Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231382e3132362e302f32342d3332203d3e203531313637.roa
File: 3138352e3231382e3132362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: liAnwBXFFGyQlIqzx+r5i11B7sEq/tAr6vhJ9hv5RyU=
Subject key identifier: 1E:1D:D3:61:EE:2E:22:B1:CA:0A:7C:0D:35:0A:EC:36:34:3E:8D:B4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 58BA22A7D0573CF2C4726469BA5325D28C15DF17
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231382e3132362e302f32342d3332203d3e203531313637.roa
Signing time: Fri 20 Oct 2023 13:41:49 +0000
ROA not before: Fri 20 Oct 2023 13:36:49 +0000
ROA not after: Fri 18 Oct 2024 13:41:49 +0000
asID: 51167
IP address blocks: 185.218.126.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:ba:22:a7:d0:57:3c:f2:c4:72:64:69:ba:53:25:d2:8c:15:df:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:49 2023 GMT
Not After : Oct 18 13:41:49 2024 GMT
Subject: CN=1E1DD361EE2E22B1CA0A7C0D350AEC36343E8DB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:01:e9:1c:55:0f:a7:dc:26:7f:41:a8:c3:1f:
17:45:e4:d5:63:08:f9:84:7c:5a:01:6f:1c:fa:be:
f5:15:c8:f1:bb:b9:f3:ae:e0:f1:76:8f:9d:20:6e:
7d:66:d5:a4:4c:bd:a9:f9:99:89:9b:85:ab:ee:a7:
4f:74:de:09:85:01:4c:72:e3:dd:50:ab:97:ff:15:
16:91:94:70:80:53:6b:dc:c3:ff:18:75:cd:c1:5c:
f9:bc:9a:04:b0:0e:ff:7c:fc:b1:65:ed:20:fb:27:
db:ae:d8:e6:26:35:87:fd:5a:d0:d3:20:f3:8a:db:
05:92:94:6f:7a:77:7a:10:33:47:66:c7:39:08:eb:
26:69:1b:e5:1d:b8:24:7f:bf:3a:f0:dd:fb:d5:cb:
a9:34:2f:4d:58:c3:84:1e:34:00:9c:6d:24:d9:f5:
89:94:19:85:90:af:2e:d0:ce:52:b7:3d:70:2b:55:
a9:b7:72:f2:cb:e2:54:da:16:d9:1e:57:ac:99:05:
ec:94:52:e2:ef:19:8d:83:c3:de:a0:dc:31:e3:a3:
f6:20:37:aa:b4:1d:b2:71:58:0c:c4:3c:d4:6a:53:
a1:bf:d1:98:8d:e7:fb:76:92:03:dc:4f:88:41:d0:
9c:75:fd:90:46:6d:b7:46:96:6a:19:c2:fd:7b:59:
57:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1D:D3:61:EE:2E:22:B1:CA:0A:7C:0D:35:0A:EC:36:34:3E:8D:B4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231382e3132362e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.126.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:86:d4:bf:2b:48:d4:bd:5f:ff:6b:fc:53:d8:22:e4:fb:05:
4e:1b:a2:6b:89:b2:9a:cb:94:bf:08:2a:be:26:53:a7:7d:fb:
9e:97:67:2e:c4:6a:e0:e3:02:64:7b:06:a4:02:fe:58:98:b1:
1f:13:86:84:bb:9c:20:3c:59:b7:9f:0c:41:7e:50:52:6e:6d:
46:7d:76:7d:17:2c:ad:42:67:f4:a3:73:20:1b:d0:fb:03:15:
34:93:d3:3d:d8:6a:3b:b5:fd:fc:a8:d3:76:5e:ec:4c:c3:67:
04:e9:0b:6f:3a:9b:43:ff:97:9e:00:04:fe:37:f9:df:2c:55:
7c:b4:38:58:84:42:d6:cf:dd:b2:c5:9c:17:d5:45:57:44:b3:
e1:63:01:15:42:a9:75:42:e5:96:af:8f:64:b7:ed:d7:61:28:
6e:f5:c5:1e:50:2e:19:b9:30:2b:2f:2e:d8:93:e2:09:54:90:
3b:db:4b:55:9d:ad:31:77:bf:48:80:b9:30:3f:0f:80:91:03:
eb:f4:cb:69:30:35:b9:7b:13:bb:f2:28:ba:f5:0d:18:09:8a:
b5:82:30:df:f9:d5:d8:bf:9b:26:28:74:b6:9e:ec:e5:8f:2e:
ee:55:4a:da:79:6a:6a:3d:af:3b:17:a8:87:48:6f:50:b7:f3:
6a:d0:9d:b1
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUWLoip9BXPPLEcmRpulMl0owV3xcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzEwMjAxMzM2NDlaFw0yNDEwMTgxMzQxNDlaMDMxMTAvBgNV
BAMTKDFFMUREMzYxRUUyRTIyQjFDQTBBN0MwRDM1MEFFQzM2MzQzRThEQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBAekcVQ+n3CZ/QajDHxdF5NVj
CPmEfFoBbxz6vvUVyPG7ufOu4PF2j50gbn1m1aRMvan5mYmbhavup0903gmFAUxy
491Qq5f/FRaRlHCAU2vcw/8Ydc3BXPm8mgSwDv98/LFl7SD7J9uu2OYmNYf9WtDT
IPOK2wWSlG96d3oQM0dmxzkI6yZpG+UduCR/vzrw3fvVy6k0L01Yw4QeNACcbSTZ
9YmUGYWQry7QzlK3PXArVam3cvLL4lTaFtkeV6yZBeyUUuLvGY2Dw96g3DHjo/Yg
N6q0HbJxWAzEPNRqU6G/0ZiN5/t2kgPcT4hB0Jx1/ZBGbbdGlmoZwv17WVdxAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUHh3TYe4uIrHKCnwNNQrsNjQ+jbQwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMxMzgyZTMx
MzIzNjJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC52n4wDQYJKoZIhvcNAQELBQADggEBADyG1L8rSNS9X/9r/FPYIuT7BU4bomuJ
sprLlL8IKr4mU6d9+56XZy7EauDjAmR7BqQC/liYsR8ThoS7nCA8WbefDEF+UFJu
bUZ9dn0XLK1CZ/SjcyAb0PsDFTST0z3Yaju1/fyo03Ze7EzDZwTpC286m0P/l54A
BP43+d8sVXy0OFiEQtbP3bLFnBfVRVdEs+FjARVCqXVC5Zavj2S37ddhKG71xR5Q
Lhm5MCsvLtiT4glUkDvbS1WdrTF3v0iAuTA/D4CRA+v0y2kwNbl7E7vyKLr1DRgJ
irWCMN/51di/myYodLae7OWPLu5VStp5amo9rzsXqIdIb1C382rQnbE=
-----END CERTIFICATE-----
Generated at Tue May 21 08:01:44 2024 by rpki-client on console-fra.rpki-client.org