Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3234352e3235342e302f32342d3234203d3e20313336373837.roa
File: 3138352e3234352e3235342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: uKznx7Ng1MuzJXIYb/UW0X0WgIwu8fVbbDz1lK0FQ/A=
Subject key identifier: 4B:E6:A1:03:55:68:4E:20:C3:E8:52:C5:3A:FC:B4:73:AA:32:FF:1A
Certificate issuer: /CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Certificate serial: 1BBAED5B6F90BBC5DCBFE3F57CFAD16600EB78AA
Authority key identifier: B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3234352e3235342e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:34 +0000
ROA not before: Mon 26 Feb 2024 08:48:34 +0000
ROA not after: Mon 24 Feb 2025 08:53:34 +0000
asID: 136787
IP address blocks: 185.245.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:ba:ed:5b:6f:90:bb:c5:dc:bf:e3:f5:7c:fa:d1:66:00:eb:78:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Validity
Not Before: Feb 26 08:48:34 2024 GMT
Not After : Feb 24 08:53:34 2025 GMT
Subject: CN=4BE6A10355684E20C3E852C53AFCB473AA32FF1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:74:ec:73:78:ec:0d:18:0a:a2:a4:2f:a6:93:
bd:0c:fe:c1:2a:75:ba:2a:24:1f:22:a3:7c:74:ca:
bf:25:1a:51:92:48:de:f2:0e:75:17:fc:ab:d1:0e:
01:d0:0e:38:6f:ad:21:a4:f7:b0:f6:0c:65:c5:a1:
e3:d0:12:7b:ed:66:a5:c2:a4:a9:2d:56:9a:da:97:
53:99:91:c4:e8:38:68:2d:b8:e6:9a:c1:3d:43:f2:
d8:47:2a:bf:69:18:97:6b:bc:e7:4a:f0:4a:b7:35:
7d:d1:f5:6f:91:55:7f:e8:21:b7:5d:2c:55:cc:d7:
49:21:6d:0f:7c:4a:63:50:73:42:74:af:4a:5a:db:
60:3f:74:c0:59:c4:36:7c:0c:ab:ba:e1:de:cc:97:
e0:1f:e0:5d:69:75:bc:3c:42:f5:4b:fe:4e:3c:ec:
83:6d:69:f4:21:8b:eb:89:85:94:08:59:10:10:48:
0d:db:4f:e8:75:20:f0:31:f8:31:1b:53:aa:c5:0c:
80:da:c1:eb:7e:f5:81:8f:44:79:9b:98:75:11:11:
8d:bb:7a:35:6c:1b:8c:90:06:4a:2f:f3:27:ba:48:
67:a4:4a:37:cb:e6:df:10:a9:cb:4f:cc:1c:36:dc:
78:a5:26:a7:53:17:bb:36:c8:d9:b0:03:6f:6a:47:
56:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E6:A1:03:55:68:4E:20:C3:E8:52:C5:3A:FC:B4:73:AA:32:FF:1A
X509v3 Authority Key Identifier:
keyid:B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3234352e3235342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.254.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:84:50:bf:64:16:1f:70:c1:ca:77:5f:12:e5:cd:92:94:5f:
76:57:2a:57:6c:9c:0b:fe:e9:05:93:b0:71:a2:60:be:92:86:
14:18:4c:e9:d7:27:71:2d:53:a4:cd:96:29:b0:32:6f:0b:07:
2f:2d:89:3f:e5:74:47:51:7a:f6:34:f4:f1:fd:0f:ed:10:0f:
8c:66:61:37:c6:a8:a0:6d:0a:5d:e7:c9:fd:e5:96:e8:d9:98:
52:45:06:4e:12:47:af:dd:5d:74:e7:b5:50:be:74:7f:fa:83:
ff:54:c2:d9:6e:0e:b2:49:e8:13:70:f7:22:0c:57:d2:7e:cf:
d6:33:1b:60:65:0a:92:26:50:cd:14:dc:d4:aa:29:b8:da:36:
af:f1:86:31:b5:66:45:47:10:a1:da:79:0e:f5:30:ed:32:49:
c2:03:00:24:47:cc:29:ca:1f:4b:63:4e:8a:51:84:2a:88:bb:
cf:55:8f:ef:89:40:64:07:98:d7:ab:49:23:ec:5f:af:09:7e:
43:ee:57:1b:05:66:1f:56:a9:6b:0b:01:08:30:ab:72:76:2e:
b9:d6:b7:fe:2f:0d:05:3a:fc:07:2c:52:0b:10:85:0b:50:52:
9f:06:29:9c:66:71:65:75:05:b6:6f:9b:4b:9f:2e:ad:62:ef:
c5:45:78:9b
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUG7rtW2+Qu8Xcv+P1fPrRZgDreKowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjk3YmNmYWMyN2JiYWYxOWRlMWQzMWU1MzYyOTcyNmMx
ZTRjYWFhMjAeFw0yNDAyMjYwODQ4MzRaFw0yNTAyMjQwODUzMzRaMDMxMTAvBgNV
BAMTKDRCRTZBMTAzNTU2ODRFMjBDM0U4NTJDNTNBRkNCNDczQUEzMkZGMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwdOxzeOwNGAqipC+mk70M/sEq
dboqJB8io3x0yr8lGlGSSN7yDnUX/KvRDgHQDjhvrSGk97D2DGXFoePQEnvtZqXC
pKktVpral1OZkcToOGgtuOaawT1D8thHKr9pGJdrvOdK8Eq3NX3R9W+RVX/oIbdd
LFXM10khbQ98SmNQc0J0r0pa22A/dMBZxDZ8DKu64d7Ml+Af4F1pdbw8QvVL/k48
7INtafQhi+uJhZQIWRAQSA3bT+h1IPAx+DEbU6rFDIDawet+9YGPRHmbmHUREY27
ejVsG4yQBkov8ye6SGekSjfL5t8QqctPzBw23HilJqdTF7s2yNmwA29qR1ZvAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUS+ahA1VoTiDD6FLFOvy0c6oy/xowHwYDVR0j
BBgwFoAUuXvPrCe7rxneHTHlNilybB5MqqIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzMvQjk3QkNGQUMyN0JCQUYxOURFMUQzMUU1MzYyOTcyNkMxRTRDQUFBMi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3VYdlByQ2U3cnhuZUhUSGxOaWx5YkI1
TXFxSS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzMvMzEzODM1MmUzMjM0MzUyZTMy
MzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALn1/jANBgkqhkiG9w0BAQsFAAOCAQEAsoRQv2QWH3DByndfEuXNkpRfdlcq
V2ycC/7pBZOwcaJgvpKGFBhM6dcncS1TpM2WKbAybwsHLy2JP+V0R1F69jT08f0P
7RAPjGZhN8aooG0KXefJ/eWW6NmYUkUGThJHr91ddOe1UL50f/qD/1TC2W4Oskno
E3D3IgxX0n7P1jMbYGUKkiZQzRTc1KopuNo2r/GGMbVmRUcQodp5DvUw7TJJwgMA
JEfMKcofS2NOilGEKoi7z1WP74lAZAeY16tJI+xfrwl+Q+5XGwVmH1apawsBCDCr
cnYuuda3/i8NBTr8ByxSCxCFC1BSnwYpnGZxZXUFtm+bS58urWLvxUV4mw==
-----END CERTIFICATE-----
Generated at Wed May 8 11:32:58 2024 by rpki-client on console-ams.rpki-client.org