Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133372e302f32342d3332203d3e203531313637.roa
File: 3138352e3133352e3133372e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: 73bf7VmdsOxoV/PhcFpE07rg6JIozK2tzMlbsAhC79k=
Subject key identifier: 3C:1B:8B:FB:37:9A:7B:08:05:11:46:7D:A4:76:87:6F:20:0C:F0:63
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7F3B33F9E1E03793C90A20E9E8826C56CC1B6BE9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133372e302f32342d3332203d3e203531313637.roa
Signing time: Mon 26 Feb 2024 08:53:12 +0000
ROA not before: Mon 26 Feb 2024 08:48:12 +0000
ROA not after: Mon 24 Feb 2025 08:53:12 +0000
asID: 51167
IP address blocks: 185.135.137.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:3b:33:f9:e1:e0:37:93:c9:0a:20:e9:e8:82:6c:56:cc:1b:6b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:12 2024 GMT
Not After : Feb 24 08:53:12 2025 GMT
Subject: CN=3C1B8BFB379A7B080511467DA476876F200CF063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:06:ce:71:95:44:de:2a:b1:08:82:a2:bd:
3e:c6:69:af:32:d0:89:cc:58:c1:85:03:1c:97:1a:
dd:ff:40:82:6a:d0:de:cc:4c:9a:3b:5e:12:f2:da:
1c:bb:84:6f:34:6f:fa:b2:70:13:21:7a:7b:e5:24:
36:47:65:c8:f6:60:c1:e5:ec:03:bc:92:f3:64:f3:
31:df:68:eb:e7:2b:23:45:4c:73:63:78:1a:cd:13:
97:b4:8e:60:b3:17:17:90:91:44:62:1b:bb:71:24:
3c:a0:6a:90:f4:d3:df:76:77:61:ce:6b:21:87:2d:
15:e1:a7:c4:f6:23:e8:15:0f:3c:f5:30:23:65:63:
6a:dd:16:06:f2:c3:e9:5f:65:d7:de:fe:f4:ac:91:
a5:32:27:cf:01:0e:ec:7e:74:f0:2e:27:28:5e:ea:
3b:de:bf:ae:dc:d5:4e:87:a7:11:76:1a:82:e8:a9:
ad:8b:77:c3:9e:63:ea:95:b2:da:3a:a9:e3:0f:72:
2d:02:3e:3c:b0:75:c6:e4:e8:86:fa:4d:67:96:dc:
d0:35:26:cf:1e:05:38:66:ff:a4:ad:20:8b:08:4d:
47:51:d1:f1:39:6a:27:93:5c:4a:ba:cb:06:e6:3d:
0f:86:ab:9f:f4:dd:0f:b4:62:36:c2:b1:75:b3:46:
8d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1B:8B:FB:37:9A:7B:08:05:11:46:7D:A4:76:87:6F:20:0C:F0:63
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133372e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.137.0/24
Signature Algorithm: sha256WithRSAEncryption
57:26:f5:da:e7:f1:83:92:64:aa:c0:77:56:9c:19:4b:fb:79:
ff:a0:61:9f:75:78:ae:3a:6d:5a:f2:31:a8:08:64:fa:55:72:
a1:bc:51:f9:3f:56:5a:63:e8:2b:a8:08:9c:05:8c:21:89:3d:
22:ec:8b:26:b3:11:17:1e:2e:bd:75:8d:4c:8d:33:93:8e:a7:
be:78:2d:b7:76:f1:d7:e2:16:8f:32:53:37:f0:e8:bc:44:0b:
27:6f:9d:fd:70:ea:55:b2:00:78:18:24:d0:ca:53:ca:1a:3e:
74:77:10:78:fb:d5:54:cb:38:b4:28:2a:4f:7d:e5:77:56:7d:
5f:19:ed:38:49:96:e3:61:33:27:16:a2:af:0d:a9:c2:04:84:
42:9a:24:80:a0:63:e6:bd:f0:4b:db:92:a0:0c:dc:98:56:03:
59:7e:1f:86:dd:07:52:fc:df:36:32:5d:d7:3b:57:27:ff:ad:
13:99:eb:52:be:82:54:48:5b:31:9b:45:78:a0:50:0e:e7:8f:
2c:34:7a:a4:1d:86:a5:ea:3e:27:9f:75:ce:bd:6b:5a:07:8d:
1a:b1:0d:9b:e6:c6:17:01:a8:4b:5a:b8:f0:23:6c:c6:2d:6f:
d1:b2:d8:8a:bd:11:03:6a:3b:69:04:96:af:ba:83:bd:56:95:
88:81:24:d5
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUfzsz+eHgN5PJCiDp6IJsVswba+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAyMjYwODQ4MTJaFw0yNTAyMjQwODUzMTJaMDMxMTAvBgNV
BAMTKDNDMUI4QkZCMzc5QTdCMDgwNTExNDY3REE0NzY4NzZGMjAwQ0YwNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDnwbOcZVE3iqxCIKivT7Gaa8y
0InMWMGFAxyXGt3/QIJq0N7MTJo7XhLy2hy7hG80b/qycBMhenvlJDZHZcj2YMHl
7AO8kvNk8zHfaOvnKyNFTHNjeBrNE5e0jmCzFxeQkURiG7txJDygapD00992d2HO
ayGHLRXhp8T2I+gVDzz1MCNlY2rdFgbyw+lfZdfe/vSskaUyJ88BDux+dPAuJyhe
6jvev67c1U6HpxF2GoLoqa2Ld8OeY+qVsto6qeMPci0CPjywdcbk6Ib6TWeW3NA1
Js8eBThm/6StIIsITUdR0fE5aieTXEq6ywbmPQ+Gq5/03Q+0YjbCsXWzRo0NAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUPBuL+zeaewgFEUZ9pHaHbyAM8GMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTMzMzUyZTMx
MzMzNzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5h4kwDQYJKoZIhvcNAQELBQADggEBAFcm9drn8YOSZKrAd1acGUv7ef+gYZ91
eK46bVryMagIZPpVcqG8Ufk/Vlpj6CuoCJwFjCGJPSLsiyazERceLr11jUyNM5OO
p754Lbd28dfiFo8yUzfw6LxECydvnf1w6lWyAHgYJNDKU8oaPnR3EHj71VTLOLQo
Kk995XdWfV8Z7ThJluNhMycWoq8NqcIEhEKaJICgY+a98EvbkqAM3JhWA1l+H4bd
B1L83zYyXdc7Vyf/rROZ61K+glRIWzGbRXigUA7njyw0eqQdhqXqPiefdc69a1oH
jRqxDZvmxhcBqEtauPAjbMYtb9Gy2Iq9EQNqO2kElq+6g71WlYiBJNU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:45 2024 by rpki-client on console-ams.rpki-client.org