Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3134302e3139362e302f32322d3332203d3e203531313637.roa
File: 3139342e3134302e3139362e302f32322d3332203d3e203531313637.roa (raw, json)
Hash identifier: yoTEOQcQWvGEMNjG8UZGQNZIb7pxdkvzEespp88BKy8=
Subject key identifier: BF:DD:A6:47:42:0F:4B:28:F8:9E:8F:AA:58:92:B3:2E:3B:32:92:BD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4D6F6B9DDAA4A71667EC1DA50CDFC3F4B33CAB65
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3134302e3139362e302f32322d3332203d3e203531313637.roa
Signing time: Fri 21 Jul 2023 07:20:20 +0000
ROA not before: Fri 21 Jul 2023 07:15:20 +0000
ROA not after: Fri 19 Jul 2024 07:20:20 +0000
asID: 51167
IP address blocks: 194.140.196.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:6f:6b:9d:da:a4:a7:16:67:ec:1d:a5:0c:df:c3:f4:b3:3c:ab:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 21 07:15:20 2023 GMT
Not After : Jul 19 07:20:20 2024 GMT
Subject: CN=BFDDA647420F4B28F89E8FAA5892B32E3B3292BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:33:06:8e:cb:a6:73:cf:4f:d9:7c:81:ba:
67:33:59:66:da:4f:01:0c:3e:cf:3a:5d:f8:b0:41:
27:3d:0a:dd:3a:4a:e1:17:fb:32:a3:4b:69:6d:5e:
7a:81:a8:2e:7c:aa:a6:62:4d:e2:a0:7d:ba:43:72:
ec:cc:b0:a4:ae:32:2c:1a:05:f2:2d:19:5c:38:14:
b8:35:85:0e:2f:d3:c9:f3:85:21:01:b5:f1:87:dd:
b3:17:ae:c5:8f:76:82:41:10:0a:dc:c3:5b:e9:3a:
46:e0:30:9f:fb:e5:7e:a6:d2:2f:43:2f:19:3d:bb:
ca:52:f4:b4:2f:bf:2e:44:08:ca:27:7e:73:4b:1a:
49:36:28:33:cd:b1:06:22:7c:34:fd:1d:e4:f0:94:
c6:47:e4:c5:5c:b5:2d:ee:cd:9b:46:47:6c:14:d2:
af:2f:71:f0:6c:8c:f6:d8:4d:7e:14:6c:d5:5a:1d:
e5:87:71:7f:21:c8:1a:ec:42:25:ff:46:1e:f4:ef:
60:13:66:98:e0:b4:1f:84:41:a6:ca:47:b4:f6:b5:
ef:7f:bc:53:1b:4c:36:48:f9:31:06:64:a6:49:5b:
fc:8a:0a:fd:ab:6b:a3:37:56:cb:87:13:82:82:11:
50:aa:bb:5b:4f:b5:30:12:00:b3:e7:00:2d:0b:ec:
c5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DD:A6:47:42:0F:4B:28:F8:9E:8F:AA:58:92:B3:2E:3B:32:92:BD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3134302e3139362e302f32322d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.140.196.0/22
Signature Algorithm: sha256WithRSAEncryption
84:f8:68:91:90:84:bc:f8:d2:cb:27:a4:73:02:6d:3f:4d:7c:
59:a5:b2:9f:e5:f3:f4:50:c5:2e:21:77:87:b0:4b:4d:6b:0e:
40:e2:f0:d4:1d:50:8a:b3:f7:81:94:10:be:db:52:e0:bf:fb:
72:f5:b1:19:ee:2b:c6:d8:26:46:02:0b:ed:64:b9:10:f7:3f:
62:77:c1:54:95:fa:8f:60:3c:4f:8d:ff:97:5c:c7:3b:22:3f:
25:73:2b:e4:88:87:51:96:55:b7:fd:1b:03:3a:17:10:29:21:
6e:7d:87:21:ec:2b:b4:37:05:f1:48:be:15:38:e2:66:0f:51:
ed:5c:3e:32:e5:3a:eb:93:d5:92:2c:2f:90:da:49:98:88:0f:
99:a4:28:39:4f:39:25:a1:a3:21:49:c6:b5:a7:cb:82:8e:4d:
b9:aa:33:3e:c1:e8:ae:42:f4:ae:f2:75:f9:57:30:0d:ba:28:
62:f8:ad:35:07:91:c7:d9:0d:a3:e9:6d:fe:49:4c:32:bd:89:
80:b0:9c:38:8a:02:46:b3:2f:a4:bd:19:30:e1:75:15:77:36:
4f:d4:fd:a7:02:43:e4:be:07:c9:b3:75:a7:22:28:9e:28:64:
cb:3b:7d:19:e9:85:66:8a:92:0b:8c:15:96:75:4d:23:fe:de:
89:0f:c4:52
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUTW9rndqkpxZn7B2lDN/D9LM8q2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzA3MjEwNzE1MjBaFw0yNDA3MTkwNzIwMjBaMDMxMTAvBgNV
BAMTKEJGRERBNjQ3NDIwRjRCMjhGODlFOEZBQTU4OTJCMzJFM0IzMjkyQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCthDMGjsumc89P2XyBumczWWba
TwEMPs86XfiwQSc9Ct06SuEX+zKjS2ltXnqBqC58qqZiTeKgfbpDcuzMsKSuMiwa
BfItGVw4FLg1hQ4v08nzhSEBtfGH3bMXrsWPdoJBEArcw1vpOkbgMJ/75X6m0i9D
Lxk9u8pS9LQvvy5ECMonfnNLGkk2KDPNsQYifDT9HeTwlMZH5MVctS3uzZtGR2wU
0q8vcfBsjPbYTX4UbNVaHeWHcX8hyBrsQiX/Rh7072ATZpjgtB+EQabKR7T2te9/
vFMbTDZI+TEGZKZJW/yKCv2ra6M3VsuHE4KCEVCqu1tPtTASALPnAC0L7MXpAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUv92mR0IPSyj4no+qWJKzLjsykr0wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM0MmUzMTM0MzAyZTMx
MzkzNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BALCjMQwDQYJKoZIhvcNAQELBQADggEBAIT4aJGQhLz40ssnpHMCbT9NfFmlsp/l
8/RQxS4hd4ewS01rDkDi8NQdUIqz94GUEL7bUuC/+3L1sRnuK8bYJkYCC+1kuRD3
P2J3wVSV+o9gPE+N/5dcxzsiPyVzK+SIh1GWVbf9GwM6FxApIW59hyHsK7Q3BfFI
vhU44mYPUe1cPjLlOuuT1ZIsL5DaSZiID5mkKDlPOSWhoyFJxrWny4KOTbmqMz7B
6K5C9K7ydflXMA26KGL4rTUHkcfZDaPpbf5JTDK9iYCwnDiKAkazL6S9GTDhdRV3
Nk/U/acCQ+S+B8mzdaciKJ4oZMs7fRnphWaKkguMFZZ1TSP+3okPxFI=
-----END CERTIFICATE-----
Generated at Tue May 21 23:31:24 2024 by rpki-client on console-ams.rpki-client.org