Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e38332e302f32342d3234203d3e20313336323538.roa
File: 3137362e3132362e38332e302f32342d3234203d3e20313336323538.roa (raw, json)
Hash identifier: eeL/MKDQPR5GcVQD70/ZYe4u/Pi908+GYYC1xfM63ck=
Subject key identifier: D6:38:AF:4C:C3:DF:27:17:18:F2:B9:FD:2F:09:43:C9:42:D9:B7:29
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 46B89319102BF6B172127BCC6C20C2ECDC05AF15
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e38332e302f32342d3234203d3e20313336323538.roa
Signing time: Tue 10 Sep 2024 19:28:48 +0000
ROA not before: Tue 10 Sep 2024 19:23:48 +0000
ROA not after: Tue 09 Sep 2025 19:28:48 +0000
asID: 136258
IP address blocks: 176.126.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b8:93:19:10:2b:f6:b1:72:12:7b:cc:6c:20:c2:ec:dc:05:af:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 19:23:48 2024 GMT
Not After : Sep 9 19:28:48 2025 GMT
Subject: CN=D638AF4CC3DF271718F2B9FD2F0943C942D9B729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:11:d1:34:18:01:d3:a3:87:85:1c:f3:f1:
a7:00:37:e3:9c:a0:12:c5:85:a3:6e:e9:aa:75:6e:
1c:ad:2c:a0:a0:ef:55:d2:05:f6:ed:39:97:b5:fe:
04:9d:84:18:85:a4:6d:b9:8f:42:8e:bb:8b:7e:f3:
3e:3a:93:4a:84:ff:0b:d1:57:f7:64:f7:eb:f3:8b:
40:a3:78:0b:22:ce:22:69:98:5a:27:f0:cb:47:87:
b5:37:11:5a:d7:f4:6e:54:c0:a6:f6:50:49:5c:27:
e6:db:a1:56:04:28:a4:03:e4:f6:32:bb:92:46:1f:
9f:1e:94:b3:e0:53:b1:e4:f6:5b:50:14:5e:e4:6c:
32:52:7b:99:88:13:2d:ee:b3:18:c4:b1:7d:62:9d:
13:8e:39:d4:de:21:ba:72:0e:3e:9c:23:21:8b:e8:
19:bc:fd:7d:a6:43:d2:00:bb:15:22:1b:40:25:67:
32:f6:15:60:aa:e1:dc:fa:10:99:74:47:75:ed:30:
0e:bc:20:db:38:81:c8:2e:0a:a3:b2:80:c1:75:3b:
54:8c:5f:68:05:66:51:ee:fa:a4:72:49:f5:73:bd:
ce:ec:b4:cd:a5:54:42:58:b2:ba:80:18:fb:cf:62:
59:97:0d:04:12:50:24:73:94:c7:8a:10:4b:e1:22:
4b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:38:AF:4C:C3:DF:27:17:18:F2:B9:FD:2F:09:43:C9:42:D9:B7:29
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e38332e302f32342d3234203d3e20313336323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.83.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:87:15:62:a4:96:99:14:91:16:c8:c8:55:ee:92:5a:03:bb:
69:56:e3:46:3e:89:e0:de:6a:5f:90:7c:6d:e4:59:c4:5a:78:
e7:c8:84:7b:48:75:f6:f4:86:ce:ae:a6:51:15:2b:20:09:ca:
ea:04:bf:3c:f8:86:53:b3:eb:7f:aa:1c:f5:65:96:cb:d5:c8:
fe:ad:5b:02:62:46:6c:11:14:51:fa:5e:28:6d:11:c3:9a:f4:
c2:fb:ce:01:9d:92:1d:9e:3c:7a:44:03:08:ea:df:55:04:51:
66:7d:4f:0a:1f:63:1c:47:5f:89:13:55:cd:0f:a5:ec:5a:17:
8d:b5:32:27:d2:f6:81:c4:b8:b0:2e:7a:12:dc:44:91:8c:4f:
15:99:09:f1:84:d8:2e:03:d3:4d:76:46:49:5d:91:60:ef:c1:
a5:c5:48:10:90:ce:68:1a:50:e2:24:7f:4a:ca:5e:1e:42:c3:
6b:ab:75:a3:6e:9e:5f:b8:61:e7:1a:67:68:d1:ae:08:ae:03:
a8:c9:57:8b:93:29:18:64:8c:18:18:e3:f4:3b:6d:bc:36:24:
d3:c0:c3:7d:62:e0:6c:50:3d:6a:23:ec:d6:61:32:68:77:82:
0c:e8:8f:d3:4d:9b:31:f8:09:4b:57:37:46:19:e3:f1:1e:b7:
16:69:a2:bd
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIURriTGRAr9rFyEnvMbCDC7NwFrxUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDA5MTAxOTIzNDhaFw0yNTA5MDkxOTI4NDhaMDMxMTAvBgNV
BAMTKEQ2MzhBRjRDQzNERjI3MTcxOEYyQjlGRDJGMDk0M0M5NDJEOUI3MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBXRHRNBgB06OHhRzz8acAN+Oc
oBLFhaNu6ap1bhytLKCg71XSBfbtOZe1/gSdhBiFpG25j0KOu4t+8z46k0qE/wvR
V/dk9+vzi0CjeAsiziJpmFon8MtHh7U3EVrX9G5UwKb2UElcJ+bboVYEKKQD5PYy
u5JGH58elLPgU7Hk9ltQFF7kbDJSe5mIEy3usxjEsX1inROOOdTeIbpyDj6cIyGL
6Bm8/X2mQ9IAuxUiG0AlZzL2FWCq4dz6EJl0R3XtMA68INs4gcguCqOygMF1O1SM
X2gFZlHu+qRySfVzvc7stM2lVEJYsrqAGPvPYlmXDQQSUCRzlMeKEEvhIkvVAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU1jivTMPfJxcY8rn9LwlDyULZtykwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNzM2MmUzMTMyMzYyZTM4
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzMjM1Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACwflMwDQYJKoZIhvcNAQELBQADggEBAJ2HFWKklpkUkRbIyFXukloDu2lW40Y+
ieDeal+QfG3kWcRaeOfIhHtIdfb0hs6uplEVKyAJyuoEvzz4hlOz63+qHPVllsvV
yP6tWwJiRmwRFFH6XihtEcOa9ML7zgGdkh2ePHpEAwjq31UEUWZ9TwofYxxHX4kT
Vc0PpexaF421MifS9oHEuLAuehLcRJGMTxWZCfGE2C4D0012RkldkWDvwaXFSBCQ
zmgaUOIkf0rKXh5Cw2urdaNunl+4YecaZ2jRrgiuA6jJV4uTKRhkjBgY4/Q7bbw2
JNPAw31i4GxQPWoj7NZhMmh3ggzoj9NNmzH4CUtXN0YZ4/EetxZpor0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:03 2024 by rpki-client on console-fra.rpki-client.org