Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e33322e3233352e302f32342d3332203d3e20313336373837.roa
File: 3139342e33322e3233352e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: vD4/shBePhyNhehw82PqdSKKvGTvae9NKQ4OIvG/FdU=
Subject key identifier: 5E:FF:58:B4:C1:12:70:F0:35:B3:B0:DA:F2:0B:4F:0A:99:0F:02:E7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 70899647F9A393C8CE132D20E75205B5CEF25F8E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e33322e3233352e302f32342d3332203d3e20313336373837.roa
Signing time: Fri 20 Sep 2024 14:04:58 +0000
ROA not before: Fri 20 Sep 2024 13:59:58 +0000
ROA not after: Fri 19 Sep 2025 14:04:58 +0000
asID: 136787
IP address blocks: 194.32.235.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:89:96:47:f9:a3:93:c8:ce:13:2d:20:e7:52:05:b5:ce:f2:5f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:58 2024 GMT
Not After : Sep 19 14:04:58 2025 GMT
Subject: CN=5EFF58B4C11270F035B3B0DAF20B4F0A990F02E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6a:26:b8:02:80:92:c0:dc:14:1e:d6:e0:2a:
a6:c5:a2:31:0b:a5:3b:e0:6f:db:62:13:01:d2:88:
42:e3:c9:d8:d6:7d:31:4d:24:a3:3a:09:d5:5f:70:
1f:79:d0:fc:53:a0:3b:82:dd:0c:f6:a3:cb:11:63:
93:79:4a:57:94:ed:03:8d:b4:d3:3e:48:e8:b8:8c:
3e:43:18:32:e4:39:3e:ae:8b:59:00:ef:6a:66:15:
b2:fe:c8:25:1b:92:dd:21:99:a1:99:04:50:82:33:
a8:2a:85:21:09:bb:84:42:8a:0f:78:9f:fd:98:32:
bb:5c:f8:1d:9b:06:8d:f0:9f:f2:8a:ec:0b:6f:21:
0e:21:26:8e:52:4b:fe:12:44:cc:52:03:e5:20:2c:
1c:cc:fa:ca:c5:b4:a2:fc:6c:9d:29:f1:4f:83:70:
28:e2:9a:85:be:17:10:06:50:67:57:df:a7:bb:57:
62:03:ad:cc:ae:c2:cb:0f:c0:78:69:f0:93:16:c6:
05:a7:10:39:e0:71:3a:b0:4e:b9:a3:a6:85:85:76:
cb:50:4a:96:6a:49:93:32:93:ce:9f:26:35:0b:32:
0e:c2:ce:d5:48:ab:bf:57:12:30:9f:c4:79:28:df:
95:f2:8f:24:dd:4a:d8:d5:d4:c9:72:07:57:47:74:
09:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FF:58:B4:C1:12:70:F0:35:B3:B0:DA:F2:0B:4F:0A:99:0F:02:E7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e33322e3233352e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.235.0/24
Signature Algorithm: sha256WithRSAEncryption
09:f2:99:cd:be:7e:cd:65:d9:1f:b8:47:02:d0:44:99:ea:ac:
6f:1a:1b:9b:81:2a:2b:29:68:7d:78:81:af:7e:b3:a6:35:47:
dc:98:e6:82:09:fc:de:ff:ad:fa:6e:10:82:07:ca:22:4c:57:
e0:a6:c0:7b:2b:b5:90:d0:ed:3b:3a:2e:40:c9:f4:e3:99:34:
0b:1a:41:11:04:f2:38:54:a9:50:04:74:60:b1:ef:b7:98:b7:
58:8c:db:78:36:e7:db:cf:5c:89:f1:0a:df:7d:f3:95:60:bb:
08:a8:d8:70:f7:51:09:23:53:ce:c0:a3:a9:3b:2f:c7:d2:ac:
b2:19:b0:12:b2:0d:d8:8a:f5:d7:ce:06:6c:66:fd:9c:a9:f5:
43:fc:8c:c9:96:ad:d8:2c:c6:6a:74:9e:3f:dc:5c:d6:a7:2e:
11:b3:d6:d4:2f:be:5e:55:54:a1:1c:ae:72:da:9d:54:6f:b9:
9d:77:0d:00:c4:66:62:45:eb:7a:6d:06:ff:6b:a7:bf:f6:e2:
c3:42:80:46:f5:17:d3:b8:a1:9b:5c:02:80:e6:2e:83:66:38:
a3:97:7c:96:c6:51:c5:13:1b:f2:78:97:2a:43:cb:e2:31:60:
c8:3c:89:d2:40:d2:92:23:8d:d2:ee:c9:0b:51:98:1e:d8:65:
b0:6c:8e:55
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUcImWR/mjk8jOEy0g51IFtc7yX44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDA5MjAxMzU5NThaFw0yNTA5MTkxNDA0NThaMDMxMTAvBgNV
BAMTKDVFRkY1OEI0QzExMjcwRjAzNUIzQjBEQUYyMEI0RjBBOTkwRjAyRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClaia4AoCSwNwUHtbgKqbFojEL
pTvgb9tiEwHSiELjydjWfTFNJKM6CdVfcB950PxToDuC3Qz2o8sRY5N5SleU7QON
tNM+SOi4jD5DGDLkOT6ui1kA72pmFbL+yCUbkt0hmaGZBFCCM6gqhSEJu4RCig94
n/2YMrtc+B2bBo3wn/KK7AtvIQ4hJo5SS/4SRMxSA+UgLBzM+srFtKL8bJ0p8U+D
cCjimoW+FxAGUGdX36e7V2IDrcyuwssPwHhp8JMWxgWnEDngcTqwTrmjpoWFdstQ
SpZqSZMyk86fJjULMg7CztVIq79XEjCfxHko35XyjyTdStjV1MlyB1dHdAm5AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUXv9YtMEScPA1s7Da8gtPCpkPAucwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM0MmUzMzMyMmUzMjMz
MzUyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADCIOswDQYJKoZIhvcNAQELBQADggEBAAnymc2+fs1l2R+4RwLQRJnqrG8aG5uB
KispaH14ga9+s6Y1R9yY5oIJ/N7/rfpuEIIHyiJMV+CmwHsrtZDQ7Ts6LkDJ9OOZ
NAsaQREE8jhUqVAEdGCx77eYt1iM23g259vPXInxCt9985Vguwio2HD3UQkjU87A
o6k7L8fSrLIZsBKyDdiK9dfOBmxm/Zyp9UP8jMmWrdgsxmp0nj/cXNanLhGz1tQv
vl5VVKEcrnLanVRvuZ13DQDEZmJF63ptBv9rp7/24sNCgEb1F9O4oZtcAoDmLoNm
OKOXfJbGUcUTG/J4lypDy+IxYMg8idJA0pIjjdLuyQtRmB7YZbBsjlU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:03 2024 by rpki-client on console-fra.rpki-client.org