Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37312e302f32342d3234203d3e20323132323338.roa
File: 3135352e3133332e37312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 6NhLB69+3sjHK1g2yRPfIenDQ8B1aPVAIt3+YwFAsc0=
Subject key identifier: 07:C2:46:2D:02:C9:47:01:30:50:EB:41:93:85:53:23:EF:DE:C3:31
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6604D7660263D17A550B71FA2D4A54ED55347343
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37312e302f32342d3234203d3e20323132323338.roa
Signing time: Fri 14 Jun 2024 09:10:02 +0000
ROA not before: Fri 14 Jun 2024 09:05:02 +0000
ROA not after: Fri 13 Jun 2025 09:10:02 +0000
asID: 212238
IP address blocks: 155.133.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:04:d7:66:02:63:d1:7a:55:0b:71:fa:2d:4a:54:ed:55:34:73:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 14 09:05:02 2024 GMT
Not After : Jun 13 09:10:02 2025 GMT
Subject: CN=07C2462D02C947013050EB4193855323EFDEC331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:78:75:4d:e1:3f:35:38:85:08:29:5f:47:38:
10:f5:e3:2d:78:52:88:5b:91:56:ca:d8:32:df:a2:
6f:d3:5e:6e:52:77:ae:d0:11:ad:63:eb:76:e7:53:
81:eb:ed:59:43:d0:a0:94:3c:3f:a9:d5:40:90:2f:
de:65:80:22:d3:2a:2c:f0:c8:ee:8e:34:3b:22:f8:
f2:60:c2:85:62:aa:9a:b4:f4:16:55:e5:ab:fc:39:
03:0d:a8:77:e2:25:2d:f2:4b:a7:d0:6b:bd:7f:0d:
17:66:db:db:4b:90:17:9a:10:14:a0:17:f6:de:3f:
a9:47:45:74:29:f5:08:78:6f:f7:f2:16:f2:44:1a:
b9:c0:e8:be:83:63:e4:e1:e4:07:7e:cb:2c:36:00:
2f:b7:f8:80:55:2f:7a:15:aa:8b:ad:e8:41:24:27:
a6:98:95:a5:fe:85:15:aa:8e:88:fd:02:df:26:d9:
84:a0:68:0b:7b:e9:7b:55:6b:fe:2f:6b:5f:03:56:
d1:2d:3c:a1:4b:df:88:e8:23:fa:92:71:1a:ee:48:
9f:29:68:c2:69:77:53:e2:91:66:7f:b6:8c:90:c2:
df:89:75:65:dd:82:2e:66:df:a9:4a:5b:bd:1a:17:
e9:93:3d:ec:4a:fe:a9:d8:d9:30:da:7f:70:82:bb:
2b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C2:46:2D:02:C9:47:01:30:50:EB:41:93:85:53:23:EF:DE:C3:31
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37312e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.71.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b4:a1:03:b5:67:c7:92:f0:17:1b:57:1e:be:a2:ba:72:77:
79:bd:43:61:d6:da:eb:15:2a:15:5e:da:9a:48:ef:0f:43:5b:
3e:a7:15:41:59:32:f7:07:03:94:ef:1f:0e:0a:3b:c6:2d:78:
fb:57:6e:66:8c:93:da:3a:3b:c6:14:71:2a:08:5c:ae:62:8d:
68:5c:b9:cc:b7:1c:d5:6e:d3:36:3b:25:53:22:33:74:a1:cf:
78:26:39:a5:68:6b:35:7c:00:f9:ff:84:cf:59:c5:fd:03:86:
d3:83:75:ea:c8:b2:fa:0b:79:96:5b:ba:b9:1d:98:37:6d:fd:
d3:8c:af:c8:a7:22:3b:57:8b:1d:a2:96:86:b1:5e:4b:d4:12:
d4:c7:a0:09:49:e4:17:d6:30:97:0e:62:7b:02:75:81:1a:41:
7e:9f:53:e1:5b:22:bd:26:6b:f3:8b:33:3f:01:8c:67:11:be:
cb:14:ef:83:d7:78:e9:de:2c:df:ee:41:8e:34:ae:a4:9b:d5:
68:80:b2:30:03:e6:5b:b5:92:58:5b:0b:da:f0:e8:48:f3:8d:
10:85:4b:f6:77:25:0c:fe:ca:e2:1d:e2:e6:e4:9b:39:d3:fc:
a9:fc:d9:3d:68:9c:d2:bf:68:ac:4f:32:1a:b5:b6:f3:3d:45:
06:79:2e:4a
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUZgTXZgJj0XpVC3H6LUpU7VU0c0MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDA2MTQwOTA1MDJaFw0yNTA2MTMwOTEwMDJaMDMxMTAvBgNV
BAMTKDA3QzI0NjJEMDJDOTQ3MDEzMDUwRUI0MTkzODU1MzIzRUZERUMzMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCieHVN4T81OIUIKV9HOBD14y14
UohbkVbK2DLfom/TXm5Sd67QEa1j63bnU4Hr7VlD0KCUPD+p1UCQL95lgCLTKizw
yO6ONDsi+PJgwoViqpq09BZV5av8OQMNqHfiJS3yS6fQa71/DRdm29tLkBeaEBSg
F/beP6lHRXQp9Qh4b/fyFvJEGrnA6L6DY+Th5Ad+yyw2AC+3+IBVL3oVqout6EEk
J6aYlaX+hRWqjoj9At8m2YSgaAt76XtVa/4va18DVtEtPKFL34joI/qScRruSJ8p
aMJpd1PikWZ/toyQwt+JdWXdgi5m36lKW70aF+mTPexK/qnY2TDaf3CCuytZAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUB8JGLQLJRwEwUOtBk4VTI+/ewzEwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM1MmUzMTMzMzMyZTM3
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMjMzMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACbhUcwDQYJKoZIhvcNAQELBQADggEBAAe0oQO1Z8eS8BcbVx6+orpyd3m9Q2HW
2usVKhVe2ppI7w9DWz6nFUFZMvcHA5TvHw4KO8YtePtXbmaMk9o6O8YUcSoIXK5i
jWhcucy3HNVu0zY7JVMiM3Shz3gmOaVoazV8APn/hM9Zxf0DhtODderIsvoLeZZb
urkdmDdt/dOMr8inIjtXix2iloaxXkvUEtTHoAlJ5BfWMJcOYnsCdYEaQX6fU+Fb
Ir0ma/OLMz8BjGcRvssU74PXeOneLN/uQY40rqSb1WiAsjAD5lu1klhbC9rw6Ejz
jRCFS/Z3JQz+yuId4ubkmznT/Kn82T1onNK/aKxPMhq1tvM9RQZ5Lko=
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:25 2024 by rpki-client on console-ams.rpki-client.org