Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138332e302f32342d3332203d3e203531313637.roa
File: 3138352e3234352e3138332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: e7mm+SSFnBpRXAXqK32cw7JRnvduobGVpWiSHAKREN0=
Subject key identifier: 24:BF:0C:62:F9:B5:90:57:86:3F:E2:BA:47:E2:40:64:52:CC:6D:48
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 305819761D578ECCE5CB7BC23DDC1DDD302A59B8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138332e302f32342d3332203d3e203531313637.roa
Signing time: Fri 20 Sep 2024 14:04:51 +0000
ROA not before: Fri 20 Sep 2024 13:59:51 +0000
ROA not after: Fri 19 Sep 2025 14:04:51 +0000
asID: 51167
IP address blocks: 185.245.183.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:58:19:76:1d:57:8e:cc:e5:cb:7b:c2:3d:dc:1d:dd:30:2a:59:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:51 2024 GMT
Not After : Sep 19 14:04:51 2025 GMT
Subject: CN=24BF0C62F9B59057863FE2BA47E2406452CC6D48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:b8:bf:54:53:f6:e2:7e:f3:f7:4c:97:d1:
b6:bb:47:48:66:a0:e6:68:8d:d7:a2:f5:76:db:0f:
1e:9a:e3:7a:5b:e6:88:c5:97:8a:91:12:b4:07:3f:
6c:50:c8:53:a1:32:1e:db:fa:78:8f:1a:8e:bb:fc:
ab:b0:11:ff:0b:be:06:59:ee:69:c9:5a:10:f1:aa:
5a:09:03:c0:8a:a5:ee:00:42:01:92:01:47:7e:4f:
66:67:51:9d:7d:18:fb:61:93:3e:8e:20:b4:16:2d:
7b:ca:bf:b1:04:8c:6c:87:99:0b:68:4b:cd:59:cd:
c8:62:01:e2:1f:c6:45:29:d5:92:12:a4:66:27:62:
19:d0:c0:9a:70:2a:44:92:c6:d7:4b:ce:d8:89:46:
8b:53:ae:28:0d:c6:4b:67:d2:89:6f:41:be:91:14:
e0:e1:e7:ae:48:ac:72:7d:df:51:1d:91:fc:dd:79:
78:7b:64:5b:f3:59:c6:8d:3b:dc:c1:5f:d1:1e:fd:
90:cf:3e:37:0a:a0:f8:5c:9c:88:38:57:d0:27:41:
43:56:3c:02:44:f0:b3:39:e4:60:b7:14:6b:e8:df:
77:e4:b7:79:08:cf:db:54:64:dc:0d:47:13:e9:d6:
cd:9b:00:38:64:54:0f:34:bf:8c:4b:ed:f5:7d:78:
6f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BF:0C:62:F9:B5:90:57:86:3F:E2:BA:47:E2:40:64:52:CC:6D:48
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138332e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.183.0/24
Signature Algorithm: sha256WithRSAEncryption
20:3e:75:83:6b:82:80:2d:65:f0:85:08:2c:3b:f9:45:a7:43:
d6:2e:99:9a:54:9c:f7:fa:d6:06:51:d9:00:9c:63:b2:eb:7e:
5e:52:37:e3:5f:19:d7:18:7e:b7:ee:26:b0:4c:c4:9e:19:f8:
da:5a:df:a4:cc:bd:a9:16:96:0d:ff:d4:51:13:45:f0:5c:62:
55:16:63:cd:4c:20:76:96:36:6e:91:e5:39:1b:65:f8:d0:74:
69:75:b7:17:7a:33:55:14:dd:11:b4:8e:9c:1b:77:2c:de:73:
e7:4e:e3:87:9e:96:f5:4c:74:e0:67:6d:55:20:38:ca:23:20:
67:bd:02:9d:86:8b:61:45:aa:ea:a9:9e:78:17:1b:09:36:42:
2a:42:4b:d6:61:40:4d:f4:ba:4b:90:10:83:57:c7:a7:37:08:
fb:5f:b5:89:b0:4e:c6:d9:c6:12:31:01:e0:43:ca:1c:30:56:
fc:c3:1b:94:f5:9f:f5:69:8d:bc:01:df:3a:e4:0d:d7:5e:8a:
b2:a6:8e:6a:03:41:69:5f:89:fb:73:99:07:af:4a:f1:4d:17:
4d:22:8c:b1:6d:a2:d2:27:5e:37:e4:89:d6:fb:0d:ec:1c:57:
94:52:fd:7f:16:85:49:88:0a:4b:f4:4d:3d:83:b9:1b:d6:4c:
7f:10:13:01
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUMFgZdh1Xjszly3vCPdwd3TAqWbgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDA5MjAxMzU5NTFaFw0yNTA5MTkxNDA0NTFaMDMxMTAvBgNV
BAMTKDI0QkYwQzYyRjlCNTkwNTc4NjNGRTJCQTQ3RTI0MDY0NTJDQzZENDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs3ri/VFP24n7z90yX0ba7R0hm
oOZojdei9XbbDx6a43pb5ojFl4qRErQHP2xQyFOhMh7b+niPGo67/KuwEf8LvgZZ
7mnJWhDxqloJA8CKpe4AQgGSAUd+T2ZnUZ19GPthkz6OILQWLXvKv7EEjGyHmQto
S81ZzchiAeIfxkUp1ZISpGYnYhnQwJpwKkSSxtdLztiJRotTrigNxktn0olvQb6R
FODh565IrHJ931EdkfzdeXh7ZFvzWcaNO9zBX9Ee/ZDPPjcKoPhcnIg4V9AnQUNW
PAJE8LM55GC3FGvo33fkt3kIz9tUZNwNRxPp1s2bADhkVA80v4xL7fV9eG8DAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUJL8MYvm1kFeGP+K6R+JAZFLMbUgwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjM0MzUyZTMx
MzgzMzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC59bcwDQYJKoZIhvcNAQELBQADggEBACA+dYNrgoAtZfCFCCw7+UWnQ9YumZpU
nPf61gZR2QCcY7Lrfl5SN+NfGdcYfrfuJrBMxJ4Z+Npa36TMvakWlg3/1FETRfBc
YlUWY81MIHaWNm6R5TkbZfjQdGl1txd6M1UU3RG0jpwbdyzec+dO44eelvVMdOBn
bVUgOMojIGe9Ap2Gi2FFquqpnngXGwk2QipCS9ZhQE30ukuQEINXx6c3CPtftYmw
TsbZxhIxAeBDyhwwVvzDG5T1n/VpjbwB3zrkDddeirKmjmoDQWlfiftzmQevSvFN
F00ijLFtotInXjfkidb7DewcV5RS/X8WhUmICkv0TT2DuRvWTH8QEwE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:03 2024 by rpki-client on console-fra.rpki-client.org