Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3231302e35382e302f32342d3234203d3e20313336373837.roa
File: 3139352e3231302e35382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: CsueBdehz9oiWnTmPOBkZ5t7/JmnNEaw9do6e1Vrh4U=
Subject key identifier: 54:47:02:55:94:3E:A8:29:EB:95:F7:8B:1D:40:01:6C:6A:64:15:54
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6BD9EDFC483FADD8DADFE8E2453ED67315ED68B7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3231302e35382e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 02 Mar 2024 21:54:22 +0000
ROA not before: Sat 02 Mar 2024 21:49:22 +0000
ROA not after: Sat 01 Mar 2025 21:54:22 +0000
asID: 136787
IP address blocks: 195.210.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:d9:ed:fc:48:3f:ad:d8:da:df:e8:e2:45:3e:d6:73:15:ed:68:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 2 21:49:22 2024 GMT
Not After : Mar 1 21:54:22 2025 GMT
Subject: CN=54470255943EA829EB95F78B1D40016C6A641554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3c:66:86:52:b2:d0:e0:c7:b4:d5:30:0c:a2:
76:a1:61:c7:38:40:d3:59:4e:5f:da:cd:af:4e:3a:
e4:7b:38:aa:fb:fd:ea:72:9b:2b:b3:77:65:dc:f8:
f1:3a:e8:c0:d5:15:94:a2:20:5b:b2:72:9e:05:18:
71:3b:aa:ab:26:46:6f:95:04:52:58:85:9b:e9:f5:
a5:40:88:20:52:17:d0:7a:df:6c:f2:68:86:97:20:
5c:d8:9a:b7:f2:39:14:f3:e1:be:c2:89:11:82:ba:
cf:af:42:28:ea:5d:59:93:ce:37:8b:1f:1b:91:bc:
5b:f4:d5:0c:2e:6f:ae:6d:f3:80:f0:3e:92:89:4b:
ba:38:2c:31:22:be:83:c1:3d:2c:8f:4e:26:4a:76:
4d:2b:d1:08:f6:3c:49:1f:ff:6b:4e:02:3a:93:f3:
5d:7b:27:ac:38:7e:0d:63:b8:d0:cd:e0:62:6e:9e:
7c:e7:f0:66:9e:eb:cb:57:a3:c5:8b:0d:41:ac:fd:
60:a2:ba:d8:44:b9:a9:0b:c6:fc:bb:52:cf:67:8d:
bd:52:48:1a:8f:82:b5:c1:3c:1a:19:c0:52:77:3b:
86:2a:30:6f:12:e1:93:a0:91:28:78:6d:a8:04:c6:
ed:81:fc:89:43:89:21:fc:54:ee:b6:48:71:27:a7:
08:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:47:02:55:94:3E:A8:29:EB:95:F7:8B:1D:40:01:6C:6A:64:15:54
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3231302e35382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.58.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:dd:10:fa:01:41:e2:e2:ca:ac:82:86:ed:13:1b:30:46:dc:
3d:4b:f7:b5:f5:b3:25:76:4c:7e:ad:8d:2a:c7:d0:11:58:4f:
25:64:9a:03:52:ef:b6:a7:a5:de:9e:20:a4:61:2c:4c:25:05:
a1:3d:95:1d:e8:b1:c7:93:b5:e3:71:04:54:a4:fd:41:a6:4c:
2b:ef:72:99:31:00:b1:98:5f:a0:bb:f1:37:98:fb:69:3c:77:
44:ed:74:88:93:77:4f:ff:b8:c4:93:93:21:93:db:e9:93:35:
cc:f1:a9:ca:ff:aa:e9:fd:a1:3a:21:86:69:69:d4:af:e2:32:
41:1e:15:8c:69:e7:7e:7c:11:80:6e:de:55:60:12:e2:40:e4:
16:60:fd:f2:8b:81:66:a8:ad:25:03:bf:b9:82:29:14:52:dd:
80:ad:42:0d:e6:a1:a7:c5:16:40:1a:24:f4:9a:e9:ad:31:f9:
bc:62:d0:d7:02:1d:34:4a:e1:00:69:b7:29:5b:8b:9f:01:4b:
e1:0a:1f:ae:71:b5:42:b9:38:8a:1b:c3:d9:29:9a:32:7c:da:
5e:b3:55:74:ac:de:73:cd:03:25:ff:04:be:8b:fc:5f:9d:3a:
26:b5:51:25:29:9a:ff:c9:02:b6:57:3f:52:c3:af:6b:96:94:
c5:c9:2a:f6
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUa9nt/Eg/rdja3+jiRT7WcxXtaLcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAzMDIyMTQ5MjJaFw0yNTAzMDEyMTU0MjJaMDMxMTAvBgNV
BAMTKDU0NDcwMjU1OTQzRUE4MjlFQjk1Rjc4QjFENDAwMTZDNkE2NDE1NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWPGaGUrLQ4Me01TAMonahYcc4
QNNZTl/aza9OOuR7OKr7/epymyuzd2Xc+PE66MDVFZSiIFuycp4FGHE7qqsmRm+V
BFJYhZvp9aVAiCBSF9B632zyaIaXIFzYmrfyORTz4b7CiRGCus+vQijqXVmTzjeL
HxuRvFv01Qwub65t84DwPpKJS7o4LDEivoPBPSyPTiZKdk0r0Qj2PEkf/2tOAjqT
8117J6w4fg1juNDN4GJunnzn8Gae68tXo8WLDUGs/WCiuthEuakLxvy7Us9njb1S
SBqPgrXBPBoZwFJ3O4YqMG8S4ZOgkSh4bagExu2B/IlDiSH8VO62SHEnpwgfAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUVEcCVZQ+qCnrlfeLHUABbGpkFVQwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM1MmUzMjMxMzAyZTM1
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADD0jowDQYJKoZIhvcNAQELBQADggEBAKHdEPoBQeLiyqyChu0TGzBG3D1L97X1
syV2TH6tjSrH0BFYTyVkmgNS77anpd6eIKRhLEwlBaE9lR3osceTteNxBFSk/UGm
TCvvcpkxALGYX6C78TeY+2k8d0TtdIiTd0//uMSTkyGT2+mTNczxqcr/qun9oToh
hmlp1K/iMkEeFYxp5358EYBu3lVgEuJA5BZg/fKLgWaorSUDv7mCKRRS3YCtQg3m
oafFFkAaJPSa6a0x+bxi0NcCHTRK4QBptylbi58BS+EKH65xtUK5OIobw9kpmjJ8
2l6zVXSs3nPNAyX/BL6L/F+dOia1USUpmv/JArZXP1LDr2uWlMXJKvY=
-----END CERTIFICATE-----
Generated at Wed May 8 20:21:25 2024 by rpki-client on console-fra.rpki-client.org