Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3135312e302f32342d3332203d3e203531313637.roa
File: 3138352e3234312e3135312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: Pry4iL3QuJmk7ggRWQ3kUqBXGIPJZsjREcxuKYqaKrQ=
Subject key identifier: 03:64:A9:37:CF:F4:48:37:7E:C5:CD:39:22:B0:5F:50:01:5E:C5:AA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 72AB7B523EF56EF8BFC02751064B2F0AA9B68C73
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3135312e302f32342d3332203d3e203531313637.roa
Signing time: Fri 20 Sep 2024 14:04:59 +0000
ROA not before: Fri 20 Sep 2024 13:59:59 +0000
ROA not after: Fri 19 Sep 2025 14:04:59 +0000
asID: 51167
IP address blocks: 185.241.151.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:ab:7b:52:3e:f5:6e:f8:bf:c0:27:51:06:4b:2f:0a:a9:b6:8c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:59 2024 GMT
Not After : Sep 19 14:04:59 2025 GMT
Subject: CN=0364A937CFF448377EC5CD3922B05F50015EC5AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1f:42:0e:c5:44:78:bc:94:94:6e:cb:36:86:
10:5f:71:de:75:41:56:4f:9c:d9:0a:59:68:02:3a:
1a:31:bc:08:ef:ab:bf:f5:ba:1f:c7:74:74:a7:96:
7a:28:31:45:ae:4c:ad:db:00:cf:20:98:dc:6a:ef:
5e:82:e5:96:1e:6a:62:c1:b8:ef:84:1f:61:be:98:
b6:84:97:7c:a8:ce:0a:bc:54:fa:95:fd:9e:45:82:
5b:93:03:8a:83:6f:2f:d9:ee:9d:13:5f:42:a4:c3:
26:fa:0b:d1:a8:f1:5f:a3:ac:1e:33:43:fb:5a:2b:
bb:80:df:37:37:16:5a:96:c0:74:a4:14:8c:e7:7a:
71:c0:32:ea:de:42:ba:29:23:d7:02:c5:ca:d5:04:
62:57:e1:d4:74:42:5f:e6:d7:be:5b:67:29:7f:43:
63:a5:74:0a:58:2b:17:93:b7:df:7c:ee:4e:58:5b:
ab:39:ce:a3:93:6b:5c:4b:52:db:a9:d5:76:3c:d2:
cc:b1:03:00:66:7f:20:52:ac:49:67:04:e3:fc:55:
8f:6a:b9:3f:c0:c1:1e:d1:60:0f:50:e8:ce:7a:1d:
d3:78:b1:cf:3e:45:c6:1d:62:99:8b:ac:5e:0c:69:
df:b7:d5:0c:2b:9a:ff:59:89:de:ff:c6:84:53:66:
45:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:64:A9:37:CF:F4:48:37:7E:C5:CD:39:22:B0:5F:50:01:5E:C5:AA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3135312e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.151.0/24
Signature Algorithm: sha256WithRSAEncryption
97:04:83:21:ec:fb:ff:a2:fc:8d:05:31:8d:2b:22:1e:bf:07:
c6:b4:65:0a:d7:49:be:2f:96:04:62:c7:a2:8d:5b:b9:9e:e9:
c9:b8:1e:18:ca:51:99:50:69:68:17:5b:1f:26:10:61:02:cb:
51:ec:4a:d3:68:32:7e:70:18:3b:04:a7:f9:b4:13:bd:c2:76:
f4:41:73:e0:15:01:df:69:8f:0f:ca:24:75:92:42:47:c1:69:
c2:bb:85:a6:70:10:e4:8b:ac:87:2d:0b:51:d6:02:c1:c6:c6:
92:e9:e2:ab:cd:99:cc:d7:10:b3:2c:8b:b1:e1:c6:70:0a:84:
a4:d2:1e:6b:de:8f:41:15:22:fe:a2:e9:a3:2a:63:b2:9d:fd:
df:80:e2:ab:f7:79:3d:4e:33:83:b0:da:cf:ab:57:45:b5:a5:
51:29:81:9b:b0:82:2c:6b:7e:34:64:62:de:61:46:84:e5:8a:
c2:9d:c8:c4:53:01:e1:ab:58:f1:7b:a1:20:60:23:8f:42:12:
d7:be:ca:9c:59:f3:e7:e3:e4:b6:75:bf:15:ee:d1:65:b5:6a:
a9:f9:ee:65:29:c1:0a:d2:5f:e4:f8:2c:50:a2:7d:6b:27:ef:
fb:ab:78:39:b2:96:f2:f3:57:8b:58:96:69:bd:00:dc:fb:43:
a1:ff:1c:e9
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUcqt7Uj71bvi/wCdRBksvCqm2jHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDA5MjAxMzU5NTlaFw0yNTA5MTkxNDA0NTlaMDMxMTAvBgNV
BAMTKDAzNjRBOTM3Q0ZGNDQ4Mzc3RUM1Q0QzOTIyQjA1RjUwMDE1RUM1QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8H0IOxUR4vJSUbss2hhBfcd51
QVZPnNkKWWgCOhoxvAjvq7/1uh/HdHSnlnooMUWuTK3bAM8gmNxq716C5ZYeamLB
uO+EH2G+mLaEl3yozgq8VPqV/Z5FgluTA4qDby/Z7p0TX0Kkwyb6C9Go8V+jrB4z
Q/taK7uA3zc3FlqWwHSkFIznenHAMureQropI9cCxcrVBGJX4dR0Ql/m175bZyl/
Q2OldApYKxeTt9987k5YW6s5zqOTa1xLUtup1XY80syxAwBmfyBSrElnBOP8VY9q
uT/AwR7RYA9Q6M56HdN4sc8+RcYdYpmLrF4Mad+31Qwrmv9Zid7/xoRTZkXHAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUA2SpN8/0SDd+xc05IrBfUAFexaowHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjM0MzEyZTMx
MzUzMTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC58ZcwDQYJKoZIhvcNAQELBQADggEBAJcEgyHs+/+i/I0FMY0rIh6/B8a0ZQrX
Sb4vlgRix6KNW7me6cm4HhjKUZlQaWgXWx8mEGECy1HsStNoMn5wGDsEp/m0E73C
dvRBc+AVAd9pjw/KJHWSQkfBacK7haZwEOSLrIctC1HWAsHGxpLp4qvNmczXELMs
i7HhxnAKhKTSHmvej0EVIv6i6aMqY7Kd/d+A4qv3eT1OM4Ow2s+rV0W1pVEpgZuw
gixrfjRkYt5hRoTlisKdyMRTAeGrWPF7oSBgI49CEte+ypxZ8+fj5LZ1vxXu0WW1
aqn57mUpwQrSX+T4LFCifWsn7/ureDmylvLzV4tYlmm9ANz7Q6H/HOk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:59 2025 by rpki-client