Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3137342e302f32332d3234203d3e203437353833.roa
File: 3139332e3230332e3137342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: IxBb0ajT6Z1YI/jW1Y2GV+LBm4GKp9Rp4/cHJSeD3Aw=
Subject key identifier: 8B:B2:FA:AF:52:2D:FC:EA:D4:E6:2C:5B:1D:87:B5:A7:9B:AF:49:EE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 694224E78790EDB6FBCE2AAF33AA0F5B3491695A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3137342e302f32332d3234203d3e203437353833.roa
Signing time: Fri 01 Sep 2023 10:54:45 +0000
ROA not before: Fri 01 Sep 2023 10:49:45 +0000
ROA not after: Fri 30 Aug 2024 10:54:45 +0000
asID: 47583
IP address blocks: 193.203.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:42:24:e7:87:90:ed:b6:fb:ce:2a:af:33:aa:0f:5b:34:91:69:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 1 10:49:45 2023 GMT
Not After : Aug 30 10:54:45 2024 GMT
Subject: CN=8BB2FAAF522DFCEAD4E62C5B1D87B5A79BAF49EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fc:6c:ed:a0:a6:1a:81:dd:83:d3:c8:4c:23:
77:c7:b2:02:0f:63:74:05:c3:c3:33:1d:08:e5:2c:
e7:ab:26:2f:49:b4:da:1d:69:fb:89:61:34:20:31:
53:2a:c8:66:c6:e2:00:b6:1e:28:7f:08:64:da:96:
1d:45:94:16:c8:47:4c:2c:5f:9c:37:56:ec:1d:8b:
6c:b7:93:65:50:c1:87:27:3a:ca:e5:78:33:d2:a5:
61:19:32:6b:26:d1:8d:fa:6a:c8:03:60:5f:d0:76:
18:f1:4c:c8:52:86:64:3e:f2:b0:cf:b9:a4:62:98:
0b:50:aa:20:a9:1d:52:0e:08:a9:2a:df:38:d3:fb:
d6:02:9c:8c:81:8d:f4:6c:dd:f3:23:ba:97:46:99:
b2:1d:88:60:b4:bc:95:c5:1f:c8:de:e2:6e:0c:5d:
23:d8:71:e6:a4:9b:eb:69:eb:29:d7:39:ba:3f:66:
8c:56:54:7a:2e:02:bd:21:1a:22:07:72:13:31:e1:
0c:72:ce:a4:c3:0f:7a:fc:0b:c5:a1:fe:5d:b1:12:
fb:b2:22:25:fb:08:b7:63:14:56:aa:97:67:b2:aa:
81:c7:86:16:7d:5e:c6:ac:61:3b:4f:d0:06:79:4a:
ab:01:e0:29:d3:e0:b2:73:eb:4a:ca:15:a8:61:3f:
fe:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B2:FA:AF:52:2D:FC:EA:D4:E6:2C:5B:1D:87:B5:A7:9B:AF:49:EE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3137342e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.174.0/23
Signature Algorithm: sha256WithRSAEncryption
79:40:1f:8e:0f:a5:f9:a7:28:d7:10:e4:f1:06:59:ca:f6:e3:
62:dd:a7:f5:c4:f9:32:99:51:94:b6:c2:27:95:61:0b:70:9c:
bc:03:98:a0:3d:9d:b7:29:82:59:2c:bd:f6:f7:c9:c5:cb:e1:
fc:de:99:a4:f0:ce:ed:9d:7e:8e:70:99:1d:9b:52:04:b6:cf:
58:55:1c:39:2f:42:dc:90:0e:d4:ba:e1:cd:d9:d2:91:50:ff:
0f:b7:93:64:d7:83:f0:eb:a1:b0:6c:a9:18:13:78:a1:ae:c5:
63:2a:26:a5:3b:09:f4:ba:4c:0c:4f:da:ab:f4:0c:2a:66:d2:
90:97:9e:49:e1:5a:49:88:16:d3:51:46:40:e2:ec:8b:09:d1:
5b:ee:58:3c:99:94:02:0d:f8:d4:6a:4d:5c:cf:09:71:3c:a3:
28:c9:68:b3:13:2e:54:63:a9:be:3f:d6:9e:16:87:fe:c2:a2:
ae:e0:d4:79:40:15:59:ee:78:2e:01:43:f3:5d:a2:cd:a4:1c:
ae:48:24:be:bb:89:fd:0e:a0:08:4c:91:5e:5b:79:7f:90:80:
d8:4b:51:8d:23:3f:e0:91:9b:59:d4:1b:4c:b4:dd:c6:65:3b:
71:4b:43:33:6d:a5:9e:b7:07:d6:ab:4a:f1:7e:d6:68:44:5f:
f4:e2:e8:80
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUaUIk54eQ7bb7ziqvM6oPWzSRaVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzA5MDExMDQ5NDVaFw0yNDA4MzAxMDU0NDVaMDMxMTAvBgNV
BAMTKDhCQjJGQUFGNTIyREZDRUFENEU2MkM1QjFEODdCNUE3OUJBRjQ5RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu/GztoKYagd2D08hMI3fHsgIP
Y3QFw8MzHQjlLOerJi9JtNodafuJYTQgMVMqyGbG4gC2Hih/CGTalh1FlBbIR0ws
X5w3Vuwdi2y3k2VQwYcnOsrleDPSpWEZMmsm0Y36asgDYF/QdhjxTMhShmQ+8rDP
uaRimAtQqiCpHVIOCKkq3zjT+9YCnIyBjfRs3fMjupdGmbIdiGC0vJXFH8je4m4M
XSPYceakm+tp6ynXObo/ZoxWVHouAr0hGiIHchMx4QxyzqTDD3r8C8Wh/l2xEvuy
IiX7CLdjFFaql2eyqoHHhhZ9XsasYTtP0AZ5SqsB4CnT4LJz60rKFahhP/47AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUi7L6r1It/OrU5ixbHYe1p5uvSe4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTMzMmUzMjMwMzMyZTMx
MzczNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAHBy64wDQYJKoZIhvcNAQELBQADggEBAHlAH44PpfmnKNcQ5PEGWcr242Ldp/XE
+TKZUZS2wieVYQtwnLwDmKA9nbcpglksvfb3ycXL4fzemaTwzu2dfo5wmR2bUgS2
z1hVHDkvQtyQDtS64c3Z0pFQ/w+3k2TXg/DrobBsqRgTeKGuxWMqJqU7CfS6TAxP
2qv0DCpm0pCXnknhWkmIFtNRRkDi7IsJ0VvuWDyZlAIN+NRqTVzPCXE8oyjJaLMT
LlRjqb4/1p4Wh/7Coq7g1HlAFVnueC4BQ/Ndos2kHK5IJL67if0OoAhMkV5beX+Q
gNhLUY0jP+CRm1nUG0y03cZlO3FLQzNtpZ63B9arSvF+1mhEX/Ti6IA=
-----END CERTIFICATE-----
Generated at Tue May 21 09:23:50 2024 by rpki-client on console-ams.rpki-client.org