Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135312e3130362e3131322e302f32302d3234203d3e203437353833.roa
File: 3135312e3130362e3131322e302f32302d3234203d3e203437353833.roa (raw, json)
Hash identifier: e692dQR/zFAr8pZlmZ+ehr4donLHALvx6D+ogl2YPLg=
Subject key identifier: 1D:EF:57:DA:F1:9F:ED:9A:ED:82:CD:9A:5C:C0:6F:2C:DF:87:A4:24
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 21C711F733EB6DD429B8453D6A080981E55E13FB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135312e3130362e3131322e302f32302d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:21 +0000
ROA not before: Mon 26 Feb 2024 08:48:21 +0000
ROA not after: Mon 24 Feb 2025 08:53:21 +0000
asID: 47583
IP address blocks: 151.106.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:c7:11:f7:33:eb:6d:d4:29:b8:45:3d:6a:08:09:81:e5:5e:13:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:21 2024 GMT
Not After : Feb 24 08:53:21 2025 GMT
Subject: CN=1DEF57DAF19FED9AED82CD9A5CC06F2CDF87A424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:ab:6d:32:37:0a:10:61:94:13:dc:05:8d:
fb:f3:96:87:3d:ac:f3:18:ba:1a:e3:50:4f:3b:38:
92:8a:ba:73:dd:41:bc:e6:da:db:89:9d:26:ed:34:
06:54:42:92:90:79:7b:20:da:37:85:c7:69:14:91:
33:63:d1:51:45:ce:2d:46:50:a2:6b:46:72:47:65:
77:16:c9:c8:fb:cc:3b:8f:fc:74:ea:26:4b:24:02:
a3:ad:51:66:56:95:a9:56:ba:69:bc:cd:d9:23:fb:
ef:8c:c4:a9:47:6d:ad:03:17:22:52:18:5e:38:ba:
c0:1a:bc:2a:16:9c:65:9f:76:7a:eb:40:57:da:a7:
07:e5:69:b6:7d:de:b9:de:55:dc:29:22:65:ce:f9:
75:42:99:dd:2d:f1:65:fa:76:a8:34:8e:21:82:c4:
85:fd:e8:fb:17:71:ba:6f:de:1b:3a:a2:fc:e3:a2:
28:ad:69:da:77:84:7c:1a:73:b4:3c:16:d1:92:f1:
7c:de:c1:f6:c7:24:04:d5:77:c1:7c:a3:83:c7:35:
61:85:c4:d7:37:a6:9b:37:30:d4:4f:fb:e8:a8:55:
3d:df:39:8f:d8:a8:ac:9a:03:9f:89:89:15:3c:81:
a5:dd:c1:34:b3:8a:e0:74:ef:9b:51:53:84:52:8f:
d3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EF:57:DA:F1:9F:ED:9A:ED:82:CD:9A:5C:C0:6F:2C:DF:87:A4:24
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135312e3130362e3131322e302f32302d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.106.112.0/20
Signature Algorithm: sha256WithRSAEncryption
33:10:63:98:e6:62:47:c8:f3:22:1e:06:20:0d:ca:41:33:69:
44:00:04:ab:50:a5:13:76:f3:39:24:eb:42:66:6d:0a:15:eb:
c0:6d:b7:e8:b2:1a:52:d0:b9:b3:b6:aa:b6:c5:ce:cf:34:f1:
2c:72:ac:84:5d:65:90:06:32:db:24:1b:64:16:a4:a3:2a:37:
ff:a6:ff:7e:13:5f:18:a1:64:08:b5:b7:92:21:bd:64:0d:15:
c2:21:00:b9:02:46:7c:59:29:87:5b:38:e5:d2:ab:5b:45:70:
cf:39:dd:3f:08:01:c7:79:89:7b:67:cb:48:89:12:be:96:9f:
e2:af:dd:1d:34:5d:65:6b:b7:b7:be:3c:14:4e:ac:0a:8e:7c:
fe:cd:14:ce:d9:fd:e8:eb:2f:b3:39:19:66:76:24:2f:7b:99:
c4:68:c6:e9:19:12:66:7f:8a:4f:7f:fc:f4:79:b9:ae:58:ec:
4d:23:1e:72:cb:3c:ce:aa:7b:1f:6a:d4:06:40:fe:57:00:62:
83:7e:05:09:63:bb:86:1a:c9:d7:10:6c:40:f9:5c:05:b3:16:
1f:fe:d4:24:a6:1d:8e:98:e0:22:77:98:5c:d8:3f:35:42:65:
0f:1b:07:e8:cd:6a:26:e5:27:0d:a0:62:60:c8:4c:e5:21:9d:
4c:b5:55:ed
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUIccR9zPrbdQpuEU9aggJgeVeE/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAyMjYwODQ4MjFaFw0yNTAyMjQwODUzMjFaMDMxMTAvBgNV
BAMTKDFERUY1N0RBRjE5RkVEOUFFRDgyQ0Q5QTVDQzA2RjJDREY4N0E0MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9vattMjcKEGGUE9wFjfvzloc9
rPMYuhrjUE87OJKKunPdQbzm2tuJnSbtNAZUQpKQeXsg2jeFx2kUkTNj0VFFzi1G
UKJrRnJHZXcWycj7zDuP/HTqJkskAqOtUWZWlalWumm8zdkj+++MxKlHba0DFyJS
GF44usAavCoWnGWfdnrrQFfapwflabZ93rneVdwpImXO+XVCmd0t8WX6dqg0jiGC
xIX96PsXcbpv3hs6ovzjoiitadp3hHwac7Q8FtGS8XzewfbHJATVd8F8o4PHNWGF
xNc3pps3MNRP++ioVT3fOY/YqKyaA5+JiRU8gaXdwTSziuB075tRU4RSj9P/AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUHe9X2vGf7Zrtgs2aXMBvLN+HpCQwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTMxMmUzMTMwMzYyZTMx
MzEzMjJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BASXanAwDQYJKoZIhvcNAQELBQADggEBADMQY5jmYkfI8yIeBiANykEzaUQABKtQ
pRN28zkk60JmbQoV68Btt+iyGlLQubO2qrbFzs808SxyrIRdZZAGMtskG2QWpKMq
N/+m/34TXxihZAi1t5IhvWQNFcIhALkCRnxZKYdbOOXSq1tFcM853T8IAcd5iXtn
y0iJEr6Wn+Kv3R00XWVrt7e+PBROrAqOfP7NFM7Z/ejrL7M5GWZ2JC97mcRoxukZ
EmZ/ik9//PR5ua5Y7E0jHnLLPM6qex9q1AZA/lcAYoN+BQlju4YaydcQbED5XAWz
Fh/+1CSmHY6Y4CJ3mFzYPzVCZQ8bB+jNaiblJw2gYmDITOUhnUy1Ve0=
-----END CERTIFICATE-----
Generated at Tue May 21 08:01:44 2024 by rpki-client on console-fra.rpki-client.org