Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3234332e302f32342d3332203d3e203632323430.roa
File: 3138352e3138372e3234332e302f32342d3332203d3e203632323430.roa (raw, json)
Hash identifier: y3dx28qAG77+4f6bJpwjoZTAjF8pyF5OiwzD0jKiGbM=
Subject key identifier: 30:54:84:A0:74:4F:75:0D:1F:A4:CE:6C:94:34:82:09:DC:5B:1C:35
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 24E74563C6CA8CD60F5E25D1DE65D15D7434D52F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3234332e302f32342d3332203d3e203632323430.roa
Signing time: Fri 20 Oct 2023 13:41:51 +0000
ROA not before: Fri 20 Oct 2023 13:36:51 +0000
ROA not after: Fri 18 Oct 2024 13:41:51 +0000
asID: 62240
IP address blocks: 185.187.243.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:e7:45:63:c6:ca:8c:d6:0f:5e:25:d1:de:65:d1:5d:74:34:d5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:51 2023 GMT
Not After : Oct 18 13:41:51 2024 GMT
Subject: CN=305484A0744F750D1FA4CE6C94348209DC5B1C35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:d7:b0:50:42:7e:73:3f:5b:96:c6:23:28:
7a:49:a9:5f:c9:4e:a4:b6:a5:76:b2:be:5c:c4:cc:
82:a7:72:ce:e8:bf:e7:42:32:74:fb:6f:af:4b:0d:
f0:3d:c7:01:56:2f:f4:4d:70:3e:e1:99:06:df:3a:
f2:75:23:8d:fb:9f:40:46:4c:02:b0:1e:ec:54:66:
7c:41:29:8c:e2:b9:1d:e9:5e:52:51:5f:69:c7:0d:
5d:64:ae:61:c0:9e:e2:7d:f4:70:5c:85:de:0d:91:
7c:7d:7f:ca:0f:94:92:4d:2e:44:e8:15:cf:67:f8:
c1:01:be:92:2c:26:a8:ab:83:b0:0a:c2:6b:b6:86:
a0:3a:a1:0e:3c:80:7b:72:87:cc:cd:1f:76:44:0a:
15:f0:3e:24:88:4e:93:81:23:11:78:16:88:7f:3d:
f6:e6:6f:f2:3b:bd:b1:f0:b5:0f:69:b6:bf:59:c4:
7a:6b:df:cf:d2:83:33:00:28:81:ac:65:0d:70:06:
f9:fb:3e:6a:16:c2:cc:da:4f:38:4a:eb:ce:d8:0b:
d2:42:e0:8a:92:e0:b4:e8:98:fd:08:c7:97:94:5f:
94:ef:dd:79:40:14:aa:9a:08:99:4a:75:25:86:1f:
46:25:23:9a:82:e8:9d:e9:4b:59:48:fc:17:d3:02:
48:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:54:84:A0:74:4F:75:0D:1F:A4:CE:6C:94:34:82:09:DC:5B:1C:35
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3234332e302f32342d3332203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.243.0/24
Signature Algorithm: sha256WithRSAEncryption
27:1f:d3:5b:56:b9:9b:95:56:d4:0c:d7:9d:28:66:52:a5:39:
9d:2d:bd:41:c3:ca:ee:62:f8:1f:89:66:21:ad:40:8c:f5:f7:
87:b7:dd:59:b5:e2:e8:f9:05:f3:6c:25:56:ed:b6:9b:4f:39:
37:08:cf:e8:c4:08:f5:50:3f:3f:d7:21:60:7d:2b:2e:5b:10:
71:ed:c7:c3:84:f6:6e:a7:97:d8:61:25:d2:b8:24:c0:2d:7c:
6a:2e:64:7a:81:d8:79:9e:51:e3:8c:8d:58:45:41:15:d6:b2:
78:63:3b:f7:65:f0:99:42:72:e0:dd:6b:61:92:c7:6f:a3:8c:
f2:aa:91:50:6a:12:c7:d3:d4:4e:38:68:69:da:d2:fd:1e:90:
bc:8c:6a:92:c8:94:4c:21:6b:af:26:03:e2:0b:ac:db:db:e0:
0d:6e:48:ba:c6:55:39:8a:ad:9b:fc:ee:13:b9:82:4c:b0:45:
f8:29:6c:b4:df:ad:2d:8f:d9:93:59:09:08:63:bf:a8:65:bd:
dc:cd:3f:7f:b2:5c:ae:08:27:a2:62:fc:d8:fc:c7:9d:c6:25:
2b:0a:1c:8b:7f:88:f0:fc:ee:71:32:60:e1:c1:55:37:8f:90:
63:f7:cd:76:7f:9b:14:87:66:f2:5a:4b:29:53:1a:a7:b5:97:
ef:07:02:50
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUJOdFY8bKjNYPXiXR3mXRXXQ01S8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzEwMjAxMzM2NTFaFw0yNDEwMTgxMzQxNTFaMDMxMTAvBgNV
BAMTKDMwNTQ4NEEwNzQ0Rjc1MEQxRkE0Q0U2Qzk0MzQ4MjA5REM1QjFDMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCu9ewUEJ+cz9blsYjKHpJqV/J
TqS2pXayvlzEzIKncs7ov+dCMnT7b69LDfA9xwFWL/RNcD7hmQbfOvJ1I437n0BG
TAKwHuxUZnxBKYziuR3pXlJRX2nHDV1krmHAnuJ99HBchd4NkXx9f8oPlJJNLkTo
Fc9n+MEBvpIsJqirg7AKwmu2hqA6oQ48gHtyh8zNH3ZEChXwPiSITpOBIxF4Foh/
Pfbmb/I7vbHwtQ9ptr9ZxHpr38/SgzMAKIGsZQ1wBvn7PmoWwszaTzhK687YC9JC
4IqS4LTomP0Ix5eUX5Tv3XlAFKqaCJlKdSWGH0YlI5qC6J3pS1lI/BfTAkg/AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUMFSEoHRPdQ0fpM5slDSCCdxbHDUwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM4MzcyZTMy
MzQzMzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM2MzIzMjM0MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5u/MwDQYJKoZIhvcNAQELBQADggEBACcf01tWuZuVVtQM150oZlKlOZ0tvUHD
yu5i+B+JZiGtQIz194e33Vm14uj5BfNsJVbttptPOTcIz+jECPVQPz/XIWB9Ky5b
EHHtx8OE9m6nl9hhJdK4JMAtfGouZHqB2HmeUeOMjVhFQRXWsnhjO/dl8JlCcuDd
a2GSx2+jjPKqkVBqEsfT1E44aGna0v0ekLyMapLIlEwha68mA+ILrNvb4A1uSLrG
VTmKrZv87hO5gkywRfgpbLTfrS2P2ZNZCQhjv6hlvdzNP3+yXK4IJ6Ji/Nj8x53G
JSsKHIt/iPD87nEyYOHBVTePkGP3zXZ/mxSHZvJaSylTGqe1l+8HAlA=
-----END CERTIFICATE-----
Generated at Sun May 5 21:30:26 2024 by rpki-client on console-ams.rpki-client.org