Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130332e302f32342d3234203d3e20313336373837.roa
File: 3135362e36372e3130332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Jwn1Oossdoy4R1WNosxVxqWAV9ANQPcLkf72FhSQue4=
Subject key identifier: 11:8A:B0:14:55:3B:81:79:B8:6F:28:5A:2D:C4:77:6E:68:4F:F5:86
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 74EC35A77999BF0607E6D289AA9F928AE19BCA49
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130332e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 02 Mar 2024 21:54:14 +0000
ROA not before: Sat 02 Mar 2024 21:49:14 +0000
ROA not after: Sat 01 Mar 2025 21:54:14 +0000
asID: 136787
IP address blocks: 156.67.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ec:35:a7:79:99:bf:06:07:e6:d2:89:aa:9f:92:8a:e1:9b:ca:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 2 21:49:14 2024 GMT
Not After : Mar 1 21:54:14 2025 GMT
Subject: CN=118AB014553B8179B86F285A2DC4776E684FF586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:67:61:5c:57:4c:61:b0:81:6f:11:5e:79:ad:
d9:b0:ed:21:d1:f0:a9:21:d3:4e:21:99:8b:22:ee:
98:9d:2e:f2:76:22:3c:06:3e:9e:ed:ea:d2:61:a5:
ad:e6:01:b1:5c:92:2b:3a:24:08:d6:ca:f3:63:72:
76:76:8f:98:36:7e:07:7b:6c:bc:6a:77:67:35:48:
db:4d:f3:fc:b7:86:8e:5d:9b:60:f3:e8:a9:68:f2:
b9:8d:89:25:74:e3:3b:18:48:31:48:d7:d0:5f:e7:
63:b6:b6:b1:2d:87:86:f1:81:8e:88:11:ff:fc:ad:
c3:f7:d8:8d:0c:47:a3:b9:0e:39:b8:a7:d7:48:aa:
8d:b8:f3:cf:45:b6:34:aa:1f:ce:f2:52:20:1e:b5:
88:32:98:8d:9b:aa:10:8d:08:1a:d8:d0:35:75:34:
f8:a7:fc:0b:63:c1:96:96:4e:d7:79:66:7b:81:50:
14:bf:28:ab:09:f8:25:39:e4:b8:ca:80:66:67:1e:
40:37:a2:1f:70:c1:36:80:a9:7e:c1:54:e5:06:25:
3b:e5:4a:32:79:ef:b7:7d:5b:7d:59:bb:8e:96:19:
57:74:02:30:74:d5:87:df:61:38:dc:5c:d9:dd:79:
1d:4c:04:d4:7e:ec:a5:dd:34:a4:ea:3e:4e:4d:52:
66:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8A:B0:14:55:3B:81:79:B8:6F:28:5A:2D:C4:77:6E:68:4F:F5:86
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.103.0/24
Signature Algorithm: sha256WithRSAEncryption
12:6b:dc:88:b7:56:3a:1b:f5:58:9d:f2:c8:70:d5:2c:d8:ed:
b8:9a:ed:93:3a:bb:2c:20:ea:c2:34:87:b6:8a:06:56:35:09:
7a:0c:8f:31:b4:d5:42:ca:a5:d3:95:dd:3d:86:33:5e:12:64:
65:ce:a2:a5:21:e6:21:76:25:0e:cb:dd:a2:a6:c5:c8:60:1d:
a9:2f:78:37:02:b1:8e:49:3f:40:06:15:6c:62:f3:f7:39:a3:
7c:90:82:3f:dd:5a:7d:a5:21:5b:b1:b3:3a:6c:c4:91:85:7e:
d1:f5:58:d3:2b:49:cc:69:b2:49:06:fd:b5:12:e0:97:51:cd:
25:42:ad:7b:50:27:32:4e:d1:27:19:cf:78:40:ac:91:94:c3:
70:91:a8:f6:88:af:59:a2:3e:7e:8e:de:89:fe:6c:38:d6:54:
53:d3:d3:5d:cc:2c:6c:0e:13:c0:02:71:91:74:ac:ee:96:fe:
50:80:84:8d:8c:cc:67:fa:a2:b7:5a:f8:0f:55:41:19:84:fc:
38:de:ad:ee:67:8b:e7:9a:2c:7d:b7:6d:47:82:c8:d8:4c:d1:
5b:9a:f2:d3:80:de:a2:b9:8b:25:e3:8b:8f:cb:dd:8a:64:c7:
dc:24:68:2f:f4:fb:9f:89:b3:68:41:8c:3c:e8:d2:b7:e7:94:
62:66:8e:69
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUdOw1p3mZvwYH5tKJqp+SiuGbykkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAzMDIyMTQ5MTRaFw0yNTAzMDEyMTU0MTRaMDMxMTAvBgNV
BAMTKDExOEFCMDE0NTUzQjgxNzlCODZGMjg1QTJEQzQ3NzZFNjg0RkY1ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVZ2FcV0xhsIFvEV55rdmw7SHR
8Kkh004hmYsi7pidLvJ2IjwGPp7t6tJhpa3mAbFckis6JAjWyvNjcnZ2j5g2fgd7
bLxqd2c1SNtN8/y3ho5dm2Dz6Klo8rmNiSV04zsYSDFI19Bf52O2trEth4bxgY6I
Ef/8rcP32I0MR6O5Djm4p9dIqo24889FtjSqH87yUiAetYgymI2bqhCNCBrY0DV1
NPin/AtjwZaWTtd5ZnuBUBS/KKsJ+CU55LjKgGZnHkA3oh9wwTaAqX7BVOUGJTvl
SjJ577d9W31Zu46WGVd0AjB01YffYTjcXNndeR1MBNR+7KXdNKTqPk5NUmZFAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUEYqwFFU7gXm4byhaLcR3bmhP9YYwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM2MmUzNjM3MmUzMTMw
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACcQ2cwDQYJKoZIhvcNAQELBQADggEBABJr3Ii3Vjob9Vid8shw1SzY7bia7ZM6
uywg6sI0h7aKBlY1CXoMjzG01ULKpdOV3T2GM14SZGXOoqUh5iF2JQ7L3aKmxchg
HakveDcCsY5JP0AGFWxi8/c5o3yQgj/dWn2lIVuxszpsxJGFftH1WNMrScxpskkG
/bUS4JdRzSVCrXtQJzJO0ScZz3hArJGUw3CRqPaIr1miPn6O3on+bDjWVFPT013M
LGwOE8ACcZF0rO6W/lCAhI2MzGf6orda+A9VQRmE/Djere5ni+eaLH23bUeCyNhM
0Vua8tOA3qK5iyXji4/L3Ypkx9wkaC/0+5+Js2hBjDzo0rfnlGJmjmk=
-----END CERTIFICATE-----
Generated at Wed May 8 11:32:58 2024 by rpki-client on console-ams.rpki-client.org