Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3138342e302f32322d3234203d3e203437353833.roa
File: 3139332e3230332e3138342e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: CFP8wKKljg8YVIT3z0aDyj/450QdEAZhFDyEdXWLLRE=
Subject key identifier: 27:61:3B:3C:14:B5:2A:FB:D9:D8:FD:C4:29:10:9A:ED:39:2C:D5:A7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 227DCF087CC41CF5743B5B85D979C97FC29AA398
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3138342e302f32322d3234203d3e203437353833.roa
Signing time: Fri 16 Aug 2024 08:04:39 +0000
ROA not before: Fri 16 Aug 2024 07:59:39 +0000
ROA not after: Fri 15 Aug 2025 08:04:39 +0000
asID: 47583
IP address blocks: 193.203.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:7d:cf:08:7c:c4:1c:f5:74:3b:5b:85:d9:79:c9:7f:c2:9a:a3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 16 07:59:39 2024 GMT
Not After : Aug 15 08:04:39 2025 GMT
Subject: CN=27613B3C14B52AFBD9D8FDC429109AED392CD5A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f4:03:71:dc:89:0c:c0:aa:80:a4:88:fb:04:
b9:5b:a9:40:dd:8b:ae:72:c0:0b:5b:30:0b:31:d9:
5c:73:33:c0:ea:c5:5e:27:5e:73:35:f7:fa:9f:2b:
32:c2:fd:3b:a3:02:2e:6c:f2:6e:10:1f:99:7a:80:
68:5a:92:e0:ee:1f:5e:5a:2d:0f:53:a8:3c:02:53:
a6:c5:9b:c8:69:a2:05:5d:67:66:71:88:ea:d5:1d:
fc:f8:f8:d4:98:ab:4d:56:67:28:b0:46:0f:91:e9:
ad:35:87:f1:c2:b0:8c:92:7a:50:f4:e9:2d:fa:79:
ee:96:4d:67:1d:03:a8:dd:56:46:9a:10:c4:13:44:
b1:f9:21:f5:fd:53:9b:0f:01:8d:92:54:53:2c:f1:
10:1f:5e:af:8b:3a:eb:ba:a2:17:69:8c:16:38:25:
8f:23:ad:32:c5:21:be:47:17:64:5b:3d:ed:1a:7e:
c9:32:28:ef:5e:a4:79:a4:36:ec:12:cb:5c:4f:9d:
a2:80:e7:93:89:dc:46:3a:d9:34:0d:e1:88:11:9f:
28:df:8c:75:d4:49:c3:2c:3d:3f:e1:e9:3a:73:f0:
3f:de:52:b2:67:9b:11:47:2f:bd:54:2f:d9:b5:d6:
64:f3:10:a3:10:dc:7b:ee:01:73:63:8c:69:d9:b4:
0f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:61:3B:3C:14:B5:2A:FB:D9:D8:FD:C4:29:10:9A:ED:39:2C:D5:A7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3138342e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.184.0/22
Signature Algorithm: sha256WithRSAEncryption
69:fe:a2:ee:33:18:08:3c:0d:7c:01:a7:cb:0d:28:7c:76:76:
70:75:bd:63:47:66:e8:63:eb:3e:13:4c:46:77:02:e0:99:8b:
80:66:81:33:58:81:25:ff:71:03:3f:0a:6b:17:5f:f7:be:20:
08:9f:de:e1:45:d1:74:04:6d:f1:f8:b3:b1:18:66:a0:db:4a:
67:44:06:70:01:84:99:e5:50:15:5d:0a:c3:a0:cc:01:6a:3d:
f0:b1:58:7f:31:4b:89:1f:2d:d2:d7:f0:2f:bc:40:9f:a3:3b:
41:9f:b0:e1:60:61:6e:af:0a:f3:15:b5:f2:04:65:ed:77:f5:
cc:2c:b7:f4:69:19:44:8a:f0:3b:91:dd:48:2e:96:b3:06:a4:
65:b9:84:ef:28:d1:1f:7b:f9:4d:40:cf:d9:3d:3b:43:0d:78:
fd:76:63:5a:d7:de:3a:dc:eb:69:90:90:7a:85:0a:db:ef:34:
29:94:90:4f:e3:c4:06:79:7e:f3:50:20:12:2e:fe:44:c1:b4:
98:78:e7:5f:b7:57:98:94:eb:d8:e1:ef:00:41:30:d8:b4:e8:
9c:53:e4:ed:85:32:21:bd:35:18:af:e3:dc:d6:7e:3d:f7:ff:
19:8e:eb:4a:1a:25:bb:7b:98:61:79:76:ef:0b:a9:78:9d:c7:
73:31:52:d9
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUIn3PCHzEHPV0O1uF2XnJf8Kao5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDA4MTYwNzU5MzlaFw0yNTA4MTUwODA0MzlaMDMxMTAvBgNV
BAMTKDI3NjEzQjNDMTRCNTJBRkJEOUQ4RkRDNDI5MTA5QUVEMzkyQ0Q1QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ9ANx3IkMwKqApIj7BLlbqUDd
i65ywAtbMAsx2VxzM8DqxV4nXnM19/qfKzLC/TujAi5s8m4QH5l6gGhakuDuH15a
LQ9TqDwCU6bFm8hpogVdZ2ZxiOrVHfz4+NSYq01WZyiwRg+R6a01h/HCsIySelD0
6S36ee6WTWcdA6jdVkaaEMQTRLH5IfX9U5sPAY2SVFMs8RAfXq+LOuu6ohdpjBY4
JY8jrTLFIb5HF2RbPe0afskyKO9epHmkNuwSy1xPnaKA55OJ3EY62TQN4YgRnyjf
jHXUScMsPT/h6Tpz8D/eUrJnmxFHL71UL9m11mTzEKMQ3HvuAXNjjGnZtA//AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUJ2E7PBS1KvvZ2P3EKRCa7Tks1acwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTMzMmUzMjMwMzMyZTMx
MzgzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BALBy7gwDQYJKoZIhvcNAQELBQADggEBAGn+ou4zGAg8DXwBp8sNKHx2dnB1vWNH
Zuhj6z4TTEZ3AuCZi4BmgTNYgSX/cQM/CmsXX/e+IAif3uFF0XQEbfH4s7EYZqDb
SmdEBnABhJnlUBVdCsOgzAFqPfCxWH8xS4kfLdLX8C+8QJ+jO0GfsOFgYW6vCvMV
tfIEZe139cwst/RpGUSK8DuR3UgulrMGpGW5hO8o0R97+U1Az9k9O0MNeP12Y1rX
3jrc62mQkHqFCtvvNCmUkE/jxAZ5fvNQIBIu/kTBtJh451+3V5iU69jh7wBBMNi0
6JxT5O2FMiG9NRiv49zWfj33/xmO60oaJbt7mGF5du8LqXidx3MxUtk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:03 2024 by rpki-client on console-fra.rpki-client.org