Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230332e3231362e302f32342d3234203d3e20313336373837.roa
File: 3138352e3230332e3231362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: KO3lnZRy/o79M+4MSkNW/iRCwGbEupzfRQJ3yk/LSBo=
Subject key identifier: 70:EC:49:B3:6E:71:B9:BB:60:71:32:5D:AF:9D:06:49:C3:EA:1A:D1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 42BA25CC29D205F24E7B0B33E75202A878536276
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230332e3231362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Oct 2023 13:41:54 +0000
ROA not before: Fri 20 Oct 2023 13:36:54 +0000
ROA not after: Fri 18 Oct 2024 13:41:54 +0000
asID: 136787
IP address blocks: 185.203.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:ba:25:cc:29:d2:05:f2:4e:7b:0b:33:e7:52:02:a8:78:53:62:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:54 2023 GMT
Not After : Oct 18 13:41:54 2024 GMT
Subject: CN=70EC49B36E71B9BB6071325DAF9D0649C3EA1AD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4b:48:80:a7:38:2b:a2:b4:5f:84:27:b2:54:
87:9f:bb:0c:8a:c4:a4:8a:23:28:14:39:55:24:06:
8c:a3:8f:40:29:46:3f:5e:52:54:d1:c5:d0:4e:d3:
3f:a2:a4:dd:e4:75:c4:24:c7:47:7d:be:7a:db:8e:
5a:99:d6:44:2a:cb:4f:c8:13:40:9a:50:da:27:6e:
e3:55:a2:c6:7a:df:5a:5a:6f:61:fe:f1:01:26:9d:
61:f7:91:fc:bc:c3:8a:de:c7:c1:52:a9:81:d3:3b:
91:5a:bf:cc:b1:a4:76:ce:5c:0f:90:ef:67:99:42:
9e:df:3a:53:a7:4f:2c:a0:e9:26:c3:e6:28:8b:69:
b6:4b:0a:6d:a6:d8:8e:73:5b:e0:65:f6:96:1a:00:
57:93:a2:22:26:e2:86:fc:03:9f:8f:19:c7:c9:c0:
b7:44:44:24:ca:c9:4f:15:22:e4:16:11:a7:69:36:
48:7a:c7:89:12:7e:47:a0:35:cd:4b:a1:6e:3e:6a:
57:ef:fc:24:e7:55:3c:d0:89:aa:64:4b:7f:8c:0b:
49:63:06:77:c6:2f:ce:04:d9:a2:74:18:72:7a:c6:
dc:a2:8a:cb:80:dc:01:52:37:c1:01:75:cc:9c:25:
7b:31:2f:3b:5c:0f:21:ad:77:65:a7:79:c9:58:fc:
33:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EC:49:B3:6E:71:B9:BB:60:71:32:5D:AF:9D:06:49:C3:EA:1A:D1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230332e3231362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.216.0/24
Signature Algorithm: sha256WithRSAEncryption
06:39:99:db:ee:0c:da:58:76:3c:c6:83:a5:3a:5f:3d:44:fc:
b7:5b:2e:ca:fc:6c:9e:47:12:ed:a1:c1:3c:ad:88:83:55:80:
c9:4e:4c:b2:9e:01:8e:4c:fa:7f:15:c3:4d:f0:a4:9f:08:e2:
e5:8e:82:d1:5c:a1:25:b9:48:18:9c:e5:ed:26:2f:9d:d1:9c:
33:7c:85:eb:f9:30:83:e7:b3:37:da:78:b8:87:c0:f7:88:d1:
f5:36:a4:a7:62:9f:26:3a:34:a4:2f:94:17:f5:af:6b:dc:8d:
d0:10:b0:b1:c6:d8:8b:8b:a5:90:00:98:27:2d:b1:55:94:bc:
f7:75:e7:38:2b:a4:6a:c7:ae:12:74:78:1d:00:64:d7:c2:f3:
82:86:f8:3e:21:57:57:15:11:ca:33:e1:52:7a:5a:7e:e8:bb:
ff:ec:35:a0:e5:77:f8:f3:a4:2f:53:96:db:1a:f0:ac:23:af:
36:88:12:e3:63:fe:ba:2d:f2:8e:f8:e0:cf:3f:a8:16:b1:0e:
ba:0b:26:91:af:d2:23:20:64:7d:6b:85:7b:21:67:7d:3a:d6:
06:f0:32:15:48:9a:9a:1b:3a:3d:e9:d4:9a:44:81:fa:79:1a:
77:35:eb:87:50:32:f6:e8:88:2e:00:73:06:45:bb:8e:3d:25:
56:af:8d:d1
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUQrolzCnSBfJOewsz51ICqHhTYnYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzEwMjAxMzM2NTRaFw0yNDEwMTgxMzQxNTRaMDMxMTAvBgNV
BAMTKDcwRUM0OUIzNkU3MUI5QkI2MDcxMzI1REFGOUQwNjQ5QzNFQTFBRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMS0iApzgrorRfhCeyVIefuwyK
xKSKIygUOVUkBoyjj0ApRj9eUlTRxdBO0z+ipN3kdcQkx0d9vnrbjlqZ1kQqy0/I
E0CaUNonbuNVosZ631pab2H+8QEmnWH3kfy8w4rex8FSqYHTO5Fav8yxpHbOXA+Q
72eZQp7fOlOnTyyg6SbD5iiLabZLCm2m2I5zW+Bl9pYaAFeToiIm4ob8A5+PGcfJ
wLdERCTKyU8VIuQWEadpNkh6x4kSfkegNc1LoW4+alfv/CTnVTzQiapkS3+MC0lj
BnfGL84E2aJ0GHJ6xtyiisuA3AFSN8EBdcycJXsxLztcDyGtd2WneclY/DNlAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUcOxJs25xubtgcTJdr50GScPqGtEwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMwMzMyZTMy
MzEzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnL2DANBgkqhkiG9w0BAQsFAAOCAQEABjmZ2+4M2lh2PMaDpTpfPUT8t1su
yvxsnkcS7aHBPK2Ig1WAyU5Msp4Bjkz6fxXDTfCknwji5Y6C0VyhJblIGJzl7SYv
ndGcM3yF6/kwg+ezN9p4uIfA94jR9Takp2KfJjo0pC+UF/Wva9yN0BCwscbYi4ul
kACYJy2xVZS893XnOCukaseuEnR4HQBk18Lzgob4PiFXVxURyjPhUnpafui7/+w1
oOV3+POkL1OW2xrwrCOvNogS42P+ui3yjvjgzz+oFrEOugsmka/SIyBkfWuFeyFn
fTrWBvAyFUiamhs6PenUmkSB+nkadzXrh1Ay9uiILgBzBkW7jj0lVq+N0Q==
-----END CERTIFICATE-----
Generated at Tue May 7 21:49:15 2024 by rpki-client on console-ams.rpki-client.org