Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e31362e3132382e302f32322d3234203d3e203437353833.roa
File: 3137382e31362e3132382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: M0nSzLQl5dTX0qT+Q2sjt4o0ioLcEDh/BqpfTEAY3kM=
Subject key identifier: A3:34:FE:30:38:79:11:CB:51:A5:FD:07:17:F5:17:AB:A7:64:81:5F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 47B1725BC2478B25E8DE69FAB60E85C1EC68E0BC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e31362e3132382e302f32322d3234203d3e203437353833.roa
Signing time: Thu 13 Jun 2024 10:40:57 +0000
ROA not before: Thu 13 Jun 2024 10:35:57 +0000
ROA not after: Thu 12 Jun 2025 10:40:57 +0000
asID: 47583
IP address blocks: 178.16.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:b1:72:5b:c2:47:8b:25:e8:de:69:fa:b6:0e:85:c1:ec:68:e0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 13 10:35:57 2024 GMT
Not After : Jun 12 10:40:57 2025 GMT
Subject: CN=A334FE30387911CB51A5FD0717F517ABA764815F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:1f:a6:57:ce:76:5c:43:23:98:70:a8:34:
20:ba:b3:97:ce:c4:cc:01:cb:d4:3f:46:db:d9:54:
2f:d3:36:1d:c3:f2:25:a6:f7:19:4d:84:ec:a2:ae:
bd:4e:f7:c2:30:6b:2e:5a:03:70:22:6b:86:48:64:
6a:b7:2b:8d:11:09:e7:5d:ae:e6:7d:17:33:1b:dd:
75:09:38:23:72:ef:88:c0:df:fc:fd:a3:74:3f:91:
67:53:63:26:a8:37:a8:91:ea:83:1b:6f:97:f9:9f:
ac:ba:20:84:2b:a2:c2:cc:f3:9c:2c:eb:fe:1a:5c:
27:ce:1c:0a:e2:51:a7:2b:ff:8c:73:c4:4d:fd:c8:
48:ee:a2:26:c1:9d:99:15:46:e6:18:92:fa:50:67:
56:2a:0f:df:ae:a0:6b:0a:25:d0:cd:ed:d7:dc:1d:
8a:fe:04:60:15:63:d1:19:e9:e0:aa:c7:d5:b5:f9:
2a:1e:de:9b:20:ad:27:a0:de:93:bc:6f:73:53:ab:
b5:c1:8c:3f:b6:08:b4:57:4b:6d:24:59:f3:2f:f0:
49:a0:d5:d5:88:c4:dc:8e:21:38:91:6c:6a:08:3b:
36:32:f4:25:47:2c:38:0b:68:67:7e:4b:8b:0d:e0:
e6:86:e0:1a:51:18:94:66:c3:54:83:d9:9a:07:25:
25:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:34:FE:30:38:79:11:CB:51:A5:FD:07:17:F5:17:AB:A7:64:81:5F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e31362e3132382e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.128.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:e2:01:e1:41:a2:55:5d:ce:8a:b3:d5:a4:63:6a:f3:09:c9:
45:25:f5:f0:6c:76:04:20:49:c7:9d:8d:1d:cc:fe:8e:d6:6b:
84:fd:04:f3:d5:03:92:e1:e7:54:30:75:88:0c:e9:22:0a:06:
96:5f:4d:d0:9c:c9:dc:b9:07:f7:9d:b9:ef:62:96:a7:0c:5f:
c2:89:c2:7f:f0:ce:13:45:ef:99:90:a2:83:74:87:a1:ca:22:
ec:b2:a2:25:e4:e3:e0:e1:7c:50:39:d9:4b:ba:7b:af:75:b3:
3b:aa:c7:64:0b:d0:20:09:1e:50:7f:1f:ed:94:07:a7:03:e7:
ca:22:8a:71:66:02:81:aa:67:6e:ce:63:4c:dd:92:67:d5:1c:
73:8b:b5:a7:5d:64:ba:30:12:21:f3:c5:01:79:7b:e9:bf:e6:
b2:0c:07:87:bd:59:4d:8a:13:43:b6:68:b3:aa:23:93:11:6e:
99:24:de:49:6c:7a:e0:cf:87:0b:77:f4:c3:26:aa:24:4f:7e:
cb:3f:01:34:2e:78:63:a1:46:12:32:0a:b7:fc:bf:75:88:36:
83:6f:d6:d9:13:a9:b3:02:2c:23:b2:54:ff:c2:a1:33:e4:08:
cf:13:46:51:8f:32:27:a1:5a:5e:8a:e0:78:b2:de:af:59:ff:
ab:9f:49:87
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUR7FyW8JHiyXo3mn6tg6Fwexo4LwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDA2MTMxMDM1NTdaFw0yNTA2MTIxMDQwNTdaMDMxMTAvBgNV
BAMTKEEzMzRGRTMwMzg3OTExQ0I1MUE1RkQwNzE3RjUxN0FCQTc2NDgxNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1kR+mV852XEMjmHCoNCC6s5fO
xMwBy9Q/RtvZVC/TNh3D8iWm9xlNhOyirr1O98Iway5aA3Aia4ZIZGq3K40RCedd
ruZ9FzMb3XUJOCNy74jA3/z9o3Q/kWdTYyaoN6iR6oMbb5f5n6y6IIQrosLM85ws
6/4aXCfOHAriUacr/4xzxE39yEjuoibBnZkVRuYYkvpQZ1YqD9+uoGsKJdDN7dfc
HYr+BGAVY9EZ6eCqx9W1+Soe3psgrSeg3pO8b3NTq7XBjD+2CLRXS20kWfMv8Emg
1dWIxNyOITiRbGoIOzYy9CVHLDgLaGd+S4sN4OaG4BpRGJRmw1SD2ZoHJSVlAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUozT+MDh5EctRpf0HF/UXq6dkgV8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNzM4MmUzMTM2MmUzMTMy
MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
shCAMA0GCSqGSIb3DQEBCwUAA4IBAQAM4gHhQaJVXc6Ks9WkY2rzCclFJfXwbHYE
IEnHnY0dzP6O1muE/QTz1QOS4edUMHWIDOkiCgaWX03QnMncuQf3nbnvYpanDF/C
icJ/8M4TRe+ZkKKDdIehyiLssqIl5OPg4XxQOdlLunuvdbM7qsdkC9AgCR5Qfx/t
lAenA+fKIopxZgKBqmduzmNM3ZJn1Rxzi7WnXWS6MBIh88UBeXvpv+ayDAeHvVlN
ihNDtmizqiOTEW6ZJN5JbHrgz4cLd/TDJqokT37LPwE0LnhjoUYSMgq3/L91iDaD
b9bZE6mzAiwjslT/wqEz5AjPE0ZRjzInoVpeiuB4st6vWf+rn0mH
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:06:15 2024 by rpki-client on console-fra.rpki-client.org