Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34362e3232312e302f32342d3234203d3e20323035363539.roa
File: 3139332e34362e3232312e302f32342d3234203d3e20323035363539.roa (raw, json)
Hash identifier: T9pei1sq4NGEJgmdx9kIO44m0ojiDrXwuYBGQ31uXOc=
Subject key identifier: 4E:80:FC:B0:51:2C:A0:F4:6A:EA:FF:B9:9A:00:49:12:C4:90:B6:BF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3DF5B3C2C62D153C23431D7D9E7ABD883A684478
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34362e3232312e302f32342d3234203d3e20323035363539.roa
Signing time: Fri 20 Sep 2024 14:04:53 +0000
ROA not before: Fri 20 Sep 2024 13:59:53 +0000
ROA not after: Fri 19 Sep 2025 14:04:53 +0000
asID: 205659
IP address blocks: 193.46.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f5:b3:c2:c6:2d:15:3c:23:43:1d:7d:9e:7a:bd:88:3a:68:44:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:53 2024 GMT
Not After : Sep 19 14:04:53 2025 GMT
Subject: CN=4E80FCB0512CA0F46AEAFFB99A004912C490B6BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:d3:93:41:ea:68:2f:2c:65:95:b5:4a:12:
03:47:33:62:65:cb:d6:4e:e5:a6:15:f0:38:be:c0:
62:38:bf:4d:72:6e:e6:ec:21:a5:59:2f:15:44:30:
2c:2c:4a:fc:76:5b:2d:3c:fb:0f:4f:f8:49:6f:fb:
2b:76:1c:fc:2c:b4:fc:0a:46:78:36:2a:40:af:bb:
39:4c:dd:a1:27:32:98:3d:3a:97:4a:e0:8c:60:6f:
f9:69:a8:f3:d3:fc:53:00:30:b5:23:ab:54:9f:76:
e2:ff:34:f8:84:33:40:6d:e4:03:ce:e9:9e:e1:a4:
c2:3a:70:6c:7a:4f:a3:da:c7:c5:ed:e5:9b:51:07:
5f:5f:5b:f7:8e:33:62:31:19:ab:93:b2:3e:79:22:
3a:73:57:4a:4f:bd:b3:8a:3c:91:02:c4:f8:ba:d4:
e5:32:ef:d2:53:2d:27:30:c6:14:db:89:23:98:70:
fa:e7:a0:d0:57:80:99:33:14:13:13:6e:46:ce:d9:
d4:f6:c3:60:36:82:d1:5d:7b:fb:8d:07:d3:5e:9a:
32:61:a7:fb:eb:8c:6a:16:5a:dc:68:3f:e5:ac:ac:
56:0c:61:1a:4d:70:ff:3f:98:20:04:9d:45:d1:61:
b4:5f:33:dc:05:3d:35:c2:f4:e9:c7:2c:7d:be:93:
77:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:80:FC:B0:51:2C:A0:F4:6A:EA:FF:B9:9A:00:49:12:C4:90:B6:BF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34362e3232312e302f32342d3234203d3e20323035363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.221.0/24
Signature Algorithm: sha256WithRSAEncryption
97:93:d0:c0:7a:52:bd:9b:46:9a:7b:14:77:95:4c:c6:fb:e0:
83:98:2f:08:75:d6:09:39:1a:09:62:75:0c:2f:d4:5d:5e:d1:
de:27:1e:a5:38:20:40:bb:be:f4:a8:4c:68:ee:33:5e:a2:0e:
d0:5e:f7:22:76:62:6b:e6:f7:7f:5c:f1:0b:1d:3d:ca:a6:21:
93:e0:d6:45:ff:5b:58:38:66:34:55:ae:2c:76:6b:33:d8:c2:
18:4b:bd:fe:1e:ac:4d:06:d2:1c:65:12:30:a8:ba:2a:c7:b9:
59:2a:c6:10:91:12:7c:37:e8:c0:ad:bc:3c:74:46:a0:0e:f4:
ea:8f:bb:5d:3e:2c:f7:88:7e:da:bc:da:79:1d:91:be:7e:5e:
4f:87:44:ed:11:e4:f2:72:ee:8b:b9:c8:d7:7f:4c:e4:73:0d:
91:2d:54:e2:4f:9d:6c:b5:90:c7:9b:85:de:42:f6:a8:a6:68:
d6:b5:80:06:4a:1a:52:a4:26:64:12:b5:3e:0b:b4:5d:62:9b:
a0:ec:9a:3d:44:49:a1:1f:55:a8:c1:4f:20:ac:bc:a4:8e:92:
89:73:d0:ef:b3:c5:4f:22:1f:2f:a6:b4:91:5e:55:11:fe:72:
d7:ba:e5:de:50:24:28:65:17:0e:bf:69:8b:fd:e9:cd:05:54:
d3:6e:4a:d9
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUPfWzwsYtFTwjQx19nnq9iDpoRHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDA5MjAxMzU5NTNaFw0yNTA5MTkxNDA0NTNaMDMxMTAvBgNV
BAMTKDRFODBGQ0IwNTEyQ0EwRjQ2QUVBRkZCOTlBMDA0OTEyQzQ5MEI2QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6etOTQepoLyxllbVKEgNHM2Jl
y9ZO5aYV8Di+wGI4v01ybubsIaVZLxVEMCwsSvx2Wy08+w9P+Elv+yt2HPwstPwK
Rng2KkCvuzlM3aEnMpg9OpdK4Ixgb/lpqPPT/FMAMLUjq1SfduL/NPiEM0Bt5APO
6Z7hpMI6cGx6T6Pax8Xt5ZtRB19fW/eOM2IxGauTsj55IjpzV0pPvbOKPJECxPi6
1OUy79JTLScwxhTbiSOYcPrnoNBXgJkzFBMTbkbO2dT2w2A2gtFde/uNB9NemjJh
p/vrjGoWWtxoP+WsrFYMYRpNcP8/mCAEnUXRYbRfM9wFPTXC9OnHLH2+k3dRAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUToD8sFEsoPRq6v+5mgBJEsSQtr8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTMzMmUzNDM2MmUzMjMy
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzUzNjM1Mzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADBLt0wDQYJKoZIhvcNAQELBQADggEBAJeT0MB6Ur2bRpp7FHeVTMb74IOYLwh1
1gk5GglidQwv1F1e0d4nHqU4IEC7vvSoTGjuM16iDtBe9yJ2Ymvm939c8QsdPcqm
IZPg1kX/W1g4ZjRVrix2azPYwhhLvf4erE0G0hxlEjCouirHuVkqxhCREnw36MCt
vDx0RqAO9OqPu10+LPeIftq82nkdkb5+Xk+HRO0R5PJy7ou5yNd/TORzDZEtVOJP
nWy1kMebhd5C9qimaNa1gAZKGlKkJmQStT4LtF1im6Dsmj1ESaEfVajBTyCsvKSO
kolz0O+zxU8iHy+mtJFeVRH+cte65d5QJChlFw6/aYv96c0FVNNuStk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:48 2024 by rpki-client on console-ams.rpki-client.org