasc6Fg+qMshos5
nOal1l7oi9lVxJA3JolYYzovtwpmkX1IFjkUdRHLuCD+MDJ15PM/30NdpDEhvdHD
znXSRP9tGvy0J33PBLn04iMHTjXcHj7iYmL1F9SCOSCOiUgmF1h/0goBoAHUZYpR
DGf1SxJTmo8ZzXhBMTFxP371rE8LM1ZJ9CbORYaVKtW14jkxaOIYIfXOfs5Iq/E2
53jzJazjaIrjIQnulCXQ5DRtiPrrHCCm1tyiqvhSB3yajcJNLfNTB8qH8zZ9TiY6
14yPu3top4Bydvsl9Y+EDNuzhGM8ymptl94bPQjjylP6SCr2Zj1jdo/gzhwNAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUr67c8Ti9zEtB5nAsZPILvpgFW78wHwYDVR0j
BBgwFoAUCPubqCfm8Qp683SQgD3VoHY5cjUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzIvMDhGQjlCQTgyN0U2RjEwQTdBRjM3NDkwODAzREQ1QTA3NjM5NzIzNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NQdWJxQ2ZtOFFwNjgzU1FnRDNWb0hZ
NWNqVS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIvMzEzODM1MmUzMjM1MzUyZTMx
MzMzMTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5/4MwDQYJKoZIhvcNAQELBQADggEBAG51s7vq0fcxikVoJ5Om7fjDgMuT+qYU
5qYS+lTuQAvxmAh6ZzXBqeg/CB6z8Qvx2Z2ugrexbD7/V3++dZYwb2NdIWu6nGjx
6qGB863v2TrrlmwULFFwFur1ul1K2aExfqaZDxEX+UcvRXej/aIw9zN3lt3uwSRh
Q5nOQqZK+ObFHKfEW93sHzNStC2GeHso/0IUUI7tz8LtbnmxQIM5Mg6uzgJsxOXy
/HFEUJqkWMea8yKyse82vT4d6PC7JQXzhORGqyulGCAyv4j+oPbxRrtFqi9n2SSl
9dEj+RxphDXi3cQZUJtqQSiOlPMcMvAPKDXGrwSYzXrlYvaveVej58A=
-----END CERTIFICATE-----
Generated at Mon May 13 08:54:17 2024 by rpki-client on console-ams.rpki-client.org