Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138322e302f32342d3332203d3e203531313637.roa
File: 3138352e3234352e3138322e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: VtX0R0EhbnkJ3QCq6FrULYvoQ+w74NfgLCdBbSFGVM0=
Subject key identifier: B1:9A:AF:38:5F:0B:0F:A9:B5:27:78:9A:AC:2B:A3:99:61:F4:08:55
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 77E20B7C9E332E7DDBE535183E6489AE85E464E6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138322e302f32342d3332203d3e203531313637.roa
Signing time: Fri 20 Sep 2024 14:04:57 +0000
ROA not before: Fri 20 Sep 2024 13:59:57 +0000
ROA not after: Fri 19 Sep 2025 14:04:57 +0000
asID: 51167
IP address blocks: 185.245.182.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:e2:0b:7c:9e:33:2e:7d:db:e5:35:18:3e:64:89:ae:85:e4:64:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:57 2024 GMT
Not After : Sep 19 14:04:57 2025 GMT
Subject: CN=B19AAF385F0B0FA9B527789AAC2BA39961F40855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:13:8b:e1:57:59:6a:78:f9:bb:4e:fe:32:
4c:64:b7:81:8e:c3:0a:ff:a7:67:11:30:b5:89:df:
f6:70:01:bc:4e:46:73:d7:be:9c:ee:84:67:24:7f:
04:4c:30:45:2c:29:2a:48:38:ad:9d:7e:f9:9a:3c:
2e:78:14:74:b9:a2:d2:dd:d7:c1:cd:59:95:14:6c:
99:5d:9a:f3:18:02:97:e7:ae:6c:04:3e:7c:bd:74:
37:ce:7e:6a:8c:c0:e8:7e:a5:82:7b:15:c2:2c:dd:
e5:04:d6:64:2d:8e:21:5d:84:36:8f:45:7e:a0:f1:
1f:cf:6f:cc:75:5f:09:64:d8:9d:dd:62:6b:88:5e:
a9:ae:7d:8c:a5:ca:b0:0a:fa:2a:f5:25:ce:3b:9f:
28:bc:c8:24:95:cb:74:b6:32:e7:d3:fd:28:8b:a4:
4e:ed:2d:ab:8b:0a:d1:50:17:60:b3:7c:07:5c:88:
9a:10:c8:cd:e5:2b:49:32:c6:8a:89:c2:53:20:76:
9c:cc:cb:09:8d:ab:b5:f8:f6:92:c3:91:35:cd:f9:
a6:70:aa:ad:7e:61:8d:56:e7:de:f5:76:c6:2a:9f:
84:9f:0a:52:e2:4c:f4:f0:49:8b:f1:8a:d2:15:2a:
aa:1b:0b:e0:b0:33:41:c9:c6:40:71:5b:76:8f:c9:
83:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9A:AF:38:5F:0B:0F:A9:B5:27:78:9A:AC:2B:A3:99:61:F4:08:55
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138322e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.182.0/24
Signature Algorithm: sha256WithRSAEncryption
18:82:50:23:11:cd:93:71:ef:14:c5:dc:f4:5f:62:de:f1:fa:
bb:a3:5e:5e:59:2d:72:18:cd:1e:92:0b:2e:ae:1b:7f:6b:40:
1b:f5:85:24:b9:fc:ff:06:18:97:0b:e6:d3:19:8e:35:fa:0e:
38:d0:73:04:86:e7:d8:dc:16:bf:7f:0b:ae:43:0e:90:dd:36:
67:e6:82:7b:97:3a:6c:ec:c3:f2:84:8b:bf:ef:99:87:ff:f4:
0f:79:72:57:e6:4c:3d:9d:ed:b9:df:04:af:3d:aa:da:7e:20:
b8:be:27:ff:a1:09:87:81:6b:57:5c:47:b7:d3:f2:f4:57:a5:
d8:89:7c:f7:b1:89:85:78:e4:2d:37:09:81:c1:10:41:64:07:
a9:7c:af:38:8e:8e:cb:f0:85:e6:a1:a3:3d:b8:4d:00:82:9c:
1b:66:6f:5e:ec:c5:77:d2:50:d6:cb:07:29:fa:fe:c8:7b:91:
7f:17:09:25:6d:be:7e:9c:92:88:4d:fc:6c:de:6f:a7:1f:c2:
85:74:4c:d1:5a:d3:e3:57:b4:68:89:a2:bd:b4:32:61:50:60:
b6:20:6e:18:0c:50:0a:e6:ea:35:0c:d6:54:9e:6a:a0:37:ab:
6f:b8:04:97:b9:5d:93:31:1b:b8:d6:00:0a:10:20:55:ad:e3:
89:d8:97:8f
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUd+ILfJ4zLn3b5TUYPmSJroXkZOYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDA5MjAxMzU5NTdaFw0yNTA5MTkxNDA0NTdaMDMxMTAvBgNV
BAMTKEIxOUFBRjM4NUYwQjBGQTlCNTI3Nzg5QUFDMkJBMzk5NjFGNDA4NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBBBOL4VdZanj5u07+Mkxkt4GO
wwr/p2cRMLWJ3/ZwAbxORnPXvpzuhGckfwRMMEUsKSpIOK2dfvmaPC54FHS5otLd
18HNWZUUbJldmvMYApfnrmwEPny9dDfOfmqMwOh+pYJ7FcIs3eUE1mQtjiFdhDaP
RX6g8R/Pb8x1Xwlk2J3dYmuIXqmufYylyrAK+ir1Jc47nyi8yCSVy3S2MufT/SiL
pE7tLauLCtFQF2CzfAdciJoQyM3lK0kyxoqJwlMgdpzMywmNq7X49pLDkTXN+aZw
qq1+YY1W5971dsYqn4SfClLiTPTwSYvxitIVKqobC+CwM0HJxkBxW3aPyYMnAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUsZqvOF8LD6m1J3iarCujmWH0CFUwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjM0MzUyZTMx
MzgzMjJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC59bYwDQYJKoZIhvcNAQELBQADggEBABiCUCMRzZNx7xTF3PRfYt7x+rujXl5Z
LXIYzR6SCy6uG39rQBv1hSS5/P8GGJcL5tMZjjX6DjjQcwSG59jcFr9/C65DDpDd
NmfmgnuXOmzsw/KEi7/vmYf/9A95clfmTD2d7bnfBK89qtp+ILi+J/+hCYeBa1dc
R7fT8vRXpdiJfPexiYV45C03CYHBEEFkB6l8rziOjsvwheahoz24TQCCnBtmb17s
xXfSUNbLByn6/sh7kX8XCSVtvn6ckohN/Gzeb6cfwoV0TNFa0+NXtGiJor20MmFQ
YLYgbhgMUArm6jUM1lSeaqA3q2+4BJe5XZMxG7jWAAoQIFWt44nYl48=
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:48 2024 by rpki-client on console-ams.rpki-client.org