Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3235332e3233352e302f32342d3234203d3e20313336373837.roa
File: 352e3235332e3233352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 5QK2hnGGdj/MIuGMRd8wAjj9z++grqF2AiVguHJX3fY=
Subject key identifier: 83:E1:4A:55:A1:2D:45:B6:D5:8C:DD:3F:4B:CA:29:95:BA:C6:24:6F
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 140F0B69B76EF75BD325CE4E04AB4C9DD069FCE0
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3235332e3233352e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 07 Feb 2024 12:34:01 +0000
ROA not before: Wed 07 Feb 2024 12:29:01 +0000
ROA not after: Wed 05 Feb 2025 12:34:01 +0000
asID: 136787
IP address blocks: 5.253.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:0f:0b:69:b7:6e:f7:5b:d3:25:ce:4e:04:ab:4c:9d:d0:69:fc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Feb 7 12:29:01 2024 GMT
Not After : Feb 5 12:34:01 2025 GMT
Subject: CN=83E14A55A12D45B6D58CDD3F4BCA2995BAC6246F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:76:84:9c:fa:85:f1:21:43:b0:f0:cc:64:10:
61:f2:13:b6:7d:57:71:53:71:28:14:90:cf:ed:5f:
8b:83:f4:fe:cd:47:3e:fa:f2:55:3d:4f:c5:b8:31:
72:1d:14:9a:56:1b:00:20:39:aa:33:4d:b1:b1:e4:
a2:a0:30:30:19:ca:53:2d:6c:88:c3:6a:88:f1:e5:
77:5b:2f:05:25:65:91:cb:e8:27:f6:0d:04:0a:0a:
ad:ab:70:04:94:91:9c:09:03:b9:97:53:71:44:73:
11:80:9b:ab:38:0d:3c:f3:81:4c:a2:8e:97:ce:fb:
ca:7f:4b:56:cb:c5:25:c6:80:84:6d:93:56:ee:77:
45:21:e9:f1:a1:1a:4a:f3:45:1a:60:6f:a1:8d:0c:
92:8a:f6:23:9a:f5:98:c1:ab:c8:38:c6:aa:7d:4e:
3e:c2:cc:b8:ce:e3:7c:b0:3f:a2:dd:99:96:4a:7b:
e9:07:33:e7:eb:ac:15:eb:87:5e:42:5b:b8:0a:7e:
92:5c:80:20:8e:e1:0f:dd:69:38:a9:13:30:a8:6e:
76:92:47:01:c4:07:e5:83:33:5a:ac:19:18:b4:d3:
2f:9a:32:cc:3b:7f:77:08:dc:e2:19:93:f6:c6:15:
44:d0:ad:b7:00:24:46:da:25:cf:ba:40:00:52:2e:
c1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E1:4A:55:A1:2D:45:B6:D5:8C:DD:3F:4B:CA:29:95:BA:C6:24:6F
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3235332e3233352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.235.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:f4:28:88:49:1f:24:33:17:7a:c7:a2:d1:f5:09:92:12:ad:
9c:35:34:7d:76:87:c6:0c:4d:5d:dd:d7:02:f6:69:05:f2:9a:
f5:35:16:20:06:36:93:bc:a2:79:d9:16:55:95:2d:dd:63:37:
57:1e:d2:9b:f4:1c:9b:69:25:87:4b:41:41:ae:20:6e:eb:ae:
84:a6:5a:e0:f2:1e:0a:32:12:30:55:db:7a:97:59:a7:b0:03:
f4:6e:bd:07:a7:7c:92:ea:e8:14:de:97:cf:01:04:d6:a9:4f:
ce:27:b0:77:f6:21:55:da:be:29:d6:7b:c1:72:cf:b0:69:f5:
e7:87:06:46:eb:d7:f4:ae:e4:07:a3:9c:63:48:79:83:51:90:
a3:7c:2a:8a:1e:db:1f:25:2a:a2:45:21:b8:48:24:71:8f:61:
d7:28:4a:70:85:4e:32:a6:4e:24:4e:1d:b9:30:5f:84:72:99:
b4:0d:b2:1d:18:aa:5b:1d:0d:be:db:39:4f:41:b9:ce:f6:45:
25:08:f9:4a:22:6f:80:3a:f8:b2:12:5f:4b:f2:83:ac:37:07:
ff:5f:a9:96:45:7c:ec:bd:0c:e5:d9:06:72:0d:f2:f2:19:9c:
d2:73:50:f0:0f:ab:86:49:ee:a2:14:66:a0:13:a8:cc:c2:f4:
cc:1c:38:37
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUFA8Labdu91vTJc5OBKtMndBp/OAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhmYjliYTgyN2U2ZjEwYTdhZjM3NDkwODAzZGQ1YTA3
NjM5NzIzNTAeFw0yNDAyMDcxMjI5MDFaFw0yNTAyMDUxMjM0MDFaMDMxMTAvBgNV
BAMTKDgzRTE0QTU1QTEyRDQ1QjZENThDREQzRjRCQ0EyOTk1QkFDNjI0NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZdoSc+oXxIUOw8MxkEGHyE7Z9
V3FTcSgUkM/tX4uD9P7NRz768lU9T8W4MXIdFJpWGwAgOaozTbGx5KKgMDAZylMt
bIjDaojx5XdbLwUlZZHL6Cf2DQQKCq2rcASUkZwJA7mXU3FEcxGAm6s4DTzzgUyi
jpfO+8p/S1bLxSXGgIRtk1bud0Uh6fGhGkrzRRpgb6GNDJKK9iOa9ZjBq8g4xqp9
Tj7CzLjO43ywP6LdmZZKe+kHM+frrBXrh15CW7gKfpJcgCCO4Q/daTipEzCobnaS
RwHEB+WDM1qsGRi00y+aMsw7f3cI3OIZk/bGFUTQrbcAJEbaJc+6QABSLsFBAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUg+FKVaEtRbbVjN0/S8oplbrGJG8wHwYDVR0j
BBgwFoAUCPubqCfm8Qp683SQgD3VoHY5cjUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzIvMDhGQjlCQTgyN0U2RjEwQTdBRjM3NDkwODAzREQ1QTA3NjM5NzIzNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NQdWJxQ2ZtOFFwNjgzU1FnRDNWb0hZ
NWNqVS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIvMzUyZTMyMzUzMzJlMzIzMzM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
Bf3rMA0GCSqGSIb3DQEBCwUAA4IBAQBe9CiISR8kMxd6x6LR9QmSEq2cNTR9dofG
DE1d3dcC9mkF8pr1NRYgBjaTvKJ52RZVlS3dYzdXHtKb9BybaSWHS0FBriBu666E
plrg8h4KMhIwVdt6l1mnsAP0br0Hp3yS6ugU3pfPAQTWqU/OJ7B39iFV2r4p1nvB
cs+wafXnhwZG69f0ruQHo5xjSHmDUZCjfCqKHtsfJSqiRSG4SCRxj2HXKEpwhU4y
pk4kTh25MF+Ecpm0DbIdGKpbHQ2+2zlPQbnO9kUlCPlKIm+AOviyEl9L8oOsNwf/
X6mWRXzsvQzl2QZyDfLyGZzSc1DwD6uGSe6iFGagE6jMwvTMHDg3
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:44 2024 by rpki-client on console-ams.rpki-client.org