Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135332e39322e3132372e302f32342d3234203d3e203633343733.roa
File: 3135332e39322e3132372e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: ZrwX7zsoDhN/O81oH9/R+tqk8Z92mNu/1A9jFbyNGVU=
Subject key identifier: D0:6A:58:ED:F3:43:84:A8:9D:78:E9:1A:7C:52:C5:2C:48:B3:A4:1D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7769514AB504B82089B43688F1A3592E6BB85988
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135332e39322e3132372e302f32342d3234203d3e203633343733.roa
Signing time: Mon 04 Nov 2024 10:05:26 +0000
ROA not before: Mon 04 Nov 2024 10:00:26 +0000
ROA not after: Mon 03 Nov 2025 10:05:26 +0000
asID: 63473
IP address blocks: 153.92.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:69:51:4a:b5:04:b8:20:89:b4:36:88:f1:a3:59:2e:6b:b8:59:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 4 10:00:26 2024 GMT
Not After : Nov 3 10:05:26 2025 GMT
Subject: CN=D06A58EDF34384A89D78E91A7C52C52C48B3A41D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:51:60:07:1e:89:ff:7b:1a:47:cc:b6:0e:b6:
b7:96:2a:ef:15:ce:a8:6c:63:30:52:d2:76:91:dd:
4e:45:b9:d3:7f:03:38:f4:07:60:3c:c0:8a:ed:76:
bc:67:ee:c1:ba:41:3f:27:01:7e:c3:2a:f8:8d:e8:
a2:3b:1e:67:85:dc:a8:18:c6:7b:2d:4c:96:db:fa:
6e:8c:77:b5:67:86:0d:1f:a8:97:f1:b2:a9:e4:15:
98:e5:b1:56:9e:9a:e4:0e:a7:fb:4e:bd:c6:e5:42:
8b:cc:9c:62:ce:bc:e0:70:3b:cd:ab:da:b7:6b:15:
e8:d8:60:24:b1:32:b5:81:d4:4a:dc:ac:6e:bc:a6:
33:f0:d2:2a:d7:1c:1e:d2:6e:61:09:01:b7:98:34:
39:e9:d7:63:6d:43:38:84:a5:0f:c1:80:a4:cd:f2:
56:b9:b6:df:4a:cd:22:a2:5d:e5:bd:8f:e8:87:1d:
2c:81:df:67:ea:40:50:b4:f2:2d:4c:d5:00:3e:30:
86:d3:ac:91:3b:9c:63:68:65:cf:a7:0a:dc:71:d3:
10:5b:73:12:9f:03:97:26:6f:05:c1:75:6c:7e:b2:
fd:e0:6e:93:a8:79:48:22:49:be:9e:67:09:f9:99:
00:da:81:c7:12:46:1d:7c:09:cb:d3:b6:db:40:ef:
54:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6A:58:ED:F3:43:84:A8:9D:78:E9:1A:7C:52:C5:2C:48:B3:A4:1D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135332e39322e3132372e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.92.127.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:e6:6a:a9:b9:b2:a1:ec:2c:1d:89:07:f9:de:a4:84:90:23:
d4:06:fb:1f:c3:4d:5d:37:2d:5c:4e:a3:0b:47:22:0a:6c:e7:
38:9f:73:19:f3:84:cf:5a:cd:f5:34:49:59:0f:ad:6a:48:cd:
fe:7f:8d:08:f0:54:21:56:5c:c0:24:98:8a:2a:74:95:f0:fa:
b8:41:d7:ab:f5:4a:60:34:58:9d:be:1e:1f:f4:6b:38:4c:f7:
1a:55:fe:d3:d7:20:f3:0e:ec:a5:aa:75:b7:4a:6b:fb:93:f8:
80:d5:c8:52:7e:62:4b:8a:2e:81:57:1c:4e:2e:a5:0d:7f:38:
db:a6:1b:34:88:5b:3d:8a:f7:8e:36:d8:cd:2d:a3:d6:67:0f:
9d:4b:69:b8:f6:8f:98:a5:72:0a:51:09:77:a9:7a:52:5b:76:
a3:27:c3:1a:0e:09:8d:7f:c3:9d:a6:01:1d:18:37:f3:ef:30:
6b:63:a1:a6:b8:79:00:c0:69:95:f3:8c:e2:ee:f9:88:86:13:
df:9e:6b:cf:6e:7c:c9:f2:47:e1:0d:8d:14:0b:51:0f:c9:71:
c4:52:47:40:43:82:45:1a:18:b7:62:5b:79:75:b1:b7:23:4b:
3e:79:4e:bf:ee:ff:78:54:03:9f:4d:69:3f:53:61:5b:a4:39:
bd:8b:02:54
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUd2lRSrUEuCCJtDaI8aNZLmu4WYgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDExMDQxMDAwMjZaFw0yNTExMDMxMDA1MjZaMDMxMTAvBgNV
BAMTKEQwNkE1OEVERjM0Mzg0QTg5RDc4RTkxQTdDNTJDNTJDNDhCM0E0MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqUWAHHon/expHzLYOtreWKu8V
zqhsYzBS0naR3U5FudN/Azj0B2A8wIrtdrxn7sG6QT8nAX7DKviN6KI7HmeF3KgY
xnstTJbb+m6Md7Vnhg0fqJfxsqnkFZjlsVaemuQOp/tOvcblQovMnGLOvOBwO82r
2rdrFejYYCSxMrWB1ErcrG68pjPw0irXHB7SbmEJAbeYNDnp12NtQziEpQ/BgKTN
8la5tt9KzSKiXeW9j+iHHSyB32fqQFC08i1M1QA+MIbTrJE7nGNoZc+nCtxx0xBb
cxKfA5cmbwXBdWx+sv3gbpOoeUgiSb6eZwn5mQDagccSRh18CcvTtttA71TpAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU0GpY7fNDhKideOkafFLFLEizpB0wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTMzMmUzOTMyMmUzMTMy
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMzMzQzNzMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
mVx/MA0GCSqGSIb3DQEBCwUAA4IBAQBd5mqpubKh7CwdiQf53qSEkCPUBvsfw01d
Ny1cTqMLRyIKbOc4n3MZ84TPWs31NElZD61qSM3+f40I8FQhVlzAJJiKKnSV8Pq4
Qder9UpgNFidvh4f9Gs4TPcaVf7T1yDzDuylqnW3Smv7k/iA1chSfmJLii6BVxxO
LqUNfzjbphs0iFs9iveONtjNLaPWZw+dS2m49o+YpXIKUQl3qXpSW3ajJ8MaDgmN
f8OdpgEdGDfz7zBrY6GmuHkAwGmV84zi7vmIhhPfnmvPbnzJ8kfhDY0UC1EPyXHE
UkdAQ4JFGhi3Ylt5dbG3I0s+eU6/7v94VAOfTWk/U2FbpDm9iwJU
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:44 2024 by rpki-client on console-ams.rpki-client.org