Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231382e3132342e302f32332d3332203d3e203531313637.roa
File: 3138352e3231382e3132342e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: covYZBB0SOVWl/+NFLT5Z4giuoF3TVo7Q8y8Oc5muRQ=
Subject key identifier: 23:8C:73:2E:DA:34:1C:3D:8B:0F:65:AC:7F:5D:BA:09:E5:54:2B:6F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 320AB87678DB54AC1CF8BDFC9A80E04AC56D375B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231382e3132342e302f32332d3332203d3e203531313637.roa
Signing time: Fri 20 Sep 2024 14:04:49 +0000
ROA not before: Fri 20 Sep 2024 13:59:49 +0000
ROA not after: Fri 19 Sep 2025 14:04:49 +0000
asID: 51167
IP address blocks: 185.218.124.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:0a:b8:76:78:db:54:ac:1c:f8:bd:fc:9a:80:e0:4a:c5:6d:37:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:49 2024 GMT
Not After : Sep 19 14:04:49 2025 GMT
Subject: CN=238C732EDA341C3D8B0F65AC7F5DBA09E5542B6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:c8:c2:0e:84:09:6a:fa:7b:91:d6:de:f6:
29:45:0f:04:d7:47:b9:23:17:6d:66:f8:4e:c6:b0:
c6:2f:1e:25:63:39:83:b6:7d:2e:2e:d0:5c:1e:c0:
0f:46:c6:d4:55:d9:64:dc:ff:c7:c4:1d:45:2b:00:
bd:2b:ac:4d:47:6c:06:74:ca:30:28:22:db:be:40:
86:bc:87:11:cd:28:33:a5:00:99:0e:54:8e:60:ab:
b2:00:41:ef:70:aa:5a:bc:9a:1e:80:f0:99:3c:41:
d5:27:9c:1b:a4:fb:d2:44:ec:a0:ee:68:5f:5b:27:
c0:a8:bc:cc:eb:2a:94:4c:98:ce:ba:49:95:25:3d:
7a:73:2b:a8:f9:c7:c0:da:94:94:ee:0a:e6:7c:da:
f2:47:1a:28:ad:88:bb:6c:9b:70:6b:bd:d2:6a:33:
df:ee:90:e3:45:d5:d1:67:b7:2a:58:1d:64:59:2a:
61:4c:c5:4b:9b:e4:88:f6:e4:b2:83:49:d6:e2:63:
5f:79:0e:12:30:1c:de:de:07:04:ae:3d:d5:36:e9:
2f:7f:ff:8f:df:16:26:59:dc:1b:c3:26:e5:f0:c1:
f2:4d:ce:0b:9b:fc:6e:ef:08:04:76:b5:35:a3:98:
66:f0:fa:b2:cb:2c:72:19:bf:30:5d:3e:b5:2d:ee:
cc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8C:73:2E:DA:34:1C:3D:8B:0F:65:AC:7F:5D:BA:09:E5:54:2B:6F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231382e3132342e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.124.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:db:03:e9:0b:bf:01:4f:30:0b:ec:5f:3c:cb:c2:39:70:a2:
30:f4:40:5c:75:4e:2c:74:47:46:f2:6e:c1:73:bf:ce:d1:1e:
e9:9c:ee:78:29:cc:ce:b0:02:e6:0c:89:bb:29:e4:1a:8d:85:
bf:5e:a7:71:9e:d7:11:9b:78:c5:bd:55:d7:9d:ba:c7:b0:67:
83:a1:c2:da:a0:ef:5e:b8:c4:2e:3b:dd:f2:f8:1a:40:6b:85:
b1:87:3f:f3:04:fa:74:4d:03:b4:65:b8:d3:f3:6d:84:29:5a:
68:be:9e:1c:2c:ad:55:6f:25:e1:a4:b2:79:05:b3:b5:70:85:
ee:92:2e:dd:90:6a:08:e2:cb:38:66:3e:db:48:55:72:2c:75:
36:2d:e2:c5:10:4d:74:b7:e8:ca:2b:31:e8:2d:67:f4:7e:cb:
66:5c:5e:bd:2f:89:9e:72:d1:a8:8a:08:60:43:98:23:25:76:
1b:aa:2c:2b:9e:56:22:8f:53:93:25:b5:08:57:8c:8f:2c:b8:
3f:bb:db:47:c9:ad:ce:f4:0e:9b:16:bf:0b:08:6f:fd:21:8d:
82:84:e5:cc:d3:8f:8e:17:ef:b3:58:50:c5:f2:4e:de:ca:2e:
9d:7a:39:54:7b:47:db:4a:6b:d6:f4:13:a1:cb:9b:c4:0a:2f:
b7:c5:af:27
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUMgq4dnjbVKwc+L38moDgSsVtN1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDA5MjAxMzU5NDlaFw0yNTA5MTkxNDA0NDlaMDMxMTAvBgNV
BAMTKDIzOEM3MzJFREEzNDFDM0Q4QjBGNjVBQzdGNURCQTA5RTU1NDJCNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC598jCDoQJavp7kdbe9ilFDwTX
R7kjF21m+E7GsMYvHiVjOYO2fS4u0FwewA9GxtRV2WTc/8fEHUUrAL0rrE1HbAZ0
yjAoItu+QIa8hxHNKDOlAJkOVI5gq7IAQe9wqlq8mh6A8Jk8QdUnnBuk+9JE7KDu
aF9bJ8CovMzrKpRMmM66SZUlPXpzK6j5x8DalJTuCuZ82vJHGiitiLtsm3BrvdJq
M9/ukONF1dFntypYHWRZKmFMxUub5Ij25LKDSdbiY195DhIwHN7eBwSuPdU26S9/
/4/fFiZZ3BvDJuXwwfJNzgub/G7vCAR2tTWjmGbw+rLLLHIZvzBdPrUt7szLAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUI4xzLto0HD2LD2Wsf126CeVUK28wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMxMzgyZTMx
MzIzNDJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAG52nwwDQYJKoZIhvcNAQELBQADggEBAA3bA+kLvwFPMAvsXzzLwjlwojD0QFx1
Tix0R0bybsFzv87RHumc7ngpzM6wAuYMibsp5BqNhb9ep3Ge1xGbeMW9Vdedusew
Z4Ohwtqg7164xC473fL4GkBrhbGHP/ME+nRNA7RluNPzbYQpWmi+nhwsrVVvJeGk
snkFs7Vwhe6SLt2QagjiyzhmPttIVXIsdTYt4sUQTXS36MorMegtZ/R+y2ZcXr0v
iZ5y0aiKCGBDmCMldhuqLCueViKPU5MltQhXjI8suD+720fJrc70DpsWvwsIb/0h
jYKE5czTj44X77NYUMXyTt7KLp16OVR7R9tKa9b0E6HLm8QKL7fFryc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:59 2025 by rpki-client