Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39302e3132322e302f32342d3234203d3e20313336373837.roa
File: 3231322e39302e3132322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: yukuvFsth5SYV8jiIgoNeZLJIRtS9ja2xEpzPSHNP28=
Subject key identifier: 8F:86:5F:AD:D2:08:B1:7D:C3:79:2E:48:62:4A:DF:38:92:4D:82:DB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 15932B97D0D5C50F391171DFE1D914E28F177E99
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39302e3132322e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 15 Dec 2024 18:44:29 +0000
ROA not before: Sun 15 Dec 2024 18:39:29 +0000
ROA not after: Sun 14 Dec 2025 18:44:29 +0000
asID: 136787
IP address blocks: 212.90.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:93:2b:97:d0:d5:c5:0f:39:11:71:df:e1:d9:14:e2:8f:17:7e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 15 18:39:29 2024 GMT
Not After : Dec 14 18:44:29 2025 GMT
Subject: CN=8F865FADD208B17DC3792E48624ADF38924D82DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0f:93:3a:f4:ed:aa:4d:8d:cc:86:4a:a2:23:
95:c8:df:98:b5:db:7f:eb:7d:e7:c9:fb:60:5b:33:
03:96:91:ac:30:75:31:3c:79:c5:27:50:a3:ba:a0:
0b:96:68:56:fa:c7:19:6e:56:60:94:8c:0d:6f:ab:
00:7e:56:0a:5f:79:69:91:92:7e:4f:b1:3b:e3:65:
62:16:29:64:b8:bc:02:e1:09:55:27:01:76:8b:a5:
a9:85:b2:92:22:67:16:63:76:33:c2:e2:eb:54:a5:
34:22:f3:1c:e4:2c:67:e6:84:8f:f8:ad:07:b3:9a:
aa:4d:b3:07:d2:0e:20:39:a4:79:85:02:be:02:b8:
92:e9:1a:6f:48:d7:c3:34:b2:dd:83:34:29:89:4e:
87:42:87:ff:f1:eb:b1:c5:c3:90:e4:23:b5:8d:4f:
40:c4:0e:bb:ec:59:cb:70:1a:ae:1a:05:80:df:2a:
d4:f4:02:26:a7:df:f6:f5:f7:55:b0:10:2b:fb:e6:
7b:13:3f:22:62:2c:21:a1:0f:15:4f:cc:51:d5:59:
0d:e6:f8:59:ba:fa:31:99:87:15:6f:84:c1:40:55:
ff:ff:4a:52:54:e1:f0:6d:47:bf:d0:f6:9a:4b:d5:
ca:f8:f0:e6:35:37:49:6e:c7:67:20:aa:31:a0:72:
cc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:86:5F:AD:D2:08:B1:7D:C3:79:2E:48:62:4A:DF:38:92:4D:82:DB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39302e3132322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.90.122.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:80:b3:46:4a:12:40:25:b9:a8:e7:82:74:39:a4:1d:2f:76:
00:d8:ee:8d:bf:ad:65:c6:35:32:8c:8f:60:d8:c1:30:ae:1a:
5d:91:46:f7:62:7c:67:df:7c:b7:b4:e1:0b:2b:bb:e3:53:87:
2c:66:6a:29:d5:5d:0d:68:1f:f9:58:89:c4:a7:e8:96:a0:d8:
c0:24:b5:cb:63:26:12:8b:32:32:70:ce:4d:af:45:06:59:3d:
03:87:a7:fd:94:94:88:4d:2a:88:fc:d5:40:da:a8:3e:13:28:
02:11:d3:43:b2:80:97:25:14:ab:ce:6f:cf:93:ba:e3:ad:81:
d8:a1:9e:f9:ae:43:4f:b7:1d:d1:a5:c5:a3:44:43:83:70:8a:
ed:7c:67:5a:24:05:3a:c3:7a:25:06:34:53:82:3e:e5:41:6a:
c3:60:29:33:89:f8:27:40:61:7d:9e:31:57:18:17:95:77:9a:
4f:b1:19:81:e7:cc:05:5d:c1:d1:60:f4:51:5d:ef:29:f7:1e:
42:02:76:d4:2c:a4:1a:96:63:8b:34:d4:10:a7:33:63:d1:96:
1e:8c:db:fc:5d:71:d4:b0:da:fa:b9:d6:1d:d7:18:b9:40:5f:
1f:a4:6d:aa:08:0d:a5:b4:9e:dd:d5:8a:4d:6e:c2:80:39:cf:
c3:be:3a:9a
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUFZMrl9DVxQ85EXHf4dkU4o8XfpkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDEyMTUxODM5MjlaFw0yNTEyMTQxODQ0MjlaMDMxMTAvBgNV
BAMTKDhGODY1RkFERDIwOEIxN0RDMzc5MkU0ODYyNEFERjM4OTI0RDgyREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkD5M69O2qTY3MhkqiI5XI35i1
23/rfefJ+2BbMwOWkawwdTE8ecUnUKO6oAuWaFb6xxluVmCUjA1vqwB+VgpfeWmR
kn5PsTvjZWIWKWS4vALhCVUnAXaLpamFspIiZxZjdjPC4utUpTQi8xzkLGfmhI/4
rQezmqpNswfSDiA5pHmFAr4CuJLpGm9I18M0st2DNCmJTodCh//x67HFw5DkI7WN
T0DEDrvsWctwGq4aBYDfKtT0Aian3/b191WwECv75nsTPyJiLCGhDxVPzFHVWQ3m
+Fm6+jGZhxVvhMFAVf//SlJU4fBtR7/Q9ppL1cr48OY1N0lux2cgqjGgcsxvAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUj4ZfrdIIsX3DeS5IYkrfOJJNgtswHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzOTMwMmUzMTMy
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADUWnowDQYJKoZIhvcNAQELBQADggEBAAqAs0ZKEkAluajngnQ5pB0vdgDY7o2/
rWXGNTKMj2DYwTCuGl2RRvdifGfffLe04Qsru+NThyxmainVXQ1oH/lYicSn6Jag
2MAktctjJhKLMjJwzk2vRQZZPQOHp/2UlIhNKoj81UDaqD4TKAIR00OygJclFKvO
b8+TuuOtgdihnvmuQ0+3HdGlxaNEQ4Nwiu18Z1okBTrDeiUGNFOCPuVBasNgKTOJ
+CdAYX2eMVcYF5V3mk+xGYHnzAVdwdFg9FFd7yn3HkICdtQspBqWY4s01BCnM2PR
lh6M2/xdcdSw2vq51h3XGLlAXx+kbaoIDaW0nt3Vik1uwoA5z8O+Opo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:14:33 2025 by rpki-client