Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3233322e302f32312d3332203d3e20313431393935.roa
File: 3130392e3132332e3233322e302f32312d3332203d3e20313431393935.roa (raw, json)
Hash identifier: aOXqHxezTJihoFVjgNe4HhEox8Hmk3JeYp5QHyWEVX0=
Subject key identifier: 02:89:6E:AC:72:94:17:25:2D:54:0B:97:7B:C4:38:97:93:7B:C1:29
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 46BA977CC4B6813A0E89049E54B859356D1B239E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3233322e302f32312d3332203d3e20313431393935.roa
Signing time: Mon 26 Feb 2024 08:53:31 +0000
ROA not before: Mon 26 Feb 2024 08:48:31 +0000
ROA not after: Mon 24 Feb 2025 08:53:31 +0000
asID: 141995
IP address blocks: 109.123.232.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ba:97:7c:c4:b6:81:3a:0e:89:04:9e:54:b8:59:35:6d:1b:23:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:31 2024 GMT
Not After : Feb 24 08:53:31 2025 GMT
Subject: CN=02896EAC729417252D540B977BC43897937BC129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1b:c0:2d:ba:ff:c7:fc:57:c2:9d:f7:04:a4:
8b:50:f2:44:56:1d:b0:8b:65:51:6d:56:1a:2d:be:
5d:61:aa:65:e4:4e:bb:86:05:18:23:7a:35:f9:1e:
ec:86:1c:cc:99:b8:39:73:b7:0c:a9:1c:74:26:0f:
b0:39:81:e2:40:27:23:5f:07:a5:3a:6c:1d:b6:ef:
8e:af:c0:85:ff:58:1c:a6:dd:e8:5b:57:0a:c9:79:
fb:74:17:6a:7b:4f:b8:24:37:1b:ee:bb:e0:bc:36:
e3:b4:3c:bb:f6:13:83:ff:eb:d5:2d:ff:d6:6d:32:
34:27:f2:07:c7:31:33:a3:5d:cb:eb:18:e4:e1:b7:
ff:f2:34:86:a1:dd:9b:32:c3:ee:70:46:0c:3d:26:
fd:3b:2f:42:3b:5b:0a:73:32:21:69:b5:d1:4f:73:
77:36:46:0c:63:0b:40:c2:52:ae:c9:9d:c5:8a:83:
9f:6c:b4:1c:7d:fe:2d:11:02:52:1a:b5:d5:b1:e4:
f5:a1:36:1c:f3:7d:8b:5f:1b:c3:dd:12:36:9f:1f:
b2:33:5f:60:b2:a0:91:34:bf:5d:7f:88:c5:e8:a2:
61:78:9e:e3:ba:e0:45:b2:ab:59:e9:21:4c:64:61:
ef:8a:a9:e6:f7:fe:6e:f5:6c:83:b4:91:34:5b:db:
6f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:89:6E:AC:72:94:17:25:2D:54:0B:97:7B:C4:38:97:93:7B:C1:29
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3233322e302f32312d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.123.232.0/21
Signature Algorithm: sha256WithRSAEncryption
07:96:b9:d0:7c:1b:23:5d:c2:37:c3:12:c2:ed:0d:08:9d:03:
cd:2f:a4:3e:0d:4b:99:a6:47:9e:65:da:6d:38:f7:2c:e2:9b:
c9:3d:2c:80:ea:29:15:be:32:73:3b:12:79:9c:ca:13:73:ca:
1f:6e:92:a9:9e:11:a9:d2:22:c9:0f:2e:df:75:e9:a6:45:54:
f9:0f:80:70:ca:4b:96:69:ea:08:1e:97:ac:1b:d8:3e:13:6e:
da:c0:ed:5e:89:5c:3f:37:73:62:f6:8c:92:e2:38:56:94:55:
76:d7:c7:da:53:3d:db:83:df:44:fc:e2:c0:cb:38:cb:79:0b:
78:80:ee:49:2b:24:8a:76:16:3c:cc:a3:bb:6b:55:a5:73:e8:
7d:2a:8d:2e:37:5e:50:02:57:42:24:b3:26:c4:7f:72:67:7e:
34:69:8e:b8:aa:78:4f:00:99:10:b9:a9:08:b6:4b:dc:b4:b4:
e6:34:b7:86:74:3c:a1:4e:36:d7:64:8b:e4:80:82:82:cf:b1:
ad:85:a1:ff:a2:cd:79:43:e0:c2:4e:8f:d8:ac:65:b1:86:c2:
4a:36:7c:51:2e:0c:a3:89:3f:dd:3e:0f:57:a9:51:bc:e3:bf:
bf:33:10:15:ee:f0:94:ed:f7:d3:fd:c5:bd:b5:ac:16:1f:35:
85:7d:76:4f
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIURrqXfMS2gToOiQSeVLhZNW0bI54wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAyMjYwODQ4MzFaFw0yNTAyMjQwODUzMzFaMDMxMTAvBgNV
BAMTKDAyODk2RUFDNzI5NDE3MjUyRDU0MEI5NzdCQzQzODk3OTM3QkMxMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpG8Atuv/H/FfCnfcEpItQ8kRW
HbCLZVFtVhotvl1hqmXkTruGBRgjejX5HuyGHMyZuDlztwypHHQmD7A5geJAJyNf
B6U6bB22746vwIX/WBym3ehbVwrJeft0F2p7T7gkNxvuu+C8NuO0PLv2E4P/69Ut
/9ZtMjQn8gfHMTOjXcvrGOTht//yNIah3Zsyw+5wRgw9Jv07L0I7WwpzMiFptdFP
c3c2RgxjC0DCUq7JncWKg59stBx9/i0RAlIatdWx5PWhNhzzfYtfG8PdEjafH7Iz
X2CyoJE0v11/iMXoomF4nuO64EWyq1npIUxkYe+Kqeb3/m71bIO0kTRb229TAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUAolurHKUFyUtVAuXe8Q4l5N7wSkwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzMDM5MmUzMTMyMzMyZTMy
MzMzMjJlMzAyZjMyMzEyZDMzMzIyMDNkM2UyMDMxMzQzMTM5MzkzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA2176DANBgkqhkiG9w0BAQsFAAOCAQEAB5a50HwbI13CN8MSwu0NCJ0DzS+k
Pg1LmaZHnmXabTj3LOKbyT0sgOopFb4yczsSeZzKE3PKH26SqZ4RqdIiyQ8u33Xp
pkVU+Q+AcMpLlmnqCB6XrBvYPhNu2sDtXolcPzdzYvaMkuI4VpRVdtfH2lM924Pf
RPziwMs4y3kLeIDuSSskinYWPMyju2tVpXPofSqNLjdeUAJXQiSzJsR/cmd+NGmO
uKp4TwCZELmpCLZL3LS05jS3hnQ8oU4212SL5ICCgs+xrYWh/6LNeUPgwk6P2Kxl
sYbCSjZ8US4Mo4k/3T4PV6lRvOO/vzMQFe7wlO330/3FvbWsFh81hX12Tw==
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:29:12 2024 by rpki-client on console-ams.rpki-client.org