Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3138302e3134382e302f32342d3234203d3e20323639303730.roa
File: 352e3138302e3134382e302f32342d3234203d3e20323639303730.roa (raw, json)
Hash identifier: bDczGavqeSu2ndIWS0ApglSJarmeHS0GKz42MO8+xbM=
Subject key identifier: 1F:0C:EE:07:87:12:A2:6A:9F:F8:EB:B2:64:E0:1D:2B:02:F8:48:63
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 599A6AA50C0ACDFE9999A4FFEEC686930EFABEB8
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3138302e3134382e302f32342d3234203d3e20323639303730.roa
Signing time: Wed 27 Mar 2024 09:11:40 +0000
ROA not before: Wed 27 Mar 2024 09:06:40 +0000
ROA not after: Wed 26 Mar 2025 09:11:40 +0000
asID: 269070
IP address blocks: 5.180.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:9a:6a:a5:0c:0a:cd:fe:99:99:a4:ff:ee:c6:86:93:0e:fa:be:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 09:06:40 2024 GMT
Not After : Mar 26 09:11:40 2025 GMT
Subject: CN=1F0CEE078712A26A9FF8EBB264E01D2B02F84863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:f9:d3:1a:dd:16:f5:e7:0b:db:14:6c:03:bb:
6a:fd:8a:0a:b0:fc:61:43:c4:26:32:83:11:56:b2:
ee:b0:6e:4e:99:48:34:3c:3f:8f:5e:97:52:95:05:
94:20:e2:83:b3:b6:15:18:0e:77:b6:b4:20:a3:1a:
5b:3a:52:94:6f:0d:bf:f1:4d:55:d1:1e:6e:e3:43:
4d:28:1c:8f:7c:29:17:b3:07:06:16:a0:67:37:40:
98:0a:e2:d9:a6:6e:bf:9f:d9:87:ba:0f:73:ca:8a:
74:68:80:9e:90:d2:ac:32:0f:21:c0:73:52:20:7b:
da:93:2a:35:44:d5:79:2e:99:39:b5:fa:b8:c8:b5:
f6:6c:ec:26:a5:f9:fb:d4:51:7e:45:2a:f9:02:31:
36:e0:20:8c:d3:87:8b:4e:d5:69:50:04:ea:b9:93:
3e:b3:c1:e6:e7:2a:0e:0b:a1:d6:a1:75:09:32:ac:
9b:7d:78:8f:d9:bf:1e:e0:a4:64:32:e8:99:a5:79:
7e:a2:2a:f6:e5:db:a1:7e:e2:58:d2:e4:ad:6f:e6:
a0:48:e2:c9:48:20:d9:4c:a0:ae:65:7a:9b:91:ac:
72:2e:ef:61:69:b5:6a:53:1e:9a:13:31:3a:33:b9:
82:18:6e:20:60:71:ed:f6:ab:b7:27:36:bb:47:fc:
50:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0C:EE:07:87:12:A2:6A:9F:F8:EB:B2:64:E0:1D:2B:02:F8:48:63
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3138302e3134382e302f32342d3234203d3e20323639303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.148.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:63:19:1f:81:e2:e0:18:4a:9c:be:73:5b:3e:df:e2:fd:9e:
61:88:68:7b:85:bf:92:f6:dd:63:8d:72:d4:4e:ae:b1:8b:56:
f2:a5:0c:49:95:db:03:a3:33:86:9f:03:47:86:42:f3:97:9d:
05:79:0b:df:1d:12:5f:03:5e:1b:30:85:07:6e:90:81:0a:c2:
10:b2:5d:60:ec:87:c2:61:4a:36:e8:e6:46:53:58:8b:7d:20:
37:31:ac:72:8b:ef:4b:a2:79:ea:e0:eb:e1:9a:00:52:27:b7:
26:bf:e0:ac:d3:1b:37:2c:a8:3e:8c:3b:09:fc:dd:d7:8f:71:
a9:d6:cf:fa:1b:58:bb:6d:a6:fe:9b:5e:6f:7c:d6:de:74:d4:
4b:35:2c:5f:bc:00:08:71:4a:24:5a:26:f0:f9:4b:73:9b:3b:
ad:30:7d:ef:5a:05:39:b7:64:54:7d:55:ff:8c:82:41:4f:c7:
2b:21:f4:e6:60:70:dc:d8:92:4e:34:fd:71:de:a2:f9:2d:ee:
6c:a5:9a:74:86:06:5b:73:31:32:fe:71:38:87:3f:56:2c:5a:
28:15:78:2b:4a:ea:a1:06:46:b5:9f:ea:f4:9b:3a:d7:7f:02:
31:51:be:ac:96:ee:61:bc:25:66:44:03:c3:c9:1e:9d:c1:1e:
52:4a:ef:ad
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUWZpqpQwKzf6ZmaT/7saGkw76vrgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhmYjliYTgyN2U2ZjEwYTdhZjM3NDkwODAzZGQ1YTA3
NjM5NzIzNTAeFw0yNDAzMjcwOTA2NDBaFw0yNTAzMjYwOTExNDBaMDMxMTAvBgNV
BAMTKDFGMENFRTA3ODcxMkEyNkE5RkY4RUJCMjY0RTAxRDJCMDJGODQ4NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4+dMa3Rb15wvbFGwDu2r9igqw
/GFDxCYygxFWsu6wbk6ZSDQ8P49el1KVBZQg4oOzthUYDne2tCCjGls6UpRvDb/x
TVXRHm7jQ00oHI98KRezBwYWoGc3QJgK4tmmbr+f2Ye6D3PKinRogJ6Q0qwyDyHA
c1Ige9qTKjVE1XkumTm1+rjItfZs7Cal+fvUUX5FKvkCMTbgIIzTh4tO1WlQBOq5
kz6zwebnKg4LodahdQkyrJt9eI/Zvx7gpGQy6JmleX6iKvbl26F+4ljS5K1v5qBI
4slIINlMoK5lepuRrHIu72FptWpTHpoTMTozuYIYbiBgce32q7cnNrtH/FD1AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUHwzuB4cSomqf+OuyZOAdKwL4SGMwHwYDVR0j
BBgwFoAUCPubqCfm8Qp683SQgD3VoHY5cjUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzIvMDhGQjlCQTgyN0U2RjEwQTdBRjM3NDkwODAzREQ1QTA3NjM5NzIzNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NQdWJxQ2ZtOFFwNjgzU1FnRDNWb0hZ
NWNqVS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIvMzUyZTMxMzgzMDJlMzEzNDM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzAzNzMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
BbSUMA0GCSqGSIb3DQEBCwUAA4IBAQAOYxkfgeLgGEqcvnNbPt/i/Z5hiGh7hb+S
9t1jjXLUTq6xi1bypQxJldsDozOGnwNHhkLzl50FeQvfHRJfA14bMIUHbpCBCsIQ
sl1g7IfCYUo26OZGU1iLfSA3Maxyi+9Lonnq4OvhmgBSJ7cmv+Cs0xs3LKg+jDsJ
/N3Xj3Gp1s/6G1i7bab+m15vfNbedNRLNSxfvAAIcUokWibw+UtzmzutMH3vWgU5
t2RUfVX/jIJBT8crIfTmYHDc2JJONP1x3qL5Le5spZp0hgZbczEy/nE4hz9WLFoo
FXgrSuqhBka1n+r0mzrXfwIxUb6slu5hvCVmRAPDyR6dwR5SSu+t
-----END CERTIFICATE-----
Generated at Thu Apr 25 18:15:05 2024 by rpki-client on console-ams.rpki-client.org