Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e36372e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e36372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: uQ8hE+rESq2ZRGApnCs1nNIs+8/BRR43LgGCu6PPvQI=
Subject key identifier: CD:30:6A:37:25:1B:37:CE:15:5B:76:FB:76:C0:C2:84:80:29:DB:7E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 778361F8425FA23BEBD921EBDB1CF7E39541F706
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e36372e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 27 Oct 2024 20:05:17 +0000
ROA not before: Sun 27 Oct 2024 20:00:17 +0000
ROA not after: Sun 26 Oct 2025 20:05:17 +0000
asID: 136787
IP address blocks: 155.133.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:83:61:f8:42:5f:a2:3b:eb:d9:21:eb:db:1c:f7:e3:95:41:f7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 27 20:00:17 2024 GMT
Not After : Oct 26 20:05:17 2025 GMT
Subject: CN=CD306A37251B37CE155B76FB76C0C2848029DB7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:c1:88:d8:8a:68:74:df:c4:b6:3f:e0:39:
fd:24:ce:5f:0e:ac:9a:23:9e:d9:f6:c2:f8:22:60:
a1:7c:3f:75:d3:d5:ef:8e:3f:51:57:ae:11:62:96:
f7:08:36:bb:5c:ed:4c:41:61:29:86:de:72:38:9b:
38:c9:e6:1f:52:2f:b1:c2:50:da:03:f7:20:16:2e:
f3:97:55:ce:25:b7:fc:5e:ce:cc:7a:81:8e:68:b1:
b1:49:9c:5b:8b:f1:48:8c:13:23:28:bb:98:0c:76:
b2:f2:bf:67:81:c9:5c:52:f0:de:7e:fc:5b:82:f9:
c2:ab:c2:e4:91:06:05:1e:d0:44:f1:e1:0b:7e:9f:
7c:20:a9:c9:75:e7:20:0e:c4:ca:c6:f8:8c:a2:55:
63:70:0b:5b:88:2a:c5:c1:d8:61:6f:b8:b7:fb:30:
19:24:47:58:f2:2a:9d:8b:ae:4e:e2:a6:bc:49:0b:
7b:3e:40:3c:a0:f2:b7:67:81:63:95:51:dd:b1:bb:
1c:86:3c:a9:4d:8c:c1:65:ff:e8:0e:cc:15:ec:90:
c7:6a:10:2c:5c:4c:79:d1:be:8b:ec:25:5e:40:8c:
a6:2a:6f:26:6a:1d:ec:4b:79:b0:79:73:1e:8b:7f:
87:f8:00:6b:4b:e2:6e:9e:fc:ad:bf:38:47:a8:d5:
86:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:30:6A:37:25:1B:37:CE:15:5B:76:FB:76:C0:C2:84:80:29:DB:7E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e36372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.67.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ae:60:e6:b6:e1:29:42:ba:f5:69:03:a2:99:ca:96:b0:b6:
cd:5a:2b:72:16:86:2a:90:bd:d2:15:88:71:44:98:c2:7d:bf:
33:19:53:98:a2:f5:17:89:ea:a2:7c:94:08:89:36:76:10:8d:
bc:ae:96:74:82:fc:9d:54:db:8e:a2:59:42:09:f1:52:b8:22:
a6:2b:78:1f:2d:df:68:a0:85:fe:08:eb:25:26:aa:83:81:ca:
d6:5d:99:1b:f2:12:9c:1b:45:1f:d9:6d:7f:32:b2:0d:cb:7e:
34:75:57:42:60:c1:53:4a:e3:22:40:d2:a1:29:e3:2c:fc:8e:
ba:a3:d4:a4:f9:27:e1:a4:b5:52:8a:de:66:d3:2d:c6:72:9e:
19:34:0d:7f:b3:7b:0d:6b:86:ae:b0:bf:67:51:35:ec:20:3f:
1d:01:bd:1f:16:2e:ec:bb:7b:71:91:ea:18:a8:ec:fc:89:5e:
0a:8b:86:ad:75:07:ca:24:a5:61:12:6b:e7:ee:93:35:98:b5:
04:ee:9d:37:10:29:e2:57:df:90:d4:55:20:9e:c0:57:ad:64:
24:01:e4:1a:0b:87:77:70:f0:33:ff:28:3f:1f:68:20:9e:a9:
9c:8a:a4:58:30:c5:b4:99:4c:d0:1e:88:dd:b6:44:fe:8d:a3:
93:df:82:9c
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUd4Nh+EJfojvr2SHr2xz345VB9wYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDEwMjcyMDAwMTdaFw0yNTEwMjYyMDA1MTdaMDMxMTAvBgNV
BAMTKENEMzA2QTM3MjUxQjM3Q0UxNTVCNzZGQjc2QzBDMjg0ODAyOURCN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ZcGI2IpodN/Etj/gOf0kzl8O
rJojntn2wvgiYKF8P3XT1e+OP1FXrhFilvcINrtc7UxBYSmG3nI4mzjJ5h9SL7HC
UNoD9yAWLvOXVc4lt/xezsx6gY5osbFJnFuL8UiMEyMou5gMdrLyv2eByVxS8N5+
/FuC+cKrwuSRBgUe0ETx4Qt+n3wgqcl15yAOxMrG+IyiVWNwC1uIKsXB2GFvuLf7
MBkkR1jyKp2Lrk7iprxJC3s+QDyg8rdngWOVUd2xuxyGPKlNjMFl/+gOzBXskMdq
ECxcTHnRvovsJV5AjKYqbyZqHexLebB5cx6Lf4f4AGtL4m6e/K2/OEeo1YYrAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUzTBqNyUbN84VW3b7dsDChIAp234wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM1MmUzMTMzMzMyZTM2
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACbhUMwDQYJKoZIhvcNAQELBQADggEBAJOuYOa24SlCuvVpA6KZypawts1aK3IW
hiqQvdIViHFEmMJ9vzMZU5ii9ReJ6qJ8lAiJNnYQjbyulnSC/J1U246iWUIJ8VK4
IqYreB8t32ighf4I6yUmqoOBytZdmRvyEpwbRR/ZbX8ysg3LfjR1V0JgwVNK4yJA
0qEp4yz8jrqj1KT5J+GktVKK3mbTLcZynhk0DX+zew1rhq6wv2dRNewgPx0BvR8W
Luy7e3GR6hio7PyJXgqLhq11B8okpWESa+fukzWYtQTunTcQKeJX35DUVSCewFet
ZCQB5BoLh3dw8DP/KD8faCCeqZyKpFgwxbSZTNAeiN22RP6No5Pfgpw=
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:42:55 2024 by rpki-client on console-fra.rpki-client.org