Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39352e302f32342d3234203d3e203130373337.roa
File: 3139342e3139352e39352e302f32342d3234203d3e203130373337.roa (raw, json)
Hash identifier: WZj17rgC1bR4jge328Eh38y19MoHckre6LeOkzY8HsI=
Subject key identifier: 1E:20:0D:46:30:8D:80:EE:38:01:92:7E:E6:EA:0E:26:9F:2F:9A:07
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1031CA094924BB9627FE03871953305D76DC8613
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39352e302f32342d3234203d3e203130373337.roa
Signing time: Thu 21 Mar 2024 08:27:18 +0000
ROA not before: Thu 21 Mar 2024 08:22:18 +0000
ROA not after: Thu 20 Mar 2025 08:27:18 +0000
asID: 10737
IP address blocks: 194.195.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:31:ca:09:49:24:bb:96:27:fe:03:87:19:53:30:5d:76:dc:86:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 21 08:22:18 2024 GMT
Not After : Mar 20 08:27:18 2025 GMT
Subject: CN=1E200D46308D80EE3801927EE6EA0E269F2F9A07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a9:89:ce:2d:e9:82:59:cf:f0:bd:fb:61:23:
20:fa:92:98:b5:b6:aa:c9:12:f7:7c:90:3b:81:6f:
b1:21:06:31:70:9a:a4:96:cb:f5:dd:65:9c:ee:ea:
15:69:51:71:fc:1f:da:48:49:ee:bc:90:e3:8c:c4:
8f:8f:5f:1b:52:a5:4f:f6:91:6e:43:45:f2:18:b8:
4c:c8:fd:37:0e:8f:ad:ec:43:41:c1:41:5d:40:44:
b3:01:da:85:d5:0f:e6:76:2c:86:73:55:9b:65:a8:
03:fc:aa:c9:dc:ae:3d:bb:ea:fb:15:c9:f2:6b:58:
49:d6:f1:c2:b9:43:4b:54:8a:92:0a:11:61:f4:6c:
09:08:b1:6d:61:26:8c:29:65:a5:1f:b2:b9:ff:b6:
7f:3f:18:86:2f:23:08:70:97:31:2b:07:33:8f:b7:
e6:9b:3f:72:2d:f8:5f:22:be:89:c0:e6:b6:05:ff:
39:ec:bf:b2:a2:4e:08:36:aa:ab:49:f8:ae:4c:93:
af:fb:c4:12:0a:77:fe:cc:1b:bc:a1:6a:4c:c1:7a:
76:a7:c8:5a:47:18:9f:8b:05:3a:17:8d:45:cf:83:
16:46:6f:2e:c4:76:1a:96:a2:d8:5f:7b:44:dc:61:
ff:62:cc:75:27:60:db:96:9b:6f:8f:0c:c6:d4:03:
ca:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:20:0D:46:30:8D:80:EE:38:01:92:7E:E6:EA:0E:26:9F:2F:9A:07
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39352e302f32342d3234203d3e203130373337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.95.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:22:5c:d5:ee:09:fd:50:f7:01:33:d9:ca:3b:e7:63:9d:c2:
c0:d1:61:64:42:0f:f8:0d:c7:3e:4c:a4:c7:b0:e3:17:80:7d:
22:d1:3d:15:91:ac:84:db:1d:d2:e1:3c:91:85:d7:e2:99:95:
ec:74:ef:d5:43:f6:5c:a2:5b:74:5d:41:4c:9a:64:a1:b3:c8:
87:df:8d:47:51:09:83:90:14:76:42:ba:34:1f:e7:be:7c:a0:
9e:75:99:6e:65:3f:f2:3b:6f:69:36:e9:07:40:3f:a9:24:6c:
de:66:fb:cc:06:5f:3c:60:ff:8f:40:57:19:87:2a:3f:d3:ec:
59:a3:1b:19:ad:81:3d:a7:13:c2:b1:85:6b:d6:0b:04:50:21:
a8:3d:23:93:a1:fc:26:ce:9a:5c:c7:31:b4:05:9d:bf:57:c5:
47:fc:90:ab:1f:be:e3:b5:a4:d3:b1:00:b6:a5:46:db:8f:a9:
c2:bc:ab:41:2a:6c:86:8b:16:7b:8d:b4:49:c8:19:13:95:22:
ac:a7:f8:d4:20:85:61:9f:04:24:6e:6c:d4:e3:3a:e0:0d:9a:
b4:ac:d0:73:73:e1:42:e9:7d:75:3b:61:aa:1a:5f:a2:8f:de:
ba:4d:92:9c:c1:8e:d7:21:24:95:70:c0:31:22:bb:92:22:fa:
eb:ba:cf:99
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUEDHKCUkku5Yn/gOHGVMwXXbchhMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAzMjEwODIyMThaFw0yNTAzMjAwODI3MThaMDMxMTAvBgNV
BAMTKDFFMjAwRDQ2MzA4RDgwRUUzODAxOTI3RUU2RUEwRTI2OUYyRjlBMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKqYnOLemCWc/wvfthIyD6kpi1
tqrJEvd8kDuBb7EhBjFwmqSWy/XdZZzu6hVpUXH8H9pISe68kOOMxI+PXxtSpU/2
kW5DRfIYuEzI/TcOj63sQ0HBQV1ARLMB2oXVD+Z2LIZzVZtlqAP8qsncrj276vsV
yfJrWEnW8cK5Q0tUipIKEWH0bAkIsW1hJowpZaUfsrn/tn8/GIYvIwhwlzErBzOP
t+abP3It+F8ivonA5rYF/znsv7KiTgg2qqtJ+K5Mk6/7xBIKd/7MG7yhakzBenan
yFpHGJ+LBToXjUXPgxZGby7EdhqWothfe0TcYf9izHUnYNuWm2+PDMbUA8qNAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUHiANRjCNgO44AZJ+5uoOJp8vmgcwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM0MmUzMTM5MzUyZTM5
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMwMzczMzM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
wsNfMA0GCSqGSIb3DQEBCwUAA4IBAQCNIlzV7gn9UPcBM9nKO+djncLA0WFkQg/4
Dcc+TKTHsOMXgH0i0T0VkayE2x3S4TyRhdfimZXsdO/VQ/Zcolt0XUFMmmShs8iH
341HUQmDkBR2Qro0H+e+fKCedZluZT/yO29pNukHQD+pJGzeZvvMBl88YP+PQFcZ
hyo/0+xZoxsZrYE9pxPCsYVr1gsEUCGoPSOTofwmzppcxzG0BZ2/V8VH/JCrH77j
taTTsQC2pUbbj6nCvKtBKmyGixZ7jbRJyBkTlSKsp/jUIIVhnwQkbmzU4zrgDZq0
rNBzc+FC6X11O2GqGl+ij966TZKcwY7XISSVcMAxIruSIvrrus+Z
-----END CERTIFICATE-----
Generated at Tue May 21 08:01:45 2024 by rpki-client on console-fra.rpki-client.org