Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138352e38332e302f32342d3332203d3e203531313637.roa
File: 3138352e3138352e38332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: sEvUVURwXg4tnfM4IxEHp6t8qyMagO1n8dYJ5mrkBhY=
Subject key identifier: 8C:2A:16:5D:9E:D2:F9:F0:7F:96:C3:5A:BF:11:7B:B9:22:E4:7F:2C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 47F31DD74F15F6C6B2EF681DCCFF2EB48BD17CBC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138352e38332e302f32342d3332203d3e203531313637.roa
Signing time: Mon 26 Feb 2024 08:53:17 +0000
ROA not before: Mon 26 Feb 2024 08:48:17 +0000
ROA not after: Mon 24 Feb 2025 08:53:17 +0000
asID: 51167
IP address blocks: 185.185.83.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:f3:1d:d7:4f:15:f6:c6:b2:ef:68:1d:cc:ff:2e:b4:8b:d1:7c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:17 2024 GMT
Not After : Feb 24 08:53:17 2025 GMT
Subject: CN=8C2A165D9ED2F9F07F96C35ABF117BB922E47F2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:5c:0a:0a:b0:59:92:31:3e:6f:4a:aa:8c:
e4:e6:4a:12:c9:eb:40:3d:00:cd:0a:2b:66:04:b4:
ac:28:49:04:b5:51:cd:9c:fc:59:ae:da:46:0e:35:
28:fd:d4:c8:11:88:0c:b5:b2:da:38:78:10:a7:92:
20:4e:50:54:25:30:8e:cf:5c:34:f7:1d:88:e6:34:
36:1d:f9:fa:77:b4:8d:72:f3:60:28:43:02:b2:a4:
92:42:e9:78:b1:3d:ac:44:63:ea:47:b3:a0:76:6a:
97:d7:57:c5:8c:0b:7a:c1:4e:dc:c2:88:dc:fe:9f:
99:a5:c2:84:96:d7:1f:08:22:1d:74:78:fa:68:50:
1c:22:72:09:1c:87:96:4d:86:fb:88:5e:15:16:bb:
18:2f:39:d9:8d:c9:83:b9:8e:c8:4c:42:ce:c0:5c:
1a:4e:e5:b5:59:e1:61:3d:51:ca:e8:8c:73:c9:1c:
0f:28:d3:5b:b9:31:ab:dd:7f:8a:d7:b1:fb:58:69:
b5:6d:7c:c3:04:af:c4:b3:ad:bc:be:19:e2:94:fd:
ce:48:d7:db:79:30:41:a4:3b:8a:64:ef:b3:d9:c1:
4a:e6:21:f8:f5:82:01:57:b1:34:c2:b9:3f:56:8d:
f5:76:a5:4f:e0:6d:e4:33:b7:b8:e0:a2:06:d4:87:
54:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2A:16:5D:9E:D2:F9:F0:7F:96:C3:5A:BF:11:7B:B9:22:E4:7F:2C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138352e38332e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.83.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:9b:0d:71:e7:51:30:57:b6:bf:98:9f:79:fb:fc:71:91:ff:
5d:59:e2:1d:be:81:54:7c:ce:9b:58:67:97:8b:fc:01:c5:ae:
82:cd:1c:6b:ec:4a:d8:8d:37:8b:e5:69:ca:30:c7:61:a9:20:
db:fc:f2:8c:14:07:43:cc:e4:3e:56:a9:08:90:3a:9d:b3:73:
a7:d0:66:e6:4a:d1:17:d9:ae:d8:2f:f6:a0:7a:41:b0:37:db:
4a:75:18:9a:5f:64:92:7b:cd:ff:89:fb:bf:f3:16:dd:4d:5f:
08:07:10:c8:37:5a:43:49:d4:94:3f:2e:ba:58:2a:96:8d:83:
ed:6e:8a:b5:6c:88:bf:da:36:a4:30:23:40:e0:b6:86:ce:79:
ad:26:b6:22:95:de:84:f0:59:5f:01:bd:77:c5:59:94:1c:49:
7a:b0:91:33:b7:e2:48:48:47:b1:7f:8b:87:dc:b9:a0:bd:66:
8b:ac:74:9c:90:23:ab:bb:58:b5:64:63:69:22:65:4b:97:f4:
f8:df:02:91:b5:3e:b3:49:c0:58:fe:bc:80:23:b1:76:3d:13:
2a:1c:17:82:1e:50:a4:75:47:54:22:48:d5:2a:fa:fa:92:4a:
27:60:6e:92:e9:0b:56:fa:25:0b:c9:1e:fe:24:ca:cc:7d:31:
37:2e:31:63
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUR/Md108V9say72gdzP8utIvRfLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAyMjYwODQ4MTdaFw0yNTAyMjQwODUzMTdaMDMxMTAvBgNV
BAMTKDhDMkExNjVEOUVEMkY5RjA3Rjk2QzM1QUJGMTE3QkI5MjJFNDdGMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAwFwKCrBZkjE+b0qqjOTmShLJ
60A9AM0KK2YEtKwoSQS1Uc2c/Fmu2kYONSj91MgRiAy1sto4eBCnkiBOUFQlMI7P
XDT3HYjmNDYd+fp3tI1y82AoQwKypJJC6XixPaxEY+pHs6B2apfXV8WMC3rBTtzC
iNz+n5mlwoSW1x8IIh10ePpoUBwicgkch5ZNhvuIXhUWuxgvOdmNyYO5jshMQs7A
XBpO5bVZ4WE9UcrojHPJHA8o01u5Mavdf4rXsftYabVtfMMEr8Szrby+GeKU/c5I
19t5MEGkO4pk77PZwUrmIfj1ggFXsTTCuT9WjfV2pU/gbeQzt7jgogbUh1QNAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUjCoWXZ7S+fB/lsNavxF7uSLkfywwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM4MzUyZTM4
MzMyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
ublTMA0GCSqGSIb3DQEBCwUAA4IBAQAamw1x51EwV7a/mJ95+/xxkf9dWeIdvoFU
fM6bWGeXi/wBxa6CzRxr7ErYjTeL5WnKMMdhqSDb/PKMFAdDzOQ+VqkIkDqds3On
0GbmStEX2a7YL/agekGwN9tKdRiaX2SSe83/ifu/8xbdTV8IBxDIN1pDSdSUPy66
WCqWjYPtboq1bIi/2jakMCNA4LaGznmtJrYild6E8FlfAb13xVmUHEl6sJEzt+JI
SEexf4uH3LmgvWaLrHSckCOru1i1ZGNpImVLl/T43wKRtT6zScBY/ryAI7F2PRMq
HBeCHlCkdUdUIkjVKvr6kkonYG6S6QtW+iULyR7+JMrMfTE3LjFj
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:45 2024 by rpki-client on console-ams.rpki-client.org