Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3232302e32332e302f32342d3234203d3e20313336373837.roa
File: 3138352e3232302e32332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: pMDUIun20VuuENjjGlYb5X6uLgU95SA8fwDsWtdqaH0=
Subject key identifier: BD:76:AE:89:CE:06:B2:5F:9A:5F:24:DD:DC:D0:7B:E9:BD:A9:53:D3
Certificate issuer: /CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Certificate serial: 4E7D12F717DB5E5F577D8C472ECA13F066E26AAB
Authority key identifier: B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3232302e32332e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 21 Mar 2024 09:13:46 +0000
ROA not before: Thu 21 Mar 2024 09:08:46 +0000
ROA not after: Thu 20 Mar 2025 09:13:46 +0000
asID: 136787
IP address blocks: 185.220.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:7d:12:f7:17:db:5e:5f:57:7d:8c:47:2e:ca:13:f0:66:e2:6a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Validity
Not Before: Mar 21 09:08:46 2024 GMT
Not After : Mar 20 09:13:46 2025 GMT
Subject: CN=BD76AE89CE06B25F9A5F24DDDCD07BE9BDA953D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:73:05:5a:cf:67:2d:47:d8:f1:33:e9:7c:
b0:97:80:13:4c:f5:02:37:97:48:92:d3:a0:16:aa:
62:cf:79:aa:88:a5:7a:50:89:0f:da:16:17:a4:36:
0e:20:78:31:e2:6d:3e:e6:51:5b:17:fd:dc:8d:da:
a1:ee:2e:c7:5c:3e:26:05:67:1e:08:3f:3a:bd:27:
30:1f:53:61:a9:7b:2f:26:c8:14:c5:f6:25:b8:22:
4d:dc:0e:46:b4:6d:23:f2:19:cf:d6:09:85:a4:f4:
c4:08:ab:22:ba:78:48:35:5e:aa:50:de:9d:c8:c6:
63:c3:85:bb:2a:b0:4b:e6:11:5b:5a:4c:8a:e6:50:
6d:e3:f0:4e:07:49:eb:f0:f1:cb:ac:79:d8:c8:32:
a7:40:78:76:b5:41:f5:06:a3:a8:7a:75:0b:4e:e7:
c5:83:a2:29:40:7f:dc:97:15:a8:51:a6:dc:c9:20:
97:e7:62:39:11:64:4d:0c:75:49:a2:08:e3:dd:62:
0c:c2:f8:00:a8:91:bb:7f:a2:ab:9d:e3:69:a5:6f:
51:78:00:1f:dd:6b:15:4e:da:9b:26:2d:5b:4f:6a:
c3:a8:c4:d0:c6:99:f0:2d:64:22:f3:74:5a:c5:95:
02:88:ba:08:7d:c5:e1:b5:2e:ad:7d:73:7b:5e:eb:
96:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:76:AE:89:CE:06:B2:5F:9A:5F:24:DD:DC:D0:7B:E9:BD:A9:53:D3
X509v3 Authority Key Identifier:
keyid:B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3232302e32332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.23.0/24
Signature Algorithm: sha256WithRSAEncryption
90:6b:da:e5:0e:b2:7f:5e:01:24:b2:2f:42:51:8a:a5:9c:9e:
c8:8c:0d:78:14:32:23:0d:50:25:c6:1e:16:bd:f5:43:7a:88:
3d:70:da:3d:1e:7d:0e:e6:38:52:72:a3:65:96:e1:ee:bd:75:
f7:00:e2:dc:f9:ce:0f:b4:86:a4:f7:d8:15:a2:e5:9c:42:bb:
a4:ce:e8:14:93:22:c0:5f:0a:69:43:ad:4f:b1:db:7d:d5:f6:
cf:01:d8:14:f7:8b:99:f9:f9:db:e8:02:3e:11:1e:94:e5:f5:
35:40:d0:6a:af:ad:38:4c:16:6e:f7:a8:97:f8:97:41:3f:2c:
37:b5:34:64:a9:61:2e:e0:12:fb:8e:fe:77:3b:04:16:de:0d:
7c:be:0b:37:cc:e2:ea:a8:ac:2a:5d:f0:27:45:db:08:6e:1f:
3c:df:02:11:3b:78:aa:8c:70:42:37:95:05:32:07:c3:16:43:
59:f8:f7:1d:86:b9:97:51:6d:3a:14:6d:36:08:a7:3a:bd:26:
96:31:55:f0:78:fc:26:4e:6c:8a:5f:d8:38:53:bf:ef:7f:34:
5c:ef:cc:f7:68:87:c6:f6:1d:9b:29:56:f6:77:1b:cc:4d:cf:
e7:cc:6f:0a:7b:a0:83:d8:75:fa:23:37:4e:30:eb:e2:d1:c9:
fb:ab:6c:7a
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUTn0S9xfbXl9XfYxHLsoT8GbiaqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjk3YmNmYWMyN2JiYWYxOWRlMWQzMWU1MzYyOTcyNmMx
ZTRjYWFhMjAeFw0yNDAzMjEwOTA4NDZaFw0yNTAzMjAwOTEzNDZaMDMxMTAvBgNV
BAMTKEJENzZBRTg5Q0UwNkIyNUY5QTVGMjRERERDRDA3QkU5QkRBOTUzRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGDXMFWs9nLUfY8TPpfLCXgBNM
9QI3l0iS06AWqmLPeaqIpXpQiQ/aFhekNg4geDHibT7mUVsX/dyN2qHuLsdcPiYF
Zx4IPzq9JzAfU2Gpey8myBTF9iW4Ik3cDka0bSPyGc/WCYWk9MQIqyK6eEg1XqpQ
3p3IxmPDhbsqsEvmEVtaTIrmUG3j8E4HSevw8cusedjIMqdAeHa1QfUGo6h6dQtO
58WDoilAf9yXFahRptzJIJfnYjkRZE0MdUmiCOPdYgzC+ACokbt/oqud42mlb1F4
AB/daxVO2psmLVtPasOoxNDGmfAtZCLzdFrFlQKIugh9xeG1Lq19c3te65ZrAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUvXauic4Gsl+aXyTd3NB76b2pU9MwHwYDVR0j
BBgwFoAUuXvPrCe7rxneHTHlNilybB5MqqIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzMvQjk3QkNGQUMyN0JCQUYxOURFMUQzMUU1MzYyOTcyNkMxRTRDQUFBMi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3VYdlByQ2U3cnhuZUhUSGxOaWx5YkI1
TXFxSS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzMvMzEzODM1MmUzMjMyMzAyZTMy
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC53BcwDQYJKoZIhvcNAQELBQADggEBAJBr2uUOsn9eASSyL0JRiqWcnsiMDXgU
MiMNUCXGHha99UN6iD1w2j0efQ7mOFJyo2WW4e69dfcA4tz5zg+0hqT32BWi5ZxC
u6TO6BSTIsBfCmlDrU+x233V9s8B2BT3i5n5+dvoAj4RHpTl9TVA0GqvrThMFm73
qJf4l0E/LDe1NGSpYS7gEvuO/nc7BBbeDXy+CzfM4uqorCpd8CdF2whuHzzfAhE7
eKqMcEI3lQUyB8MWQ1n49x2GuZdRbToUbTYIpzq9JpYxVfB4/CZObIpf2DhTv+9/
NFzvzPdoh8b2HZspVvZ3G8xNz+fMbwp7oIPYdfojN04w6+LRyfurbHo=
-----END CERTIFICATE-----
Generated at Tue May 7 11:42:52 2024 by rpki-client on console-fra.rpki-client.org