Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e372e302f32342d3332203d3e20313431393935.roa
File: 3135352e3133332e372e302f32342d3332203d3e20313431393935.roa (raw, json)
Hash identifier: Pw0T4ktREZN3eJFqdGnaptP8kbNJb38cmKLK54/V1bU=
Subject key identifier: D2:A3:02:3D:A7:2A:5E:B1:F8:30:9C:FF:B0:65:A5:97:25:1F:0B:93
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3AE9331339F0921E2BBEA16C84BFC2E23A25000C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e372e302f32342d3332203d3e20313431393935.roa
Signing time: Mon 26 Feb 2024 08:53:05 +0000
ROA not before: Mon 26 Feb 2024 08:48:05 +0000
ROA not after: Mon 24 Feb 2025 08:53:05 +0000
asID: 141995
IP address blocks: 155.133.7.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e9:33:13:39:f0:92:1e:2b:be:a1:6c:84:bf:c2:e2:3a:25:00:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:05 2024 GMT
Not After : Feb 24 08:53:05 2025 GMT
Subject: CN=D2A3023DA72A5EB1F8309CFFB065A597251F0B93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:54:62:90:89:be:2d:b0:db:ec:21:d3:f5:75:
25:a3:ef:ed:70:30:50:6c:97:d5:3b:e3:bd:9d:d1:
78:2e:38:33:78:cf:19:cf:9c:54:b9:48:20:5b:4d:
cf:e1:84:6e:ca:ec:7a:bc:67:6e:d8:0f:ed:7b:a4:
1d:50:65:a5:5f:ae:6b:62:89:87:53:6b:d4:7e:ec:
43:46:fb:a6:31:8c:30:30:f7:5f:60:e2:0e:1a:5d:
6a:4c:9a:e6:cf:16:dd:de:f5:e4:90:49:3c:e0:c7:
06:20:f9:37:d8:8f:e3:08:14:62:35:66:cf:db:14:
09:f6:1f:88:a3:73:a7:fb:ef:b9:63:27:c2:f0:26:
1b:d8:d8:98:c3:97:7f:5d:18:05:33:e8:dd:ae:7d:
16:c1:b2:11:54:48:fe:cd:e2:08:26:a1:6b:46:ac:
71:d0:0c:99:5f:32:3f:7d:28:b5:b7:d3:3d:00:ac:
ed:fc:fa:22:ff:dc:92:5e:11:c0:d6:26:68:7b:20:
42:c1:a5:a9:67:01:98:44:f8:6a:f0:5c:a5:9a:58:
af:66:99:f2:94:a6:a3:cd:db:c9:ea:d0:74:0c:21:
58:09:75:cd:0e:84:09:57:8c:8f:01:a6:be:cb:16:
01:74:a0:59:3c:75:d1:98:03:f0:50:fd:9e:4f:66:
a3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A3:02:3D:A7:2A:5E:B1:F8:30:9C:FF:B0:65:A5:97:25:1F:0B:93
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e372e302f32342d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.7.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:b8:db:2f:a8:4d:f7:d0:4b:46:2e:62:4a:8c:5a:da:c7:fc:
eb:f2:75:d8:8b:bf:b7:bd:7d:09:1e:50:86:5f:f1:62:fa:17:
51:b9:90:58:de:8a:a0:f9:d5:16:7e:d5:11:4f:ba:3b:df:bd:
26:e1:ca:f2:4b:c1:a5:a7:45:85:1d:36:7a:1b:9e:3c:48:fd:
12:42:9d:91:58:53:43:f1:e3:04:42:fb:58:9b:63:ed:bc:d2:
bb:e4:0f:d8:48:95:6e:0a:df:1f:ab:f0:b5:0e:80:dc:f5:1e:
f3:dc:62:5f:b8:28:7e:31:14:f4:f9:80:b7:a8:67:77:38:e4:
5d:31:4c:05:30:c9:32:93:46:82:ec:f7:bb:82:66:4d:68:8a:
9e:13:6d:ae:c9:db:dc:91:e9:11:00:62:d9:d7:60:35:7d:49:
97:3e:84:ff:f5:70:01:c0:20:e1:67:12:ed:2d:77:4d:46:e6:
f9:60:7e:09:43:86:94:c0:00:18:ca:7a:92:d5:f9:ad:94:29:
fa:44:9d:d0:e9:aa:ea:0b:48:a6:8f:dc:7f:bc:92:35:1e:40:
91:0e:93:b7:15:37:84:6a:8d:2e:7a:fe:22:8b:c9:01:9e:f7:
09:88:ed:52:49:f1:b7:b9:df:03:c0:a8:01:f4:af:dc:d2:86:
d3:ae:19:2f
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUOukzEznwkh4rvqFshL/C4jolAAwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAyMjYwODQ4MDVaFw0yNTAyMjQwODUzMDVaMDMxMTAvBgNV
BAMTKEQyQTMwMjNEQTcyQTVFQjFGODMwOUNGRkIwNjVBNTk3MjUxRjBCOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7VGKQib4tsNvsIdP1dSWj7+1w
MFBsl9U7472d0XguODN4zxnPnFS5SCBbTc/hhG7K7Hq8Z27YD+17pB1QZaVfrmti
iYdTa9R+7ENG+6YxjDAw919g4g4aXWpMmubPFt3e9eSQSTzgxwYg+TfYj+MIFGI1
Zs/bFAn2H4ijc6f777ljJ8LwJhvY2JjDl39dGAUz6N2ufRbBshFUSP7N4ggmoWtG
rHHQDJlfMj99KLW30z0ArO38+iL/3JJeEcDWJmh7IELBpalnAZhE+GrwXKWaWK9m
mfKUpqPN28nq0HQMIVgJdc0OhAlXjI8Bpr7LFgF0oFk8ddGYA/BQ/Z5PZqPtAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU0qMCPacqXrH4MJz/sGWllyUfC5MwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM1MmUzMTMzMzMyZTM3
MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzEzNDMxMzkzOTM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
m4UHMA0GCSqGSIb3DQEBCwUAA4IBAQCbuNsvqE330EtGLmJKjFrax/zr8nXYi7+3
vX0JHlCGX/Fi+hdRuZBY3oqg+dUWftURT7o7370m4cryS8Glp0WFHTZ6G548SP0S
Qp2RWFND8eMEQvtYm2PtvNK75A/YSJVuCt8fq/C1DoDc9R7z3GJfuCh+MRT0+YC3
qGd3OORdMUwFMMkyk0aC7Pe7gmZNaIqeE22uydvckekRAGLZ12A1fUmXPoT/9XAB
wCDhZxLtLXdNRub5YH4JQ4aUwAAYynqS1fmtlCn6RJ3Q6arqC0imj9x/vJI1HkCR
DpO3FTeEao0uev4ii8kBnvcJiO1SSfG3ud8DwKgB9K/c0obTrhkv
-----END CERTIFICATE-----
Generated at Tue May 21 08:01:44 2024 by rpki-client on console-fra.rpki-client.org