Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39302e3132332e302f32342d3234203d3e20313336373837.roa
File: 3231322e39302e3132332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: YBbRD8rWl1/RMGg6jeXGQjODkQJaHAXe21fq8T48kqo=
Subject key identifier: BE:56:2C:FC:BE:81:B4:38:9F:08:6C:05:78:44:1B:F6:60:9B:CC:81
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 02FFF40A70887D2569DD7F40F23EC7CC90826054
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39302e3132332e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 14 Jan 2024 18:09:46 +0000
ROA not before: Sun 14 Jan 2024 18:04:46 +0000
ROA not after: Sun 12 Jan 2025 18:09:46 +0000
asID: 136787
IP address blocks: 212.90.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:ff:f4:0a:70:88:7d:25:69:dd:7f:40:f2:3e:c7:cc:90:82:60:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 14 18:04:46 2024 GMT
Not After : Jan 12 18:09:46 2025 GMT
Subject: CN=BE562CFCBE81B4389F086C0578441BF6609BCC81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6e:92:29:40:ba:6b:ad:a4:21:4d:ec:6f:b6:
dc:42:96:65:28:85:5b:ed:ee:05:01:23:05:f5:24:
17:86:eb:ca:18:85:b5:c5:c6:ba:e8:b3:93:3c:d9:
20:b4:77:23:0a:10:aa:be:7d:7e:45:8e:af:e4:a3:
0e:fc:fa:82:17:c9:5e:cc:53:4d:09:53:e7:37:a4:
81:ec:40:c8:62:7a:ea:b5:e2:4d:89:8c:8a:e3:f1:
8d:f2:73:3a:e2:d9:6b:db:71:e2:48:6a:b7:c0:7f:
e3:eb:bd:46:8a:e5:70:2f:3f:bc:fa:90:3c:99:bf:
01:8a:6c:2b:c1:ed:48:80:c0:03:73:e6:f2:bf:ac:
2f:6a:8b:d6:b1:ab:29:40:bb:d7:1f:65:49:7d:7b:
41:a2:32:cb:b5:98:8b:55:42:c4:91:22:4a:ee:27:
b1:29:d7:58:20:8b:6b:12:a7:91:54:96:55:ed:bd:
1a:79:76:fb:2e:4c:c9:71:85:b4:85:a6:bf:75:38:
45:14:1e:e2:27:64:95:9c:41:b5:f6:73:15:c0:cd:
b7:ee:87:19:7e:20:e0:4d:bd:56:ca:33:fe:17:55:
eb:6b:55:fb:6e:3a:9a:ce:dc:49:c0:54:80:ba:a3:
37:a2:8a:05:56:e3:91:cb:9f:15:f8:e4:fd:e0:35:
39:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:56:2C:FC:BE:81:B4:38:9F:08:6C:05:78:44:1B:F6:60:9B:CC:81
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39302e3132332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.90.123.0/24
Signature Algorithm: sha256WithRSAEncryption
55:c5:4f:54:85:93:1c:75:af:68:89:93:d4:5a:ff:30:d8:5b:
3c:94:9f:86:0d:a1:91:6d:de:5a:5c:76:a1:9e:44:47:bb:bc:
84:f9:cc:6c:4c:49:7d:7f:00:78:00:21:80:e4:e3:bf:4a:2b:
b3:22:bd:7c:90:02:aa:4b:d1:f5:0b:87:72:2f:61:9d:0e:da:
32:d3:91:86:46:3a:aa:4f:20:bc:b9:2a:b5:10:c8:f1:72:29:
f4:a6:21:66:78:3e:30:f2:dc:e8:37:e5:e4:82:dd:96:79:bf:
63:5b:31:cf:28:50:33:d8:03:43:4e:97:33:11:70:33:a7:38:
92:a6:07:39:3a:70:41:cc:ec:40:79:b3:95:4d:19:ed:b2:46:
42:13:b9:1b:53:c3:04:08:d3:7b:98:c5:ec:99:02:d4:f5:03:
3d:18:f6:7d:8e:eb:3f:73:1b:2a:4f:29:49:15:f5:90:58:98:
d8:29:47:a9:96:04:ac:88:f4:e2:28:a1:9e:48:d2:7c:4b:7d:
f5:53:1e:ea:bd:e4:52:75:5b:7e:1e:c9:5c:e2:52:9d:9b:df:
05:91:39:c6:eb:9e:22:03:88:92:20:3c:90:89:6c:6f:1e:44:
df:ec:75:c2:86:4e:21:96:70:73:e1:6d:61:b6:6f:6d:29:06:
9f:93:3a:a4
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUAv/0CnCIfSVp3X9A8j7HzJCCYFQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAxMTQxODA0NDZaFw0yNTAxMTIxODA5NDZaMDMxMTAvBgNV
BAMTKEJFNTYyQ0ZDQkU4MUI0Mzg5RjA4NkMwNTc4NDQxQkY2NjA5QkNDODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtbpIpQLprraQhTexvttxClmUo
hVvt7gUBIwX1JBeG68oYhbXFxrros5M82SC0dyMKEKq+fX5Fjq/kow78+oIXyV7M
U00JU+c3pIHsQMhieuq14k2JjIrj8Y3yczri2WvbceJIarfAf+PrvUaK5XAvP7z6
kDyZvwGKbCvB7UiAwANz5vK/rC9qi9axqylAu9cfZUl9e0GiMsu1mItVQsSRIkru
J7Ep11ggi2sSp5FUllXtvRp5dvsuTMlxhbSFpr91OEUUHuInZJWcQbX2cxXAzbfu
hxl+IOBNvVbKM/4XVetrVftuOprO3EnAVIC6ozeiigVW45HLnxX45P3gNTntAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUvlYs/L6BtDifCGwFeEQb9mCbzIEwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzOTMwMmUzMTMy
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADUWnswDQYJKoZIhvcNAQELBQADggEBAFXFT1SFkxx1r2iJk9Ra/zDYWzyUn4YN
oZFt3lpcdqGeREe7vIT5zGxMSX1/AHgAIYDk479KK7MivXyQAqpL0fULh3IvYZ0O
2jLTkYZGOqpPILy5KrUQyPFyKfSmIWZ4PjDy3Og35eSC3ZZ5v2NbMc8oUDPYA0NO
lzMRcDOnOJKmBzk6cEHM7EB5s5VNGe2yRkITuRtTwwQI03uYxeyZAtT1Az0Y9n2O
6z9zGypPKUkV9ZBYmNgpR6mWBKyI9OIooZ5I0nxLffVTHuq95FJ1W34eyVziUp2b
3wWROcbrniIDiJIgPJCJbG8eRN/sdcKGTiGWcHPhbWG2b20pBp+TOqQ=
-----END CERTIFICATE-----
Generated at Wed May 8 19:21:53 2024 by rpki-client on console-ams.rpki-client.org