Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231322e37302e302f32332d3234203d3e203437353833.roa
File: 3138352e3231322e37302e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: Fg+urN6hFmP/BvwVTi34ajdFCw5GRcHke/jB88geLTI=
Subject key identifier: 69:CB:9F:C7:E3:AC:54:74:DE:14:09:FB:89:88:09:53:D7:32:62:57
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5FA64A526677ECEF4B92A1650994EDC981D82CF9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231322e37302e302f32332d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:12 +0000
ROA not before: Mon 26 Feb 2024 08:48:12 +0000
ROA not after: Mon 24 Feb 2025 08:53:12 +0000
asID: 47583
IP address blocks: 185.212.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:a6:4a:52:66:77:ec:ef:4b:92:a1:65:09:94:ed:c9:81:d8:2c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:12 2024 GMT
Not After : Feb 24 08:53:12 2025 GMT
Subject: CN=69CB9FC7E3AC5474DE1409FB89880953D7326257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d7:d8:84:0f:d1:3d:d7:b4:7b:ca:96:60:bb:
03:05:e9:74:52:28:03:b9:cc:20:46:e1:bf:a8:3a:
61:67:97:db:47:eb:32:90:73:d0:66:99:30:ac:8f:
ea:a5:a9:82:c9:6a:45:a8:33:7e:df:67:1b:79:22:
66:14:85:17:3f:86:f3:c0:80:08:5a:c2:23:1a:75:
7c:0f:90:a7:78:5b:db:d5:b9:0c:30:ff:8a:14:c7:
1a:c5:4e:49:63:46:fd:4d:07:04:4a:c2:f4:e6:91:
be:7d:bf:85:4e:94:08:4f:fc:bb:82:86:7c:a8:5d:
d3:33:fe:d7:f7:68:70:6f:25:a6:2e:e6:19:83:10:
f9:fd:92:d4:68:cc:c0:5e:a5:cd:6d:0c:f7:29:72:
c6:e8:db:e5:92:98:70:28:f9:8f:b4:f5:31:ab:df:
bc:58:12:82:bd:da:dc:f9:39:6f:84:cf:f0:3f:35:
99:ae:0b:6c:1d:09:95:f1:ca:06:aa:1c:f6:d3:18:
87:f7:3f:cf:64:8e:9e:58:50:1e:3a:50:12:06:a1:
0e:c7:82:8a:80:15:7c:86:2b:b9:d7:24:78:c2:63:
bb:8e:45:a7:0d:3b:49:fd:57:47:89:9b:6b:f5:44:
9b:80:a3:69:6a:18:a4:da:38:1e:ec:e4:10:60:ec:
ef:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CB:9F:C7:E3:AC:54:74:DE:14:09:FB:89:88:09:53:D7:32:62:57
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231322e37302e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.70.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:50:25:05:da:b5:1b:3f:41:d6:17:1a:d4:a5:e0:7b:68:35:
23:45:19:e7:55:0d:f6:99:d8:88:07:5e:fe:c8:b2:43:40:96:
ad:fa:92:27:5a:92:26:33:ee:b6:b8:7b:4f:4e:32:d9:70:4b:
5f:98:12:22:ca:1c:3f:09:0b:ae:81:b1:b7:3f:9d:1b:f9:1a:
ac:f6:db:2b:57:d4:63:d8:f5:da:17:4b:75:6a:22:b3:c2:23:
c5:8b:41:19:75:7b:5b:9c:45:62:a1:f7:70:19:ac:74:1b:61:
39:de:71:0f:6a:86:e8:d7:26:13:2c:4f:8f:f2:51:bd:2e:73:
2e:5f:b1:c4:a0:a9:ac:d6:4f:c2:6d:40:ab:0c:34:36:fa:20:
5c:a9:7a:99:96:67:76:5d:4b:74:3d:11:2f:95:b7:a9:1e:85:
30:4c:bb:27:7f:07:a9:9b:96:c1:22:b6:e4:d7:de:bd:85:7f:
dd:e3:fd:64:bb:11:ac:df:52:a2:13:f5:0f:43:0d:fc:f5:42:
5a:b5:e9:bf:ef:98:16:6d:34:2b:66:a3:51:2c:94:83:dd:ae:
9c:06:44:36:b9:8e:63:84:7b:e9:d2:71:9e:d1:a0:59:c6:e0:
8f:c3:05:fc:e0:ed:5e:71:d9:5f:4b:bd:4f:57:de:0f:f0:e4:
b1:4d:5e:07
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUX6ZKUmZ37O9LkqFlCZTtyYHYLPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAyMjYwODQ4MTJaFw0yNTAyMjQwODUzMTJaMDMxMTAvBgNV
BAMTKDY5Q0I5RkM3RTNBQzU0NzRERTE0MDlGQjg5ODgwOTUzRDczMjYyNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS19iED9E917R7ypZguwMF6XRS
KAO5zCBG4b+oOmFnl9tH6zKQc9BmmTCsj+qlqYLJakWoM37fZxt5ImYUhRc/hvPA
gAhawiMadXwPkKd4W9vVuQww/4oUxxrFTkljRv1NBwRKwvTmkb59v4VOlAhP/LuC
hnyoXdMz/tf3aHBvJaYu5hmDEPn9ktRozMBepc1tDPcpcsbo2+WSmHAo+Y+09TGr
37xYEoK92tz5OW+Ez/A/NZmuC2wdCZXxygaqHPbTGIf3P89kjp5YUB46UBIGoQ7H
goqAFXyGK7nXJHjCY7uORacNO0n9V0eJm2v1RJuAo2lqGKTaOB7s5BBg7O9NAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUacufx+OsVHTeFAn7iYgJU9cyYlcwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMxMzIyZTM3
MzAyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
udRGMA0GCSqGSIb3DQEBCwUAA4IBAQBbUCUF2rUbP0HWFxrUpeB7aDUjRRnnVQ32
mdiIB17+yLJDQJat+pInWpImM+62uHtPTjLZcEtfmBIiyhw/CQuugbG3P50b+Rqs
9tsrV9Rj2PXaF0t1aiKzwiPFi0EZdXtbnEViofdwGax0G2E53nEPaobo1yYTLE+P
8lG9LnMuX7HEoKms1k/CbUCrDDQ2+iBcqXqZlmd2XUt0PREvlbepHoUwTLsnfwep
m5bBIrbk1969hX/d4/1kuxGs31KiE/UPQw389UJatem/75gWbTQrZqNRLJSD3a6c
BkQ2uY5jhHvp0nGe0aBZxuCPwwX84O1ecdlfS71PV94P8OSxTV4H
-----END CERTIFICATE-----
Generated at Tue May 21 21:12:36 2024 by rpki-client on console-fra.rpki-client.org