Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136312e3230322e302f32342d3234203d3e20323031333431.roa
File: 3138352e3136312e3230322e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: Hx39yAvWy76RDw7M5EjUyMIRjknpjMpA8ZaUJlqmW5E=
Subject key identifier: D4:92:57:CD:75:6A:F9:FA:E2:E2:7B:7A:37:8D:A5:8C:DC:46:CE:46
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 070678A024E76E6D9851D81569204C822BD2602B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136312e3230322e302f32342d3234203d3e20323031333431.roa
Signing time: Mon 26 Feb 2024 08:53:21 +0000
ROA not before: Mon 26 Feb 2024 08:48:21 +0000
ROA not after: Mon 24 Feb 2025 08:53:21 +0000
asID: 201341
IP address blocks: 185.161.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:06:78:a0:24:e7:6e:6d:98:51:d8:15:69:20:4c:82:2b:d2:60:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:21 2024 GMT
Not After : Feb 24 08:53:21 2025 GMT
Subject: CN=D49257CD756AF9FAE2E27B7A378DA58CDC46CE46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:2c:5b:5f:3d:eb:98:51:c6:67:9a:0b:bd:
43:2a:32:13:67:aa:c1:6d:06:7f:c4:d4:1a:be:27:
aa:84:71:df:b3:5b:52:e0:60:16:3b:ab:1d:49:b2:
a9:30:2a:8c:22:80:81:ad:34:bb:c6:0e:89:6c:2d:
c7:c5:bc:d8:3a:4b:21:b3:59:ae:ad:a3:bb:24:54:
b8:3a:72:63:e6:18:9f:e1:5e:7b:1f:dc:de:cb:42:
01:c9:4a:41:99:4f:55:a7:3a:4d:a0:20:15:e5:e2:
f4:6a:db:9c:b1:78:ef:b8:11:84:17:42:80:0d:e8:
7a:e1:7a:33:1d:66:7b:f8:42:ff:c9:b1:a5:6c:74:
61:0e:29:25:e6:1a:db:42:d9:46:a6:c4:a7:fc:13:
9e:72:ce:ad:d9:6c:4d:e6:3c:d1:d9:98:11:ef:1d:
53:b8:2a:ba:d9:b3:35:3a:7b:c3:48:5c:d2:63:57:
75:8a:c8:a9:fe:eb:76:b1:d5:75:63:60:9e:b7:e3:
36:0d:44:5c:8c:f4:c4:e8:c9:ec:79:84:5e:a0:71:
81:e7:29:54:fc:40:29:0f:88:a1:91:7a:a1:18:f6:
43:4f:dd:07:bd:b9:be:2f:0f:9d:aa:fa:05:61:ca:
bc:e9:c7:fd:4c:31:2e:52:8f:c9:42:12:2d:ef:a2:
7c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:92:57:CD:75:6A:F9:FA:E2:E2:7B:7A:37:8D:A5:8C:DC:46:CE:46
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136312e3230322e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.202.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b2:49:2e:c0:9a:b5:ef:a1:64:fb:89:0b:81:bc:41:4d:31:
41:36:9a:49:e2:8f:d9:20:88:a1:1b:94:30:28:ef:1d:13:e9:
ed:ed:70:79:9b:a5:a6:6a:ad:c7:8a:fd:6a:1c:9b:cc:74:58:
08:d8:03:58:80:0e:6c:25:e5:4c:c7:fd:d3:98:05:90:ff:9a:
6e:ac:23:8d:5f:67:e6:04:d2:fa:1d:b2:f3:e4:fb:9b:f4:c9:
ee:b6:4c:f2:10:66:88:21:d0:7e:84:94:e1:7e:58:0f:0f:40:
ff:fc:06:60:b7:5c:76:de:27:04:14:9f:95:a5:97:16:ad:1d:
cc:fd:93:4e:c8:64:27:a6:46:e1:f9:1c:d3:eb:53:6a:83:6e:
c0:f3:1f:bc:eb:d0:05:ef:62:76:f1:c9:f3:a3:13:f4:69:93:
19:4d:64:d7:ea:45:16:eb:f2:5b:d6:ce:68:93:86:9b:33:ce:
b8:06:11:b6:45:72:a1:a6:c6:b7:ae:40:c3:e8:24:75:54:1e:
3f:31:4b:9d:74:ec:1d:da:34:d5:f3:ac:d9:14:df:45:dc:06:
7c:f8:1f:c1:bc:7f:55:7d:9e:aa:d8:ed:78:2e:5d:9b:b8:a3:
5b:ff:4e:55:ec:58:6e:16:f0:e7:30:37:0e:ab:d0:e0:e5:59:
2f:4a:97:29
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUBwZ4oCTnbm2YUdgVaSBMgivSYCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAyMjYwODQ4MjFaFw0yNTAyMjQwODUzMjFaMDMxMTAvBgNV
BAMTKEQ0OTI1N0NENzU2QUY5RkFFMkUyN0I3QTM3OERBNThDREM0NkNFNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMNCxbXz3rmFHGZ5oLvUMqMhNn
qsFtBn/E1Bq+J6qEcd+zW1LgYBY7qx1JsqkwKowigIGtNLvGDolsLcfFvNg6SyGz
Wa6to7skVLg6cmPmGJ/hXnsf3N7LQgHJSkGZT1WnOk2gIBXl4vRq25yxeO+4EYQX
QoAN6HrhejMdZnv4Qv/JsaVsdGEOKSXmGttC2UamxKf8E55yzq3ZbE3mPNHZmBHv
HVO4KrrZszU6e8NIXNJjV3WKyKn+63ax1XVjYJ634zYNRFyM9MToyex5hF6gcYHn
KVT8QCkPiKGReqEY9kNP3Qe9ub4vD52q+gVhyrzpx/1MMS5Sj8lCEi3vonxVAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU1JJXzXVq+fri4nt6N42ljNxGzkYwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM2MzEyZTMy
MzAzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMTMzMzQzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALmhyjANBgkqhkiG9w0BAQsFAAOCAQEAVLJJLsCate+hZPuJC4G8QU0xQTaa
SeKP2SCIoRuUMCjvHRPp7e1weZulpmqtx4r9ahybzHRYCNgDWIAObCXlTMf905gF
kP+abqwjjV9n5gTS+h2y8+T7m/TJ7rZM8hBmiCHQfoSU4X5YDw9A//wGYLdcdt4n
BBSflaWXFq0dzP2TTshkJ6ZG4fkc0+tTaoNuwPMfvOvQBe9idvHJ86MT9GmTGU1k
1+pFFuvyW9bOaJOGmzPOuAYRtkVyoabGt65Aw+gkdVQePzFLnXTsHdo01fOs2RTf
RdwGfPgfwbx/VX2eqtjteC5dm7ijW/9OVexYbhbw5zA3DqvQ4OVZL0qXKQ==
-----END CERTIFICATE-----
Generated at Fri Apr 26 12:40:36 2024 by rpki-client on console-ams.rpki-client.org