Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3137362e3132372e302f32342d3234203d3e20323132323338.roa
File: 3139332e3137362e3132372e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: +accPWOS/cGnn33jQQRFWW/YXPli1MHVoC5vsxNPl1c=
Subject key identifier: 1F:94:56:B0:D6:13:89:A5:79:1E:5C:B2:1D:D1:BE:B4:4F:A0:29:E4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5EA18A487B593C24F1D8D67F410A718AEFF037E5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3137362e3132372e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 13 Aug 2024 19:41:40 +0000
ROA not before: Tue 13 Aug 2024 19:36:40 +0000
ROA not after: Tue 12 Aug 2025 19:41:40 +0000
asID: 212238
IP address blocks: 193.176.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:a1:8a:48:7b:59:3c:24:f1:d8:d6:7f:41:0a:71:8a:ef:f0:37:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 13 19:36:40 2024 GMT
Not After : Aug 12 19:41:40 2025 GMT
Subject: CN=1F9456B0D61389A5791E5CB21DD1BEB44FA029E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:73:12:94:28:24:40:35:15:e5:cf:d8:b3:
1d:93:29:25:01:ea:25:31:32:3f:48:49:f4:4e:30:
8e:6b:92:d5:d3:a2:14:3b:e2:66:5f:4c:29:33:64:
54:9e:0e:b6:2a:18:e8:cf:9d:f3:18:80:73:de:1e:
94:b7:db:94:12:41:2e:7b:78:cc:60:14:81:9a:6b:
a4:82:d4:13:01:0f:13:da:a9:1d:62:6e:5f:7c:c8:
fe:cd:d7:ff:fe:dc:2e:2f:4f:5d:94:cf:f5:43:9d:
0d:63:59:c1:5b:84:dd:7a:09:0d:99:48:49:39:a7:
5e:9b:f6:b6:0e:47:8a:40:99:29:8e:9a:53:e9:db:
2d:9c:aa:79:c9:dd:1f:fe:25:74:8b:28:ca:63:61:
91:5b:e9:fe:b9:30:c4:02:f4:7c:2b:6b:dc:97:13:
5f:6f:11:62:fc:b0:07:c6:3d:0f:e7:4f:a9:4c:38:
c2:91:de:cf:f2:04:dd:1d:2b:c8:4c:fd:3b:19:d9:
36:cd:12:16:03:fa:5d:6f:6a:da:cf:c1:96:eb:14:
50:b9:e9:41:ba:a9:6e:91:74:11:9c:c5:b8:91:f2:
eb:2d:d5:61:d6:ec:2c:ba:2e:da:dc:fd:36:de:f6:
a6:09:92:50:80:e8:ad:7f:5f:c4:71:68:9d:6c:2e:
e9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:94:56:B0:D6:13:89:A5:79:1E:5C:B2:1D:D1:BE:B4:4F:A0:29:E4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3137362e3132372e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.127.0/24
Signature Algorithm: sha256WithRSAEncryption
62:59:f6:dd:42:26:7e:0f:9b:4a:e9:ef:10:e1:38:3d:44:71:
97:ab:d5:98:b2:61:e6:63:22:5d:01:f2:b2:ee:7a:8c:80:45:
2c:e4:86:9f:db:d5:c8:4d:77:bb:9d:64:81:20:c2:bd:c9:9c:
a0:4a:ea:29:75:c7:a3:36:6c:0a:7d:4c:5b:21:a9:7f:d3:95:
7f:87:07:ce:59:0e:cf:05:ba:c7:b5:26:bd:78:ed:a4:05:72:
7a:cf:be:74:40:2c:e6:e4:8d:63:92:7a:91:50:cd:90:dc:9b:
cc:2f:cc:c6:82:d9:9f:82:c1:8f:c1:2e:b1:51:d1:ea:18:12:
60:ab:f0:02:6b:a3:a5:79:3d:53:07:64:14:51:00:c7:0c:2f:
9a:1d:0b:66:2c:17:65:a1:15:b2:9a:94:a3:bb:33:bd:88:ca:
15:ef:4c:cb:ba:43:09:c4:50:e6:4a:4f:d1:d9:8c:23:c5:a5:
2e:84:be:59:64:3e:53:c5:a7:92:04:e3:2d:3b:07:8c:dc:7f:
25:b4:93:52:8e:0c:b0:e7:d2:ec:a9:1d:62:e5:ad:a5:cc:92:
4b:0b:30:aa:0b:25:61:33:77:f0:ad:50:c7:f9:dc:9f:ad:12:
54:c3:35:72:0c:e8:df:f5:f7:9e:e3:1c:b9:66:09:9e:3e:c4:
d9:07:59:c2
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUXqGKSHtZPCTx2NZ/QQpxiu/wN+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDA4MTMxOTM2NDBaFw0yNTA4MTIxOTQxNDBaMDMxMTAvBgNV
BAMTKDFGOTQ1NkIwRDYxMzg5QTU3OTFFNUNCMjFERDFCRUI0NEZBMDI5RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC8nMSlCgkQDUV5c/Ysx2TKSUB
6iUxMj9ISfROMI5rktXTohQ74mZfTCkzZFSeDrYqGOjPnfMYgHPeHpS325QSQS57
eMxgFIGaa6SC1BMBDxPaqR1ibl98yP7N1//+3C4vT12Uz/VDnQ1jWcFbhN16CQ2Z
SEk5p16b9rYOR4pAmSmOmlPp2y2cqnnJ3R/+JXSLKMpjYZFb6f65MMQC9Hwra9yX
E19vEWL8sAfGPQ/nT6lMOMKR3s/yBN0dK8hM/TsZ2TbNEhYD+l1vatrPwZbrFFC5
6UG6qW6RdBGcxbiR8ust1WHW7Cy6Ltrc/Tbe9qYJklCA6K1/X8RxaJ1sLun7AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUH5RWsNYTiaV5HlyyHdG+tE+gKeQwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTMzMmUzMTM3MzYyZTMx
MzIzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMjMyMzMzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMGwfzANBgkqhkiG9w0BAQsFAAOCAQEAYln23UImfg+bSunvEOE4PURxl6vV
mLJh5mMiXQHysu56jIBFLOSGn9vVyE13u51kgSDCvcmcoErqKXXHozZsCn1MWyGp
f9OVf4cHzlkOzwW6x7UmvXjtpAVyes++dEAs5uSNY5J6kVDNkNybzC/MxoLZn4LB
j8EusVHR6hgSYKvwAmujpXk9UwdkFFEAxwwvmh0LZiwXZaEVspqUo7szvYjKFe9M
y7pDCcRQ5kpP0dmMI8WlLoS+WWQ+U8WnkgTjLTsHjNx/JbSTUo4MsOfS7KkdYuWt
pcySSwswqgslYTN38K1Qx/ncn60SVMM1cgzo3/X3nuMcuWYJnj7E2QdZwg==
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:42:56 2024 by rpki-client on console-fra.rpki-client.org