Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39322e3131392e38302e302f32342d3234203d3e20313336373837.roa
File: 39322e3131392e38302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: /lokFuwojIRemVC7aQxcr/Z0SuZXmvJdGuCgF24faUs=
Subject key identifier: CD:D0:55:2E:EB:0F:77:CB:D8:FA:4C:EF:E0:AC:AF:EC:A1:8D:94:67
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 69AC66C87ED9565DB4366AB35CC3BD4217F80C6B
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39322e3131392e38302e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 07 Feb 2024 12:33:51 +0000
ROA not before: Wed 07 Feb 2024 12:28:51 +0000
ROA not after: Wed 05 Feb 2025 12:33:51 +0000
asID: 136787
IP address blocks: 92.119.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ac:66:c8:7e:d9:56:5d:b4:36:6a:b3:5c:c3:bd:42:17:f8:0c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Feb 7 12:28:51 2024 GMT
Not After : Feb 5 12:33:51 2025 GMT
Subject: CN=CDD0552EEB0F77CBD8FA4CEFE0ACAFECA18D9467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:68:29:93:7a:d3:18:b6:46:5a:9a:12:bf:
25:69:12:55:dc:0d:d9:ba:4f:02:e3:c2:07:8c:43:
16:72:92:20:40:48:04:0d:ca:de:9c:c7:ff:59:a2:
51:c7:7c:84:c0:6f:cf:17:61:2e:41:c4:09:a7:67:
66:63:3a:76:5e:21:3a:1f:ae:10:25:37:07:03:08:
09:f6:46:03:1f:df:04:b4:4e:af:e3:1d:4e:5f:74:
26:a2:58:61:0e:43:07:35:69:e1:cd:00:3c:56:de:
36:0e:cf:7e:73:2c:43:03:d4:85:a7:70:8e:8c:84:
60:a6:c7:9c:1c:59:d1:5b:7a:12:82:a0:04:de:09:
1d:59:92:29:fb:39:23:35:12:9c:f8:5d:81:17:1a:
e4:be:1f:d0:95:69:47:49:39:62:ec:dd:cf:d7:f1:
a6:92:6d:28:6a:e8:64:24:a8:d2:42:70:61:a5:75:
ca:f3:30:5d:4a:e4:2e:13:e9:66:00:36:36:04:18:
d3:5f:6d:a7:68:12:d1:4c:17:d0:0a:82:9c:68:21:
1c:15:2f:a2:a8:47:e2:e4:62:4f:d7:2f:54:56:1c:
92:fa:64:81:9f:a3:a6:07:65:66:81:33:7a:4f:8b:
1c:e3:00:98:e5:f7:f6:3f:9a:13:03:1b:41:d9:8c:
f8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D0:55:2E:EB:0F:77:CB:D8:FA:4C:EF:E0:AC:AF:EC:A1:8D:94:67
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39322e3131392e38302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.80.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:0a:49:e8:41:9f:e2:4a:e5:99:2c:1e:7f:a5:f6:84:48:50:
f7:ef:ea:7c:b4:2e:13:09:f3:e3:ea:7c:d2:aa:f6:87:28:35:
8c:8a:f6:55:ba:be:42:65:e4:d5:12:61:fb:a6:9c:9c:ad:5b:
6f:d5:1e:3c:73:6d:2a:12:32:d4:36:5c:ab:2f:fd:70:5c:e4:
50:64:a2:83:54:b1:93:28:4c:08:a1:f7:97:46:91:a8:e1:ab:
be:12:f3:0f:46:ab:1f:bb:7a:de:e7:3a:7e:17:7b:70:bd:34:
7f:be:75:07:28:98:49:be:ce:8f:52:10:d4:be:8d:0c:e2:b4:
3e:f2:81:98:18:2f:91:16:5f:22:0f:b6:63:40:10:b3:dc:cc:
29:72:d6:bd:22:a9:60:11:a0:a0:2e:21:64:38:6d:95:f3:12:
ba:4f:c0:19:0d:b8:00:c6:db:e4:34:b4:b7:9b:96:2c:83:27:
b5:13:f6:bf:fb:f5:54:e7:de:2b:74:c1:26:32:39:6f:4e:39:
f3:d0:58:c8:03:eb:6c:91:32:d1:39:84:2d:af:27:21:66:17:
19:e1:f3:1e:ec:5f:44:55:bf:31:f1:c4:c7:db:47:27:13:30:
a0:06:2a:11:5a:b3:32:b0:8f:a4:d4:7f:85:c8:3e:95:ff:a2:
07:28:b4:2f
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUaaxmyH7ZVl20NmqzXMO9Qhf4DGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhmYjliYTgyN2U2ZjEwYTdhZjM3NDkwODAzZGQ1YTA3
NjM5NzIzNTAeFw0yNDAyMDcxMjI4NTFaFw0yNTAyMDUxMjMzNTFaMDMxMTAvBgNV
BAMTKENERDA1NTJFRUIwRjc3Q0JEOEZBNENFRkUwQUNBRkVDQTE4RDk0NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCmWgpk3rTGLZGWpoSvyVpElXc
Ddm6TwLjwgeMQxZykiBASAQNyt6cx/9ZolHHfITAb88XYS5BxAmnZ2ZjOnZeITof
rhAlNwcDCAn2RgMf3wS0Tq/jHU5fdCaiWGEOQwc1aeHNADxW3jYOz35zLEMD1IWn
cI6MhGCmx5wcWdFbehKCoATeCR1Zkin7OSM1Epz4XYEXGuS+H9CVaUdJOWLs3c/X
8aaSbShq6GQkqNJCcGGldcrzMF1K5C4T6WYANjYEGNNfbadoEtFMF9AKgpxoIRwV
L6KoR+LkYk/XL1RWHJL6ZIGfo6YHZWaBM3pPixzjAJjl9/Y/mhMDG0HZjPhbAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUzdBVLusPd8vY+kzv4Kyv7KGNlGcwHwYDVR0j
BBgwFoAUCPubqCfm8Qp683SQgD3VoHY5cjUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzIvMDhGQjlCQTgyN0U2RjEwQTdBRjM3NDkwODAzREQ1QTA3NjM5NzIzNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NQdWJxQ2ZtOFFwNjgzU1FnRDNWb0hZ
NWNqVS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIvMzkzMjJlMzEzMTM5MmUzODMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
XHdQMA0GCSqGSIb3DQEBCwUAA4IBAQBcCknoQZ/iSuWZLB5/pfaESFD37+p8tC4T
CfPj6nzSqvaHKDWMivZVur5CZeTVEmH7ppycrVtv1R48c20qEjLUNlyrL/1wXORQ
ZKKDVLGTKEwIofeXRpGo4au+EvMPRqsfu3re5zp+F3twvTR/vnUHKJhJvs6PUhDU
vo0M4rQ+8oGYGC+RFl8iD7ZjQBCz3Mwpcta9IqlgEaCgLiFkOG2V8xK6T8AZDbgA
xtvkNLS3m5Ysgye1E/a/+/VU594rdMEmMjlvTjnz0FjIA+tskTLROYQtrychZhcZ
4fMe7F9EVb8x8cTH20cnEzCgBioRWrMysI+k1H+FyD6V/6IHKLQv
-----END CERTIFICATE-----
Generated at Wed May 8 20:21:24 2024 by rpki-client on console-fra.rpki-client.org