Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137382e302f32342d3234203d3e20313336373837.roa
File: 3137362e35332e3137382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: cwH0inUD5ahQ73Zp2rqcC3C1WpcEWSV8SESSfnluo+o=
Subject key identifier: BF:F0:ED:95:1A:D4:EB:06:25:74:C2:B3:15:98:3F:31:29:AE:85:5A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1C9B2E7E9DB810880A26AC3CF10F673F7C0111F8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 19:44:36 +0000
ROA not before: Fri 27 Dec 2024 19:39:36 +0000
ROA not after: Fri 26 Dec 2025 19:44:36 +0000
asID: 136787
IP address blocks: 176.53.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:9b:2e:7e:9d:b8:10:88:0a:26:ac:3c:f1:0f:67:3f:7c:01:11:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 27 19:39:36 2024 GMT
Not After : Dec 26 19:44:36 2025 GMT
Subject: CN=BFF0ED951AD4EB062574C2B315983F3129AE855A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:ed:7e:f3:f3:26:b6:97:02:3a:78:4f:02:
0a:05:08:a0:b6:a3:7c:7e:a5:88:af:86:59:c4:f2:
97:9a:94:c2:7f:7d:56:dd:c8:00:0d:1e:36:68:0b:
c1:f0:0f:44:8f:81:1a:9d:15:04:2e:9b:82:28:82:
42:7b:75:1c:ca:1a:f6:e4:20:48:9b:28:f6:03:3d:
f8:ea:c1:ce:d4:40:7a:16:7d:92:59:f8:dc:18:90:
ca:d9:49:6d:8b:e1:dc:81:55:63:d8:d6:97:1d:6c:
ba:b3:ac:8e:4a:39:76:6b:4d:fe:6a:51:7b:19:75:
75:1a:dc:26:ae:36:69:ca:6f:1e:0c:24:c9:c1:ad:
cc:32:70:18:f3:83:fc:d2:d8:51:a3:e5:e3:34:cc:
da:30:2b:e1:35:12:d4:e1:1f:94:f4:06:83:13:29:
e8:8b:7c:83:39:fd:f9:94:30:32:11:74:c8:77:b1:
33:c9:4e:55:8c:ba:40:20:c4:f1:e6:e7:26:28:9c:
b6:29:50:b6:cb:d8:c4:f9:4f:5e:62:ca:f2:57:8b:
93:77:58:d0:66:5f:99:24:d6:d6:dc:2f:d2:bf:54:
00:31:fa:38:21:64:fc:e8:06:72:90:73:eb:19:f0:
cb:02:3b:fa:5a:19:e1:69:29:57:15:24:88:aa:e4:
2c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F0:ED:95:1A:D4:EB:06:25:74:C2:B3:15:98:3F:31:29:AE:85:5A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.178.0/24
Signature Algorithm: sha256WithRSAEncryption
70:2c:6a:59:b4:bd:6e:c1:5c:7d:f5:07:fd:68:68:00:45:d2:
38:ee:df:0d:a4:83:fa:ee:41:0e:08:c8:44:62:17:ee:04:2e:
ba:c7:f5:6c:2d:58:07:4b:88:e8:9a:f6:5b:2c:55:1e:d1:d0:
c1:7c:80:7c:ae:62:3d:3f:01:9e:ff:4d:a6:c6:9b:0d:28:26:
26:f9:2a:11:94:82:23:f5:0c:e8:49:85:9e:21:ba:43:f0:8d:
48:51:2b:43:77:7f:17:7b:b9:c9:2b:be:cf:a5:0f:ac:d1:f7:
d1:74:bf:95:60:51:5e:da:b8:f3:ba:27:de:f6:56:77:a8:82:
b9:45:59:02:c3:cf:57:60:c8:f1:95:10:c9:0c:c3:be:2c:a6:
59:9b:73:6b:67:21:fd:36:9f:8e:26:e1:5a:1a:7c:f8:f2:2d:
7e:28:ec:a9:8b:52:96:bf:a1:a7:a1:a9:85:fc:54:84:a9:1e:
35:2f:c0:ac:3d:d7:8d:82:cf:fa:67:6c:ce:2b:31:20:0e:7d:
65:ce:16:0d:de:3b:b1:b3:3b:75:f8:fd:ad:19:8d:91:fa:f0:
c1:68:20:7f:ff:ab:10:e9:ca:74:12:a7:77:31:91:fd:ee:0a:
9a:ad:5a:05:0f:42:d0:73:ee:83:31:28:11:34:50:b1:a6:be:
6f:f8:7c:54
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUHJsufp24EIgKJqw88Q9nP3wBEfgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDEyMjcxOTM5MzZaFw0yNTEyMjYxOTQ0MzZaMDMxMTAvBgNV
BAMTKEJGRjBFRDk1MUFENEVCMDYyNTc0QzJCMzE1OTgzRjMxMjlBRTg1NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Te1+8/MmtpcCOnhPAgoFCKC2
o3x+pYivhlnE8pealMJ/fVbdyAANHjZoC8HwD0SPgRqdFQQum4IogkJ7dRzKGvbk
IEibKPYDPfjqwc7UQHoWfZJZ+NwYkMrZSW2L4dyBVWPY1pcdbLqzrI5KOXZrTf5q
UXsZdXUa3CauNmnKbx4MJMnBrcwycBjzg/zS2FGj5eM0zNowK+E1EtThH5T0BoMT
KeiLfIM5/fmUMDIRdMh3sTPJTlWMukAgxPHm5yYonLYpULbL2MT5T15iyvJXi5N3
WNBmX5kk1tbcL9K/VAAx+jghZPzoBnKQc+sZ8MsCO/paGeFpKVcVJIiq5CzFAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUv/DtlRrU6wYldMKzFZg/MSmuhVowHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNzM2MmUzNTMzMmUzMTM3
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACwNbIwDQYJKoZIhvcNAQELBQADggEBAHAsalm0vW7BXH31B/1oaABF0jju3w2k
g/ruQQ4IyERiF+4ELrrH9WwtWAdLiOia9lssVR7R0MF8gHyuYj0/AZ7/TabGmw0o
Jib5KhGUgiP1DOhJhZ4hukPwjUhRK0N3fxd7uckrvs+lD6zR99F0v5VgUV7auPO6
J972VneogrlFWQLDz1dgyPGVEMkMw74splmbc2tnIf02n44m4VoafPjyLX4o7KmL
Upa/oaehqYX8VISpHjUvwKw9142Cz/pnbM4rMSAOfWXOFg3eO7GzO3X4/a0ZjZH6
8MFoIH//qxDpynQSp3cxkf3uCpqtWgUPQtBz7oMxKBE0ULGmvm/4fFQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:50 2025 by rpki-client