Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e35352e302f32342d3332203d3e203531313637.roa
File: 3135392e34382e35352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: NkbonHuWYcPPcZadxBngibZyWt4mwVmV51Ufkz4cDFA=
Subject key identifier: D2:EF:AC:CA:A3:C6:28:97:21:F9:13:8B:33:4A:D8:49:3B:5F:FD:05
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1C5431C2343EBB905B356A9F3D7EDF45A22BF570
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e35352e302f32342d3332203d3e203531313637.roa
Signing time: Thu 30 May 2024 20:38:56 +0000
ROA not before: Thu 30 May 2024 20:33:56 +0000
ROA not after: Thu 29 May 2025 20:38:56 +0000
asID: 51167
IP address blocks: 159.48.55.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:54:31:c2:34:3e:bb:90:5b:35:6a:9f:3d:7e:df:45:a2:2b:f5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 30 20:33:56 2024 GMT
Not After : May 29 20:38:56 2025 GMT
Subject: CN=D2EFACCAA3C6289721F9138B334AD8493B5FFD05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e6:45:81:47:d0:51:9b:47:40:72:63:d5:d8:
54:6a:dd:2a:9e:52:38:b0:a8:7b:e0:df:cc:25:b9:
c5:ed:0a:43:09:a1:e8:09:79:21:3f:01:3b:15:be:
d4:f5:b6:78:26:c5:cf:35:89:5c:cc:b4:3c:45:18:
26:dc:64:85:4a:79:e5:b7:6d:f8:94:da:9b:5d:58:
99:c5:a5:6d:1a:85:55:dd:c8:7e:22:84:89:74:c8:
0e:0a:ac:16:0b:d6:ca:57:dd:32:1f:ae:af:60:c3:
6d:e7:f5:80:5e:69:1f:a1:d3:84:67:bd:52:79:02:
10:4d:e6:f2:cd:e5:ae:35:27:ec:9c:f9:d1:36:dd:
e3:a3:4c:7a:28:5f:82:16:33:02:03:d4:80:78:55:
7c:f1:c2:c9:c5:7c:15:66:f3:ae:17:f8:46:00:14:
27:3e:01:29:8f:e4:6c:f2:9d:ba:a7:a4:ba:56:a2:
72:75:3a:41:7e:15:e7:71:00:40:69:1b:03:5f:aa:
a4:bc:88:92:a3:09:e8:52:fe:aa:13:e3:df:55:07:
0e:9a:e4:a7:1a:b1:d7:c2:45:cc:85:e3:95:d1:16:
00:dc:4c:80:a9:f1:b6:af:d1:ec:ac:09:ed:a0:8e:
b6:3c:63:9b:c9:c1:84:5b:e6:63:81:30:7e:91:bf:
a8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EF:AC:CA:A3:C6:28:97:21:F9:13:8B:33:4A:D8:49:3B:5F:FD:05
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e35352e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.48.55.0/24
Signature Algorithm: sha256WithRSAEncryption
34:54:3c:55:73:90:a9:a7:ed:db:97:b6:36:f1:32:4e:2f:a7:
38:e6:b2:2b:a8:35:51:cb:91:7f:d2:f2:26:84:f4:90:fa:8d:
21:0c:88:32:1e:7c:92:6f:48:a5:da:85:a5:d8:a7:03:57:e5:
59:8c:2e:85:49:1a:ae:d8:41:63:1c:d9:9e:f3:4e:aa:74:70:
58:69:6f:48:17:22:c4:2c:56:52:0a:a1:ed:9d:8e:e4:db:52:
05:4e:55:ad:cb:1f:67:2c:65:d6:69:c8:69:0c:81:fe:8a:b1:
25:f3:55:78:66:c8:34:cb:1d:17:19:a8:e9:9f:b0:56:f9:ec:
79:5e:5a:d2:08:ba:74:82:20:93:66:10:3f:31:94:bc:c9:f9:
eb:6b:3b:9e:fe:af:29:28:26:8b:69:48:17:a6:97:5c:3f:3d:
03:23:42:ff:e7:ac:d2:1e:46:2f:5f:91:98:a6:90:95:6b:25:
7a:3d:1a:f0:a7:2c:d3:b2:45:bb:0b:93:33:f9:4f:65:eb:d2:
19:e0:9d:4e:12:38:f4:0b:2a:19:a4:59:77:88:19:1a:3d:3b:
db:f2:f3:3d:fd:1e:c1:b0:ce:0c:82:71:0e:05:2a:f0:66:9b:
55:32:e3:6d:11:2c:c8:59:1e:8a:a4:97:bc:5e:11:89:15:43:
1c:04:4a:cc
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUHFQxwjQ+u5BbNWqfPX7fRaIr9XAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDA1MzAyMDMzNTZaFw0yNTA1MjkyMDM4NTZaMDMxMTAvBgNV
BAMTKEQyRUZBQ0NBQTNDNjI4OTcyMUY5MTM4QjMzNEFEODQ5M0I1RkZEMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC45kWBR9BRm0dAcmPV2FRq3Sqe
UjiwqHvg38wlucXtCkMJoegJeSE/ATsVvtT1tngmxc81iVzMtDxFGCbcZIVKeeW3
bfiU2ptdWJnFpW0ahVXdyH4ihIl0yA4KrBYL1spX3TIfrq9gw23n9YBeaR+h04Rn
vVJ5AhBN5vLN5a41J+yc+dE23eOjTHooX4IWMwID1IB4VXzxwsnFfBVm864X+EYA
FCc+ASmP5GzynbqnpLpWonJ1OkF+FedxAEBpGwNfqqS8iJKjCehS/qoT499VBw6a
5KcasdfCRcyF45XRFgDcTICp8bav0eysCe2gjrY8Y5vJwYRb5mOBMH6Rv6iFAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU0u+syqPGKJch+ROLM0rYSTtf/QUwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM5MmUzNDM4MmUzNTM1
MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ8w
NzANBgkqhkiG9w0BAQsFAAOCAQEANFQ8VXOQqaft25e2NvEyTi+nOOayK6g1UcuR
f9LyJoT0kPqNIQyIMh58km9IpdqFpdinA1flWYwuhUkarthBYxzZnvNOqnRwWGlv
SBcixCxWUgqh7Z2O5NtSBU5VrcsfZyxl1mnIaQyB/oqxJfNVeGbINMsdFxmo6Z+w
VvnseV5a0gi6dIIgk2YQPzGUvMn562s7nv6vKSgmi2lIF6aXXD89AyNC/+es0h5G
L1+RmKaQlWslej0a8Kcs07JFuwuTM/lPZevSGeCdThI49AsqGaRZd4gZGj072/Lz
Pf0ewbDODIJxDgUq8GabVTLjbREsyFkeiqSXvF4RiRVDHARKzA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:42:55 2024 by rpki-client on console-fra.rpki-client.org