Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31392e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e31392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: mgrslnpfVVlW22mEA0I/goeDSX2dcMkAEXNSkQf+y04=
Subject key identifier: 76:22:4C:DB:30:FF:57:31:E7:13:46:36:71:AA:35:08:C2:00:09:C1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4D9BBDD32E539AE94E85976057F77D4EAB269FAF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31392e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 02 Mar 2024 21:54:08 +0000
ROA not before: Sat 02 Mar 2024 21:49:08 +0000
ROA not after: Sat 01 Mar 2025 21:54:08 +0000
asID: 136787
IP address blocks: 155.133.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:9b:bd:d3:2e:53:9a:e9:4e:85:97:60:57:f7:7d:4e:ab:26:9f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 2 21:49:08 2024 GMT
Not After : Mar 1 21:54:08 2025 GMT
Subject: CN=76224CDB30FF5731E713463671AA3508C20009C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1c:fa:e5:4d:a2:4c:70:90:b4:09:0a:de:6e:
21:e4:8c:aa:1f:ad:4d:c2:6a:d3:56:47:7b:d4:34:
c1:a9:81:9a:1a:ae:68:f3:9e:bd:0c:c9:07:a2:23:
eb:59:07:b7:ff:ee:43:cb:ec:3e:03:1f:19:be:36:
c9:39:89:05:14:b3:5a:95:0f:6e:1e:0b:1a:98:5f:
50:7b:0c:6d:b1:3f:b9:ad:cd:6f:3f:61:94:5e:c1:
b2:42:7d:fe:10:e6:6b:83:23:37:77:34:aa:76:db:
9d:65:0a:c5:88:4a:ab:38:09:35:8a:88:32:f8:a3:
f3:2f:cc:7f:0d:f6:db:41:36:53:b9:d9:71:1b:c8:
c3:b2:40:f4:eb:3e:34:a7:a4:97:8a:34:a0:62:10:
db:a9:f7:6f:82:d2:3d:47:2e:d8:c1:66:c6:e4:09:
c0:7e:97:32:64:51:71:a0:8e:c8:18:5d:19:70:94:
a9:68:83:7d:ab:70:a4:a2:fb:e7:66:c9:31:2f:57:
2b:d8:fe:93:b3:73:a4:ce:86:9a:e4:f4:d0:4b:6b:
08:e9:71:08:fe:12:6d:62:ad:7b:02:1d:28:19:07:
1d:4d:3c:61:9b:6e:ff:b2:a2:90:09:ca:27:25:12:
ab:33:92:62:65:02:89:6d:5f:67:8c:65:02:f3:fa:
e6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:22:4C:DB:30:FF:57:31:E7:13:46:36:71:AA:35:08:C2:00:09:C1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.19.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:0e:1b:6c:12:c0:1b:b3:c7:bc:a1:09:be:c0:9b:0c:09:d1:
13:fa:26:ca:62:c0:ec:00:22:6a:9b:7d:80:2a:f3:6a:a0:ff:
d5:da:c6:5c:71:22:41:9d:58:8a:e0:d0:d7:b7:18:86:99:f7:
67:5d:b9:fd:5b:9b:3c:5a:a6:ca:1b:13:9c:71:17:ad:3b:ab:
3e:8a:19:34:88:e1:22:e0:99:cc:bf:c6:67:93:da:e9:85:fb:
9e:22:a4:f3:fb:a0:df:bd:dc:bf:7e:6b:d1:ce:6d:b4:41:14:
27:24:d6:f9:5f:09:90:09:30:66:ef:92:9e:b0:81:33:ea:7a:
01:87:d6:62:03:86:74:c7:a0:0e:ee:4a:9e:c9:d8:2b:9b:5f:
3d:39:8b:db:f5:63:6b:74:8c:eb:1d:e4:39:85:0a:b4:d1:1e:
d7:8e:8d:54:31:2e:4c:a0:fe:33:cd:35:a9:7a:ee:f1:3e:f5:
e2:72:85:b0:d9:03:d6:95:d2:58:33:57:90:83:8f:17:20:38:
86:78:eb:9b:33:9c:09:49:c1:d7:da:f1:de:3d:3a:b4:91:ac:
49:d0:24:e0:46:34:af:7c:7b:e5:80:01:97:e5:b5:d7:ef:55:
a5:96:91:e7:65:86:d7:f2:c3:27:27:74:c9:52:a2:10:93:81:
b1:a5:d6:22
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUTZu90y5TmulOhZdgV/d9Tqsmn68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAzMDIyMTQ5MDhaFw0yNTAzMDEyMTU0MDhaMDMxMTAvBgNV
BAMTKDc2MjI0Q0RCMzBGRjU3MzFFNzEzNDYzNjcxQUEzNTA4QzIwMDA5QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsHPrlTaJMcJC0CQrebiHkjKof
rU3CatNWR3vUNMGpgZoarmjznr0MyQeiI+tZB7f/7kPL7D4DHxm+Nsk5iQUUs1qV
D24eCxqYX1B7DG2xP7mtzW8/YZRewbJCff4Q5muDIzd3NKp2251lCsWISqs4CTWK
iDL4o/MvzH8N9ttBNlO52XEbyMOyQPTrPjSnpJeKNKBiENup92+C0j1HLtjBZsbk
CcB+lzJkUXGgjsgYXRlwlKlog32rcKSi++dmyTEvVyvY/pOzc6TOhprk9NBLawjp
cQj+Em1irXsCHSgZBx1NPGGbbv+yopAJyiclEqszkmJlAoltX2eMZQLz+ua/AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUdiJM2zD/VzHnE0Y2cao1CMIACcEwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM1MmUzMTMzMzMyZTMx
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACbhRMwDQYJKoZIhvcNAQELBQADggEBAJwOG2wSwBuzx7yhCb7AmwwJ0RP6Jspi
wOwAImqbfYAq82qg/9XaxlxxIkGdWIrg0Ne3GIaZ92dduf1bmzxapsobE5xxF607
qz6KGTSI4SLgmcy/xmeT2umF+54ipPP7oN+93L9+a9HObbRBFCck1vlfCZAJMGbv
kp6wgTPqegGH1mIDhnTHoA7uSp7J2CubXz05i9v1Y2t0jOsd5DmFCrTRHteOjVQx
Lkyg/jPNNal67vE+9eJyhbDZA9aV0lgzV5CDjxcgOIZ465sznAlJwdfa8d49OrSR
rEnQJOBGNK98e+WAAZfltdfvVaWWkedlhtfywycndMlSohCTgbGl1iI=
-----END CERTIFICATE-----
Generated at Wed May 8 11:32:58 2024 by rpki-client on console-ams.rpki-client.org