Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e35342e302f32342d3234203d3e20313336373837.roa
File: 3138352e3138332e35342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: VsQmTlqrYxIzXoO0BD0c53Gc+lJzetYbPEJv/F62THA=
Subject key identifier: 25:E2:B3:0C:72:4F:CD:59:3F:4E:42:F4:CE:1E:C8:C3:3F:DC:8D:F4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 68DC1E74175F235A6DFB07C935CF34D3E6D89468
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e35342e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 15 Jun 2024 07:03:56 +0000
ROA not before: Sat 15 Jun 2024 06:58:56 +0000
ROA not after: Sat 14 Jun 2025 07:03:56 +0000
asID: 136787
IP address blocks: 185.183.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:dc:1e:74:17:5f:23:5a:6d:fb:07:c9:35:cf:34:d3:e6:d8:94:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 15 06:58:56 2024 GMT
Not After : Jun 14 07:03:56 2025 GMT
Subject: CN=25E2B30C724FCD593F4E42F4CE1EC8C33FDC8DF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:04:cb:c2:8b:b6:2f:3d:ae:bb:4c:67:f3:e3:
9c:7b:60:a7:d9:bf:a7:8e:86:6a:3a:f6:3a:e1:1f:
ea:7e:c8:2f:91:f2:ee:ec:79:dd:57:ce:53:68:98:
10:9e:d0:15:f3:d6:56:e8:8c:4c:2c:e1:26:6c:a1:
84:51:c3:91:05:5e:d8:69:87:b3:a8:58:35:32:c2:
7d:1a:ec:f4:5f:e0:69:83:02:5c:bc:7c:19:ac:86:
71:f0:7e:c0:0a:f5:f0:a3:d2:b2:26:ea:29:22:5f:
f0:b8:7d:4e:24:44:90:ce:79:c5:f2:28:37:d4:4b:
70:14:52:d6:d3:85:cf:0b:f2:11:b0:2e:9a:4e:41:
5a:6f:a5:10:7d:aa:c1:0d:02:42:fe:a7:ef:ef:79:
1d:bc:ec:cf:22:0a:d2:45:cf:6a:87:16:cd:8e:54:
b3:95:91:50:2b:0d:0f:7e:0b:18:b8:e7:ee:e7:7d:
0b:16:ec:9f:b2:b5:23:e0:fb:39:f5:8a:f9:8e:f9:
00:5b:13:a6:03:c9:6e:93:18:f0:9b:b7:a8:2d:4f:
94:1a:dd:bb:81:da:0b:ca:ec:2d:1a:8a:83:20:df:
ff:a8:33:53:8e:fe:48:f8:62:a8:2b:7d:d7:e7:01:
eb:c8:83:79:19:83:0d:96:0a:b9:59:64:2b:ea:1b:
68:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E2:B3:0C:72:4F:CD:59:3F:4E:42:F4:CE:1E:C8:C3:3F:DC:8D:F4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e35342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.54.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:80:91:30:82:7d:1b:0d:6d:4c:0d:75:87:5e:55:50:d0:8d:
d4:a7:9a:75:4c:af:e6:b0:7a:a5:1d:d6:04:4a:16:32:11:ab:
56:ad:1a:db:91:47:fd:3c:8b:21:f6:4c:12:e5:c2:f2:76:ea:
19:82:17:49:a7:de:47:9d:0f:8e:a2:34:ff:00:a5:24:f4:c6:
21:2b:e2:ef:0b:ed:0b:84:f4:56:da:89:71:db:93:bc:a1:0e:
5e:65:b7:c5:64:cd:c9:ec:dd:92:76:3e:b4:90:9a:33:c9:ff:
b2:7e:22:62:29:6c:a2:e3:91:db:e2:a8:b9:5e:6f:1c:7e:86:
c8:48:04:c7:d3:3e:6f:f2:7f:06:8c:e0:0e:02:ca:ea:af:51:
a6:90:9d:2a:d9:c1:4a:7f:75:e3:b1:14:2e:fb:5b:0f:27:cf:
d1:06:23:e5:70:66:48:74:3f:19:23:ed:4a:81:c1:0c:35:16:
e7:8d:33:08:fa:81:9e:a3:ca:34:14:a5:d9:c3:09:25:d4:26:
3c:f9:98:82:2d:fa:d2:67:27:e8:4a:fa:05:23:99:6b:47:a3:
a0:59:e7:a1:e0:c5:28:00:61:c8:7c:1c:b4:b7:87:80:36:43:
92:12:55:8e:32:4f:f7:1c:63:fa:51:a3:57:1a:6f:f2:d8:95:
35:6e:67:1f
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUaNwedBdfI1pt+wfJNc800+bYlGgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDA2MTUwNjU4NTZaFw0yNTA2MTQwNzAzNTZaMDMxMTAvBgNV
BAMTKDI1RTJCMzBDNzI0RkNENTkzRjRFNDJGNENFMUVDOEMzM0ZEQzhERjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkBMvCi7YvPa67TGfz45x7YKfZ
v6eOhmo69jrhH+p+yC+R8u7sed1XzlNomBCe0BXz1lbojEws4SZsoYRRw5EFXthp
h7OoWDUywn0a7PRf4GmDAly8fBmshnHwfsAK9fCj0rIm6ikiX/C4fU4kRJDOecXy
KDfUS3AUUtbThc8L8hGwLppOQVpvpRB9qsENAkL+p+/veR287M8iCtJFz2qHFs2O
VLOVkVArDQ9+Cxi45+7nfQsW7J+ytSPg+zn1ivmO+QBbE6YDyW6TGPCbt6gtT5Qa
3buB2gvK7C0aioMg3/+oM1OO/kj4YqgrfdfnAevIg3kZgw2WCrlZZCvqG2hnAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUJeKzDHJPzVk/TkL0zh7Iwz/cjfQwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM4MzMyZTM1
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5tzYwDQYJKoZIhvcNAQELBQADggEBAI6AkTCCfRsNbUwNdYdeVVDQjdSnmnVM
r+aweqUd1gRKFjIRq1atGtuRR/08iyH2TBLlwvJ26hmCF0mn3kedD46iNP8ApST0
xiEr4u8L7QuE9FbaiXHbk7yhDl5lt8Vkzcns3ZJ2PrSQmjPJ/7J+ImIpbKLjkdvi
qLlebxx+hshIBMfTPm/yfwaM4A4CyuqvUaaQnSrZwUp/deOxFC77Ww8nz9EGI+Vw
Zkh0Pxkj7UqBwQw1FueNMwj6gZ6jyjQUpdnDCSXUJjz5mIIt+tJnJ+hK+gUjmWtH
o6BZ56HgxSgAYch8HLS3h4A2Q5ISVY4yT/ccY/pRo1cab/LYlTVuZx8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:45 2024 by rpki-client on console-ams.rpki-client.org