Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e34322e39382e302f32342d3234203d3e20313336373837.roa
File: 3139332e34322e39382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: OcKSOClibQ7V049sxgtPwDqjL8eqqSsWUl+vCetExMo=
Subject key identifier: 89:CE:7B:82:4E:C1:0F:8C:DA:AE:81:18:5F:58:96:71:3F:C0:28:29
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 63599AC9B68C37817F74B737C0D2B89072224CFF
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e34322e39382e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 01 Apr 2024 14:03:18 +0000
ROA not before: Mon 01 Apr 2024 13:58:18 +0000
ROA not after: Mon 31 Mar 2025 14:03:18 +0000
asID: 136787
IP address blocks: 193.42.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:59:9a:c9:b6:8c:37:81:7f:74:b7:37:c0:d2:b8:90:72:22:4c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Apr 1 13:58:18 2024 GMT
Not After : Mar 31 14:03:18 2025 GMT
Subject: CN=89CE7B824EC10F8CDAAE81185F5896713FC02829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:36:25:49:ea:2c:17:84:17:f8:14:e0:22:f6:
96:97:89:c5:a9:5b:c7:42:26:0b:65:04:23:c6:af:
f4:ce:07:72:7f:b6:f6:76:15:72:a1:7e:24:94:fc:
86:59:20:02:40:80:7e:e9:15:02:5d:ec:cc:d2:a8:
da:7d:29:15:52:e7:8a:7f:ba:b7:3f:84:be:30:39:
cb:2b:a8:e3:4b:2b:96:ad:f8:c9:a7:73:da:e2:ef:
67:5f:ac:a8:d1:ed:df:34:e9:84:6b:a3:7d:6a:c9:
71:c6:48:59:b4:18:3c:21:17:d9:7f:1e:29:86:85:
36:0c:3f:ac:bc:32:d3:0b:51:a9:a6:4f:b5:b3:dd:
a3:76:c1:9f:e9:96:03:40:20:17:66:38:9d:ba:89:
7b:35:e0:30:06:21:84:d3:b8:c0:71:e2:b3:5f:8e:
98:51:44:ff:71:0c:0c:8d:e6:df:ac:66:9c:8c:84:
02:be:49:0a:1b:e9:46:c7:30:fc:92:49:51:8b:0d:
55:d3:50:d5:60:2a:73:d5:5e:34:72:09:ee:a8:2e:
7d:87:1f:ca:cf:43:33:81:0d:99:33:23:14:01:ba:
61:65:cc:b6:bc:82:6a:40:85:08:c4:41:52:b8:8e:
a9:36:3e:1c:80:7c:93:fe:c1:be:8f:00:48:87:6b:
3e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CE:7B:82:4E:C1:0F:8C:DA:AE:81:18:5F:58:96:71:3F:C0:28:29
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e34322e39382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.98.0/24
Signature Algorithm: sha256WithRSAEncryption
24:28:23:95:ce:e3:64:6b:37:a5:5c:99:e5:05:63:b0:99:6f:
46:81:9e:05:7c:de:23:ac:13:0d:33:d2:4a:5a:e6:f1:76:df:
4f:e8:62:9b:06:d5:c7:bf:94:73:09:94:60:ef:9d:74:52:e8:
81:40:85:a7:90:4e:9d:26:c1:7a:94:07:ce:79:ef:09:a1:10:
7f:7e:cd:0a:f2:c1:5a:26:e8:04:d4:40:d8:36:13:dc:c2:64:
a5:63:21:11:51:57:a9:0b:56:85:3b:28:6a:c2:b8:c8:05:0a:
2b:b9:f8:6d:f0:ce:2a:85:6c:00:55:41:5b:8e:c8:73:1c:74:
ab:78:ff:7c:8a:43:f2:b9:d6:79:fe:2f:3d:f0:9a:59:c7:88:
b4:a1:11:0d:06:d0:78:f3:a8:fb:f5:4d:6d:fb:bd:ff:f9:05:
ca:07:a6:27:d9:1b:e8:12:56:8e:72:aa:7e:06:96:1f:77:59:
68:5e:2f:2d:31:83:5b:47:a1:0f:c8:be:91:85:b9:f6:7f:64:
19:2f:76:01:2f:c8:e6:35:49:df:af:dd:2a:78:7d:8b:bf:27:
09:0c:22:68:eb:da:a5:49:f1:d5:20:dd:26:02:5b:47:0b:aa:
4e:aa:85:92:0b:b1:ba:a6:8c:8d:9c:28:56:af:14:ef:56:7d:
72:fe:3b:94
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUY1maybaMN4F/dLc3wNK4kHIiTP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhmYjliYTgyN2U2ZjEwYTdhZjM3NDkwODAzZGQ1YTA3
NjM5NzIzNTAeFw0yNDA0MDExMzU4MThaFw0yNTAzMzExNDAzMThaMDMxMTAvBgNV
BAMTKDg5Q0U3QjgyNEVDMTBGOENEQUFFODExODVGNTg5NjcxM0ZDMDI4MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTNiVJ6iwXhBf4FOAi9paXicWp
W8dCJgtlBCPGr/TOB3J/tvZ2FXKhfiSU/IZZIAJAgH7pFQJd7MzSqNp9KRVS54p/
urc/hL4wOcsrqONLK5at+Mmnc9ri72dfrKjR7d806YRro31qyXHGSFm0GDwhF9l/
HimGhTYMP6y8MtMLUammT7Wz3aN2wZ/plgNAIBdmOJ26iXs14DAGIYTTuMBx4rNf
jphRRP9xDAyN5t+sZpyMhAK+SQob6UbHMPySSVGLDVXTUNVgKnPVXjRyCe6oLn2H
H8rPQzOBDZkzIxQBumFlzLa8gmpAhQjEQVK4jqk2PhyAfJP+wb6PAEiHaz7JAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUic57gk7BD4zaroEYX1iWcT/AKCkwHwYDVR0j
BBgwFoAUCPubqCfm8Qp683SQgD3VoHY5cjUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzIvMDhGQjlCQTgyN0U2RjEwQTdBRjM3NDkwODAzREQ1QTA3NjM5NzIzNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NQdWJxQ2ZtOFFwNjgzU1FnRDNWb0hZ
NWNqVS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIvMzEzOTMzMmUzNDMyMmUzOTM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
wSpiMA0GCSqGSIb3DQEBCwUAA4IBAQAkKCOVzuNkazelXJnlBWOwmW9GgZ4FfN4j
rBMNM9JKWubxdt9P6GKbBtXHv5RzCZRg7510UuiBQIWnkE6dJsF6lAfOee8JoRB/
fs0K8sFaJugE1EDYNhPcwmSlYyERUVepC1aFOyhqwrjIBQorufht8M4qhWwAVUFb
jshzHHSreP98ikPyudZ5/i898JpZx4i0oRENBtB486j79U1t+73/+QXKB6Yn2Rvo
ElaOcqp+BpYfd1loXi8tMYNbR6EPyL6Rhbn2f2QZL3YBL8jmNUnfr90qeH2LvycJ
DCJo69qlSfHVIN0mAltHC6pOqoWSC7G6poyNnChWrxTvVn1y/juU
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:44 2024 by rpki-client on console-ams.rpki-client.org