Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e38352e3134362e302f32332d3332203d3e203531313637.roa
File: 34352e38352e3134362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: ZcS1L9fBhgZ2lavDqg3y7VbiHvk29HgQZ3njbT+7LT4=
Subject key identifier: F4:B5:95:94:36:EA:68:0A:21:31:BE:54:89:E1:EF:DB:42:D5:11:BA
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 4F6E6C0AA4F869BC5C34D5C80AA6C34085C7BF70
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e38352e3134362e302f32332d3332203d3e203531313637.roa
Signing time: Mon 26 Feb 2024 08:52:56 +0000
ROA not before: Mon 26 Feb 2024 08:47:56 +0000
ROA not after: Mon 24 Feb 2025 08:52:56 +0000
asID: 51167
IP address blocks: 45.85.146.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:6e:6c:0a:a4:f8:69:bc:5c:34:d5:c8:0a:a6:c3:40:85:c7:bf:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Feb 26 08:47:56 2024 GMT
Not After : Feb 24 08:52:56 2025 GMT
Subject: CN=F4B5959436EA680A2131BE5489E1EFDB42D511BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:69:3c:d5:9b:59:83:4e:4d:b9:03:fb:d8:
45:a3:82:3f:0e:4c:ec:03:78:d8:15:e1:d7:ec:9a:
3c:c4:6f:8d:d9:4b:7b:2d:bd:88:85:ac:ac:a7:87:
14:2a:01:7a:16:14:57:6e:de:d7:1a:6e:b1:c4:08:
30:65:bd:cc:02:ea:b1:7b:81:9a:31:c8:17:1f:d0:
b4:99:72:80:71:9f:96:eb:ed:37:71:b6:19:bd:59:
82:2b:6c:30:6e:59:54:f6:a9:ba:d1:d5:bf:58:5a:
88:53:d0:1e:3c:47:78:3e:1d:93:36:88:6c:27:3c:
cd:59:22:97:c3:8d:1e:15:7c:d1:7e:ff:6f:34:7d:
cb:40:7b:6a:c8:06:9f:09:e3:7f:44:6d:87:c8:dc:
d5:f5:14:d5:85:ae:b3:69:9c:83:c9:28:e5:6c:4f:
c6:bc:37:30:a1:67:69:36:fa:57:5d:a9:ee:c8:d8:
5e:61:23:c2:ff:11:75:83:9d:d3:0f:d9:b6:59:6d:
2c:9c:6d:f9:92:e2:c4:d2:2d:67:17:0a:83:45:9a:
07:72:48:ea:a7:b4:1a:54:a3:2c:f4:70:42:64:a2:
db:c6:b7:fc:85:e7:c7:18:72:c2:3f:1b:29:3e:d0:
5b:36:80:3e:cf:f6:11:46:3d:b0:f4:23:84:01:83:
7b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B5:95:94:36:EA:68:0A:21:31:BE:54:89:E1:EF:DB:42:D5:11:BA
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e38352e3134362e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.146.0/23
Signature Algorithm: sha256WithRSAEncryption
21:89:e2:3d:2c:58:bf:cc:e9:39:74:fd:ff:20:79:7b:55:77:
97:6a:74:e3:18:e0:9c:1f:1a:0e:f8:45:69:2b:af:d9:3b:0f:
77:03:49:78:9b:53:91:c9:cd:45:84:56:57:6f:28:ce:0c:a3:
9d:84:43:b2:c2:65:33:f3:d3:04:38:02:3e:d3:7f:71:9f:cb:
4f:b0:18:11:06:b1:f0:56:ac:02:6a:98:94:22:6e:2c:d7:a6:
e8:a7:a3:3d:13:64:ed:4f:27:21:87:c4:63:c4:68:cd:95:00:
ef:c9:92:fb:89:41:55:7c:de:45:cf:3f:16:93:eb:ea:69:14:
6e:80:34:ab:c6:c0:28:7f:db:00:9d:5b:9f:1d:eb:38:a4:06:
d8:58:ca:a4:6b:d4:5a:11:b0:8d:aa:97:93:2d:ca:98:50:3d:
a7:ac:33:6e:12:8b:93:14:d4:4e:5b:82:7e:60:ce:ce:48:de:
c3:d3:d3:ec:05:94:49:f7:7a:19:e3:ea:95:fb:9e:24:fa:56:
af:6c:a4:59:01:18:72:21:5f:ba:da:e3:14:24:45:f7:00:10:
d2:ac:90:53:3b:79:77:2a:ed:37:34:c5:5d:4e:ff:db:68:3c:
00:68:0c:43:bc:d7:ef:a6:0b:62:4b:02:63:a2:11:7e:0a:01:
97:3a:ac:e1
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUT25sCqT4abxcNNXICqbDQIXHv3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhmYjliYTgyN2U2ZjEwYTdhZjM3NDkwODAzZGQ1YTA3
NjM5NzIzNTAeFw0yNDAyMjYwODQ3NTZaFw0yNTAyMjQwODUyNTZaMDMxMTAvBgNV
BAMTKEY0QjU5NTk0MzZFQTY4MEEyMTMxQkU1NDg5RTFFRkRCNDJENTExQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEpGk81ZtZg05NuQP72EWjgj8O
TOwDeNgV4dfsmjzEb43ZS3stvYiFrKynhxQqAXoWFFdu3tcabrHECDBlvcwC6rF7
gZoxyBcf0LSZcoBxn5br7Tdxthm9WYIrbDBuWVT2qbrR1b9YWohT0B48R3g+HZM2
iGwnPM1ZIpfDjR4VfNF+/280fctAe2rIBp8J439EbYfI3NX1FNWFrrNpnIPJKOVs
T8a8NzChZ2k2+lddqe7I2F5hI8L/EXWDndMP2bZZbSycbfmS4sTSLWcXCoNFmgdy
SOqntBpUoyz0cEJkotvGt/yF58cYcsI/Gyk+0Fs2gD7P9hFGPbD0I4QBg3uLAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU9LWVlDbqaAohMb5UieHv20LVEbowHwYDVR0j
BBgwFoAUCPubqCfm8Qp683SQgD3VoHY5cjUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzIvMDhGQjlCQTgyN0U2RjEwQTdBRjM3NDkwODAzREQ1QTA3NjM5NzIzNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NQdWJxQ2ZtOFFwNjgzU1FnRDNWb0hZ
NWNqVS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIvMzQzNTJlMzgzNTJlMzEzNDM2
MmUzMDJmMzIzMzJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS1V
kjANBgkqhkiG9w0BAQsFAAOCAQEAIYniPSxYv8zpOXT9/yB5e1V3l2p04xjgnB8a
DvhFaSuv2TsPdwNJeJtTkcnNRYRWV28ozgyjnYRDssJlM/PTBDgCPtN/cZ/LT7AY
EQax8FasAmqYlCJuLNem6KejPRNk7U8nIYfEY8RozZUA78mS+4lBVXzeRc8/FpPr
6mkUboA0q8bAKH/bAJ1bnx3rOKQG2FjKpGvUWhGwjaqXky3KmFA9p6wzbhKLkxTU
TluCfmDOzkjew9PT7AWUSfd6GePqlfueJPpWr2ykWQEYciFfutrjFCRF9wAQ0qyQ
Uzt5dyrtNzTFXU7/22g8AGgMQ7zX76YLYksCY6IRfgoBlzqs4Q==
-----END CERTIFICATE-----
Generated at Sun May 12 14:13:08 2024 by rpki-client on console-ams.rpki-client.org