Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38382e302f32342d3234203d3e20313336373837.roa
File: 3231322e33322e38382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 2Uq3JZJ6E6twS8jWDtnVpmdDx05uzUax2QrJjNOrgF8=
Subject key identifier: 43:FA:CA:71:CB:8A:DB:72:66:57:49:95:A5:F6:E5:7A:A2:6F:7C:43
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 47D5386809F0738696A21DB51688D37EBAEFE3C3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38382e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 14 Nov 2024 15:36:57 +0000
ROA not before: Thu 14 Nov 2024 15:31:57 +0000
ROA not after: Thu 13 Nov 2025 15:36:57 +0000
asID: 136787
IP address blocks: 212.32.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:d5:38:68:09:f0:73:86:96:a2:1d:b5:16:88:d3:7e:ba:ef:e3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 14 15:31:57 2024 GMT
Not After : Nov 13 15:36:57 2025 GMT
Subject: CN=43FACA71CB8ADB7266574995A5F6E57AA26F7C43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:86:b4:8c:9d:46:98:e4:c5:e3:19:d8:da:7f:
9c:ed:43:ee:90:76:85:29:42:f7:ba:8a:60:26:a7:
55:b2:e5:96:e1:d7:a6:87:31:76:90:a4:bb:60:75:
be:ef:61:b4:17:fb:3e:bc:63:9a:0f:ba:40:b4:c8:
99:18:74:0a:15:c5:73:c7:a5:47:46:9a:4c:77:d8:
1c:c5:43:ca:86:5f:5a:1a:9f:96:4a:dc:85:57:04:
1f:f2:56:09:49:4c:c8:d3:fb:c6:c6:06:e6:07:7a:
50:5c:03:de:68:74:5b:5d:c5:b2:dc:1d:ca:15:71:
14:67:d8:c7:7c:65:83:3d:72:08:71:7d:1c:b2:de:
ea:5f:dc:95:6b:60:71:00:77:c7:07:26:95:8f:af:
66:b2:99:d3:b5:ec:de:db:e0:c7:6d:0f:ef:a2:dc:
ef:60:c3:6c:aa:f2:4c:e3:81:fb:c6:2d:e0:9a:24:
62:ed:a3:4a:72:0b:20:bc:29:33:47:6b:d5:d2:57:
7d:3c:e6:50:a8:5b:1c:e5:7d:b5:ef:c7:30:1c:4a:
af:50:bb:57:a7:20:bf:06:4d:8e:d5:20:44:91:a8:
93:eb:05:51:de:cc:7c:84:10:75:c3:6d:2b:da:1c:
7e:b0:ee:54:06:67:31:b5:99:ab:c5:15:57:aa:16:
a5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FA:CA:71:CB:8A:DB:72:66:57:49:95:A5:F6:E5:7A:A2:6F:7C:43
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.88.0/24
Signature Algorithm: sha256WithRSAEncryption
58:b6:5b:d8:db:e9:42:66:f0:e2:dd:66:b6:a9:7c:83:6e:c7:
87:88:25:dd:ff:f7:72:48:d5:a3:97:bf:81:75:9d:1c:1d:53:
0e:09:31:95:ca:d7:db:d5:51:77:20:84:b8:19:67:18:45:dc:
01:c3:57:92:81:a3:c0:12:e1:e5:4c:3d:a1:9f:24:b3:52:76:
20:a7:3d:73:df:5e:a5:9c:8d:a7:4b:79:78:98:f4:0b:e4:2e:
90:7b:9d:43:b0:00:9a:c1:df:fd:43:e0:c7:9d:fb:22:08:f2:
40:62:09:a1:5f:1d:d2:6f:60:b8:99:de:5f:8a:62:d3:eb:dd:
e1:e8:d6:72:fd:b4:ce:bc:31:82:24:0e:67:54:d1:29:c0:9d:
94:09:99:d3:4c:9a:67:8f:b7:c2:5c:90:4a:9b:85:77:2e:b8:
4f:84:1b:36:ae:b1:e2:72:09:de:3c:0c:92:65:66:9b:43:7f:
cc:fc:24:e8:e1:a2:f6:55:14:82:7e:56:62:ba:48:fb:eb:1f:
5c:91:d2:a3:37:05:04:a3:d1:07:19:73:51:52:42:00:a5:a3:
8f:ce:28:d3:44:b1:e8:74:61:14:20:02:ef:2e:c3:fb:c1:92:
6e:62:43:f1:96:28:71:ac:aa:52:bd:58:7a:b7:7f:08:d3:41:
d7:d4:c6:e1
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUR9U4aAnwc4aWoh21FojTfrrv48MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDExMTQxNTMxNTdaFw0yNTExMTMxNTM2NTdaMDMxMTAvBgNV
BAMTKDQzRkFDQTcxQ0I4QURCNzI2NjU3NDk5NUE1RjZFNTdBQTI2RjdDNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIhrSMnUaY5MXjGdjaf5ztQ+6Q
doUpQve6imAmp1Wy5Zbh16aHMXaQpLtgdb7vYbQX+z68Y5oPukC0yJkYdAoVxXPH
pUdGmkx32BzFQ8qGX1oan5ZK3IVXBB/yVglJTMjT+8bGBuYHelBcA95odFtdxbLc
HcoVcRRn2Md8ZYM9cghxfRyy3upf3JVrYHEAd8cHJpWPr2aymdO17N7b4MdtD++i
3O9gw2yq8kzjgfvGLeCaJGLto0pyCyC8KTNHa9XSV3085lCoWxzlfbXvxzAcSq9Q
u1enIL8GTY7VIESRqJPrBVHezHyEEHXDbSvaHH6w7lQGZzG1mavFFVeqFqW3AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUQ/rKccuK23JmV0mVpfbleqJvfEMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzMzMyMmUzODM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
1CBYMA0GCSqGSIb3DQEBCwUAA4IBAQBYtlvY2+lCZvDi3Wa2qXyDbseHiCXd//dy
SNWjl7+BdZ0cHVMOCTGVytfb1VF3IIS4GWcYRdwBw1eSgaPAEuHlTD2hnySzUnYg
pz1z316lnI2nS3l4mPQL5C6Qe51DsACawd/9Q+DHnfsiCPJAYgmhXx3Sb2C4md5f
imLT693h6NZy/bTOvDGCJA5nVNEpwJ2UCZnTTJpnj7fCXJBKm4V3LrhPhBs2rrHi
cgnePAySZWabQ3/M/CTo4aL2VRSCflZiukj76x9ckdKjNwUEo9EHGXNRUkIApaOP
zijTRLHodGEUIALvLsP7wZJuYkPxlihxrKpSvVh6t38I00HX1Mbh
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:04 2024 by rpki-client on console-fra.rpki-client.org