Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35392e3135302e302f32342d3234203d3e203437353833.roa
File: 322e35392e3135302e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: hciH/hVQenEPhE+bFA7HVxpJz9Yfbid4oQv7yEZ4kj0=
Subject key identifier: E6:EC:83:BB:5C:0C:71:14:FE:95:95:46:3D:14:03:4D:C9:3B:6E:4E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7AB051CA906419957244F01172773C4C7B4B63CF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35392e3135302e302f32342d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:30 +0000
ROA not before: Mon 26 Feb 2024 08:48:30 +0000
ROA not after: Mon 24 Feb 2025 08:53:30 +0000
asID: 47583
IP address blocks: 2.59.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:b0:51:ca:90:64:19:95:72:44:f0:11:72:77:3c:4c:7b:4b:63:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:30 2024 GMT
Not After : Feb 24 08:53:30 2025 GMT
Subject: CN=E6EC83BB5C0C7114FE9595463D14034DC93B6E4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f9:ea:4b:ba:2d:c7:1d:6e:86:fa:6e:0d:ca:
73:50:d7:20:2e:66:89:b3:44:f9:86:fe:69:91:d1:
c8:1b:db:fe:62:b7:b9:c7:80:82:f6:62:e8:ea:ab:
91:4c:bd:dd:42:5d:4e:cc:b4:9f:cc:1e:24:2f:71:
eb:d6:d8:5b:95:f2:17:a7:23:04:f0:42:73:e1:aa:
91:8b:c2:17:2b:2f:09:f3:b5:35:34:bb:69:24:df:
a6:30:4d:36:fe:54:8f:11:d2:d0:9a:4a:a9:6e:19:
74:87:99:3f:6f:75:55:c5:87:cd:24:38:b6:fe:eb:
86:23:6c:9e:05:ab:90:1f:2b:78:95:28:47:05:ec:
7a:36:aa:58:35:9e:c7:7d:94:14:a8:88:ef:84:9e:
0b:67:3d:cf:c9:34:91:64:62:28:11:98:3e:b4:69:
9a:88:cb:71:7a:15:f8:17:98:02:6f:9a:c6:f2:a5:
af:bd:10:83:fc:ec:9c:c0:43:1b:b2:9c:e9:a1:48:
a5:bb:8e:35:a0:f1:ee:34:70:04:c2:df:8e:b9:82:
66:03:b7:a8:cd:56:36:34:a1:d0:93:e4:87:53:94:
17:00:13:61:c9:fe:6d:e5:57:b1:50:33:47:77:55:
a1:0a:7c:bd:e8:35:28:11:96:df:c4:cf:f4:0a:f7:
2e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EC:83:BB:5C:0C:71:14:FE:95:95:46:3D:14:03:4D:C9:3B:6E:4E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35392e3135302e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.150.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:f9:cd:95:d9:1d:35:86:d6:9c:f0:e6:44:b5:35:fe:5f:dd:
85:91:1c:3e:05:20:5a:82:e0:25:38:70:68:b3:d8:07:b4:a9:
3e:8b:03:78:a6:30:8c:37:52:56:0e:7e:56:ea:28:dc:3f:c9:
03:4a:8b:83:cc:08:c1:fd:07:f3:e1:e8:7f:30:36:55:7f:43:
fd:67:8a:dc:68:7d:10:64:15:5a:af:58:bf:bc:1a:37:61:34:
eb:08:ab:6e:74:7b:fb:c9:25:71:76:84:66:a5:91:4b:61:9c:
99:72:29:19:27:19:de:68:a4:4e:86:66:4b:9d:e9:ad:cb:77:
95:a6:20:49:67:9d:64:cf:f7:1e:7d:3c:ff:03:79:59:43:d1:
c3:24:d6:16:8f:7a:ff:a4:55:90:74:df:4c:94:03:d9:2c:60:
29:50:24:8f:8a:47:f4:5a:37:b1:99:3c:34:bf:5d:82:01:e0:
fb:2e:21:4f:2b:32:47:d3:a8:0a:28:ff:d6:53:ea:df:2c:0c:
20:31:94:8e:4d:ed:67:7a:8d:6d:5a:46:c6:50:cb:cd:59:e4:
5c:64:6a:a3:64:e1:d9:0a:97:13:7d:06:ab:2e:08:ac:f3:43:
09:d2:9f:09:3e:3f:57:8b:a0:e8:8f:89:f8:a0:23:b5:8e:d9:
9a:8f:d2:e3
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUerBRypBkGZVyRPARcnc8THtLY88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAyMjYwODQ4MzBaFw0yNTAyMjQwODUzMzBaMDMxMTAvBgNV
BAMTKEU2RUM4M0JCNUMwQzcxMTRGRTk1OTU0NjNEMTQwMzREQzkzQjZFNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa+epLui3HHW6G+m4NynNQ1yAu
ZomzRPmG/mmR0cgb2/5it7nHgIL2Yujqq5FMvd1CXU7MtJ/MHiQvcevW2FuV8hen
IwTwQnPhqpGLwhcrLwnztTU0u2kk36YwTTb+VI8R0tCaSqluGXSHmT9vdVXFh80k
OLb+64YjbJ4Fq5AfK3iVKEcF7Ho2qlg1nsd9lBSoiO+EngtnPc/JNJFkYigRmD60
aZqIy3F6FfgXmAJvmsbypa+9EIP87JzAQxuynOmhSKW7jjWg8e40cATC3465gmYD
t6jNVjY0odCT5IdTlBcAE2HJ/m3lV7FQM0d3VaEKfL3oNSgRlt/Ez/QK9y6PAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU5uyDu1wMcRT+lZVGPRQDTck7bk4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIyZTM1MzkyZTMxMzUzMDJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAACO5Yw
DQYJKoZIhvcNAQELBQADggEBAC75zZXZHTWG1pzw5kS1Nf5f3YWRHD4FIFqC4CU4
cGiz2Ae0qT6LA3imMIw3UlYOflbqKNw/yQNKi4PMCMH9B/Ph6H8wNlV/Q/1nitxo
fRBkFVqvWL+8GjdhNOsIq250e/vJJXF2hGalkUthnJlyKRknGd5opE6GZkud6a3L
d5WmIElnnWTP9x59PP8DeVlD0cMk1haPev+kVZB030yUA9ksYClQJI+KR/RaN7GZ
PDS/XYIB4PsuIU8rMkfTqAoo/9ZT6t8sDCAxlI5N7Wd6jW1aRsZQy81Z5FxkaqNk
4dkKlxN9BqsuCKzzQwnSnwk+P1eLoOiPifigI7WO2ZqP0uM=
-----END CERTIFICATE-----
Generated at Tue May 21 09:23:50 2024 by rpki-client on console-ams.rpki-client.org