Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233342e36392e302f32342d3332203d3e203531313637.roa
File: 3138352e3233342e36392e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: ziXsCjR/IWmsNQABxNHbITVdYjZVExqNMk+LGeARbI0=
Subject key identifier: A9:12:5A:D2:AB:89:71:CE:86:3B:D6:6E:46:0B:DC:CD:4B:E2:D5:F8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3295465F91BBEC875F7CAEB0CB635F92BD9417BF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233342e36392e302f32342d3332203d3e203531313637.roa
Signing time: Fri 20 Sep 2024 14:04:55 +0000
ROA not before: Fri 20 Sep 2024 13:59:55 +0000
ROA not after: Fri 19 Sep 2025 14:04:55 +0000
asID: 51167
IP address blocks: 185.234.69.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:95:46:5f:91:bb:ec:87:5f:7c:ae:b0:cb:63:5f:92:bd:94:17:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:55 2024 GMT
Not After : Sep 19 14:04:55 2025 GMT
Subject: CN=A9125AD2AB8971CE863BD66E460BDCCD4BE2D5F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e6:01:af:36:5e:4f:17:50:b9:a9:62:48:b4:
d0:4f:f2:95:51:df:74:22:e9:a8:5b:2d:9c:7b:61:
1f:6e:a0:2e:18:84:55:9e:59:a4:c6:07:fa:8b:9f:
ad:f3:d3:50:ba:21:f2:4c:64:6c:6e:b8:f3:2f:3f:
49:0c:b3:a7:6e:cb:23:32:59:b7:c6:11:a3:0f:0e:
63:07:b1:04:77:a6:4c:93:f4:58:8f:da:67:81:9a:
d4:f4:34:45:df:f9:1d:69:1e:b2:0d:40:2d:65:09:
17:2a:2b:bc:31:12:21:18:44:05:b6:c0:88:44:65:
03:56:7a:00:42:67:27:1a:59:89:c9:e2:16:77:aa:
91:1c:36:0b:88:46:49:b7:d4:60:d9:ea:63:4b:53:
e1:57:54:67:cf:ed:21:4f:61:9c:fa:40:e1:16:1d:
db:4e:32:3b:d6:7c:82:9b:4d:8f:e8:c8:8f:36:72:
b1:c9:44:e1:9b:cd:b4:50:07:87:87:2f:30:89:18:
a0:67:ec:f1:5e:93:b5:71:34:4f:22:83:2d:54:aa:
5c:8c:9d:14:13:d8:75:41:99:97:e6:ea:c5:cc:e5:
c7:67:fe:20:6e:10:d6:71:0f:7d:5c:0f:db:7d:30:
d0:17:24:fb:2e:cd:2e:e2:35:1e:7e:a9:c5:2d:24:
15:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:12:5A:D2:AB:89:71:CE:86:3B:D6:6E:46:0B:DC:CD:4B:E2:D5:F8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233342e36392e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.69.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:c2:99:17:9a:eb:44:bc:d5:a5:f9:bc:ec:1c:81:84:87:00:
c9:12:2e:cb:2a:46:3d:54:e1:8f:8a:c0:af:94:b5:6d:1a:b8:
b8:5d:c1:25:7c:e5:a4:b8:93:d4:25:83:0c:93:c1:b5:92:85:
ed:5c:56:72:5a:e4:a2:c5:4c:fa:f6:aa:55:95:69:d9:58:a3:
86:da:9c:38:f4:d4:d4:d1:f5:25:22:19:88:86:b3:e9:a7:ca:
35:8d:bd:98:b9:30:39:7c:4b:cc:c9:6b:d1:2d:70:93:69:15:
8e:86:0e:f8:bd:b9:34:7e:aa:93:b1:51:f1:86:d5:f5:8f:86:
fc:e9:fe:41:74:4d:7e:3d:dc:63:16:96:5a:63:90:d3:fe:78:
c8:fe:d1:d6:ef:48:c8:a7:8f:c7:11:3b:c7:d3:70:16:86:7f:
f3:23:6b:3f:61:63:35:46:cf:9c:7b:ec:1c:57:43:a6:cb:f1:
49:a6:28:c7:35:ea:c2:5d:88:af:5f:1e:1e:fe:64:d9:65:d3:
94:4d:ae:2d:3d:1d:59:87:97:02:ce:fa:0b:1a:82:43:66:71:
47:98:dd:dc:ce:74:b5:dd:77:c7:6e:a3:23:a9:a1:48:fd:f7:
7c:64:d4:ce:3a:6f:a8:7e:37:5d:c8:dc:31:4b:71:60:7e:33:
15:cb:9b:3b
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUMpVGX5G77IdffK6wy2Nfkr2UF78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDA5MjAxMzU5NTVaFw0yNTA5MTkxNDA0NTVaMDMxMTAvBgNV
BAMTKEE5MTI1QUQyQUI4OTcxQ0U4NjNCRDY2RTQ2MEJEQ0NENEJFMkQ1RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq5gGvNl5PF1C5qWJItNBP8pVR
33Qi6ahbLZx7YR9uoC4YhFWeWaTGB/qLn63z01C6IfJMZGxuuPMvP0kMs6duyyMy
WbfGEaMPDmMHsQR3pkyT9FiP2meBmtT0NEXf+R1pHrINQC1lCRcqK7wxEiEYRAW2
wIhEZQNWegBCZycaWYnJ4hZ3qpEcNguIRkm31GDZ6mNLU+FXVGfP7SFPYZz6QOEW
HdtOMjvWfIKbTY/oyI82crHJROGbzbRQB4eHLzCJGKBn7PFek7VxNE8igy1UqlyM
nRQT2HVBmZfm6sXM5cdn/iBuENZxD31cD9t9MNAXJPsuzS7iNR5+qcUtJBUDAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUqRJa0quJcc6GO9ZuRgvczUvi1fgwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMzMzQyZTM2
MzkyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
uepFMA0GCSqGSIb3DQEBCwUAA4IBAQA/wpkXmutEvNWl+bzsHIGEhwDJEi7LKkY9
VOGPisCvlLVtGri4XcElfOWkuJPUJYMMk8G1koXtXFZyWuSixUz69qpVlWnZWKOG
2pw49NTU0fUlIhmIhrPpp8o1jb2YuTA5fEvMyWvRLXCTaRWOhg74vbk0fqqTsVHx
htX1j4b86f5BdE1+PdxjFpZaY5DT/njI/tHW70jIp4/HETvH03AWhn/zI2s/YWM1
Rs+ce+wcV0Omy/FJpijHNerCXYivXx4e/mTZZdOUTa4tPR1Zh5cCzvoLGoJDZnFH
mN3cznS13XfHbqMjqaFI/fd8ZNTOOm+ofjddyNwxS3FgfjMVy5s7
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:20 2025 by rpki-client