Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231332e38312e302f32342d3234203d3e203437353833.roa
File: 3138352e3231332e38312e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: XsdYv3bVC96f4reUSHqolTLIOEdNTClhknI3Z1h4s/c=
Subject key identifier: 6B:02:E1:1F:6A:72:FB:69:21:F8:CE:F0:95:CD:01:7F:CB:D9:B5:A1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 136B875FD633B3106D75B4C498BA0AEAF6E93DC7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231332e38312e302f32342d3234203d3e203437353833.roa
Signing time: Fri 20 Oct 2023 13:41:49 +0000
ROA not before: Fri 20 Oct 2023 13:36:49 +0000
ROA not after: Fri 18 Oct 2024 13:41:49 +0000
asID: 47583
IP address blocks: 185.213.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:6b:87:5f:d6:33:b3:10:6d:75:b4:c4:98:ba:0a:ea:f6:e9:3d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:49 2023 GMT
Not After : Oct 18 13:41:49 2024 GMT
Subject: CN=6B02E11F6A72FB6921F8CEF095CD017FCBD9B5A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:eb:cc:bc:6a:6b:5f:68:05:be:0a:77:0b:6a:
3a:93:43:ac:9a:d5:4c:63:15:5b:58:38:c2:2e:88:
82:48:9f:83:c8:14:2d:91:f8:02:fa:bd:65:e0:41:
00:91:ef:a7:33:94:9b:52:7f:5e:b7:8b:d4:f1:9c:
1a:d1:93:a2:86:fb:99:7e:f4:27:cc:94:a4:03:5a:
80:cc:61:b2:22:5a:4f:b9:95:c2:87:a4:d4:a2:4f:
70:76:e5:7d:2f:b5:89:bc:ca:f4:e1:e6:77:de:7e:
b0:40:c7:93:f7:04:61:8a:a2:2f:cd:3e:3b:1e:2a:
d5:ad:d9:f6:b3:d8:72:66:54:6f:56:2d:98:0b:1b:
c2:76:d3:2f:1d:34:dd:fd:08:f4:cf:50:0e:67:ed:
59:d0:76:9d:e3:8d:c1:d2:e8:8b:08:af:71:5b:a0:
e9:7f:a1:e0:e8:22:ba:37:15:ba:1c:2e:e9:2f:90:
fc:6b:81:2a:ff:b7:20:71:bb:2d:7e:37:cd:9e:30:
6d:44:ca:25:0c:0b:2c:58:60:7f:f8:55:84:92:c4:
2a:6d:b8:6d:af:8e:d7:04:29:4f:9a:36:af:b4:aa:
f7:25:bc:ec:fa:fc:a8:5d:18:5d:24:68:08:b8:32:
21:8a:db:3b:3a:2f:5c:fe:c3:66:0e:22:f9:50:4e:
70:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:02:E1:1F:6A:72:FB:69:21:F8:CE:F0:95:CD:01:7F:CB:D9:B5:A1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231332e38312e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.81.0/24
Signature Algorithm: sha256WithRSAEncryption
73:7e:7e:79:6b:df:7f:c7:d3:92:db:75:18:7f:f4:70:c8:fb:
32:e7:26:65:87:78:76:36:d6:5b:f5:7f:74:2b:7c:b0:90:a0:
74:36:82:4b:df:81:af:01:ac:6f:93:5c:03:47:87:eb:a2:99:
0f:cb:bf:fa:1a:e0:47:bd:d4:cd:10:eb:e0:a8:5d:91:e0:06:
2f:95:ea:9a:18:7c:41:ca:3a:f9:6c:47:16:0b:ab:d2:5d:cd:
fc:fc:dd:3a:83:a8:dc:94:12:07:bf:94:d9:4f:71:4f:44:6d:
44:8a:ac:16:d7:49:68:42:29:22:ab:dc:a4:81:04:e2:58:4b:
09:0c:89:33:7b:cb:6a:53:84:ca:bf:f1:d5:af:7e:65:59:08:
f6:22:04:dd:99:b0:5e:aa:68:1b:59:39:0c:cb:88:54:96:6b:
c4:10:c6:d0:02:32:f0:3a:59:9d:0a:7b:f2:9b:c0:c0:1c:fb:
b8:74:2e:b7:00:b4:12:93:a4:85:1a:0a:f2:eb:eb:34:35:ee:
ad:55:c5:3b:e8:e1:9e:72:4d:15:d6:d6:71:6d:4b:04:5d:30:
56:99:37:06:0f:64:c6:27:5d:ff:5f:de:91:f6:99:e4:a1:dc:
a3:f9:77:0b:b5:f0:f9:56:fd:f0:32:ad:0d:a6:53:79:de:61:
0f:5b:b0:88
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUE2uHX9YzsxBtdbTEmLoK6vbpPccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzEwMjAxMzM2NDlaFw0yNDEwMTgxMzQxNDlaMDMxMTAvBgNV
BAMTKDZCMDJFMTFGNkE3MkZCNjkyMUY4Q0VGMDk1Q0QwMTdGQ0JEOUI1QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl68y8amtfaAW+CncLajqTQ6ya
1UxjFVtYOMIuiIJIn4PIFC2R+AL6vWXgQQCR76czlJtSf163i9TxnBrRk6KG+5l+
9CfMlKQDWoDMYbIiWk+5lcKHpNSiT3B25X0vtYm8yvTh5nfefrBAx5P3BGGKoi/N
PjseKtWt2faz2HJmVG9WLZgLG8J20y8dNN39CPTPUA5n7VnQdp3jjcHS6IsIr3Fb
oOl/oeDoIro3FbocLukvkPxrgSr/tyBxuy1+N82eMG1EyiUMCyxYYH/4VYSSxCpt
uG2vjtcEKU+aNq+0qvclvOz6/KhdGF0kaAi4MiGK2zs6L1z+w2YOIvlQTnDXAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUawLhH2py+2kh+M7wlc0Bf8vZtaEwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMxMzMyZTM4
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
udVRMA0GCSqGSIb3DQEBCwUAA4IBAQBzfn55a99/x9OS23UYf/RwyPsy5yZlh3h2
NtZb9X90K3ywkKB0NoJL34GvAaxvk1wDR4fropkPy7/6GuBHvdTNEOvgqF2R4AYv
leqaGHxByjr5bEcWC6vSXc38/N06g6jclBIHv5TZT3FPRG1EiqwW10loQikiq9yk
gQTiWEsJDIkze8tqU4TKv/HVr35lWQj2IgTdmbBeqmgbWTkMy4hUlmvEEMbQAjLw
OlmdCnvym8DAHPu4dC63ALQSk6SFGgry6+s0Ne6tVcU76OGeck0V1tZxbUsEXTBW
mTcGD2TGJ13/X96R9pnkodyj+XcLtfD5Vv3wMq0NplN53mEPW7CI
-----END CERTIFICATE-----
Generated at Tue May 21 09:23:49 2024 by rpki-client on console-ams.rpki-client.org