Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3139362e35362e302f32312d3234203d3e203437353833.roa
File: 3231372e3139362e35362e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: 2ixeQrQcJdixNhlaYZxciqqMqFPn+613OmzEqSAJcVQ=
Subject key identifier: 65:64:8E:85:E4:FC:3D:19:0C:3D:68:C1:A5:1B:84:7E:A4:83:13:E1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: C531FF9423255F884F03F10DE1534AF86A0D19
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3139362e35362e302f32312d3234203d3e203437353833.roa
Signing time: Thu 13 Jun 2024 10:40:49 +0000
ROA not before: Thu 13 Jun 2024 10:35:49 +0000
ROA not after: Thu 12 Jun 2025 10:40:49 +0000
asID: 47583
IP address blocks: 217.196.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
c5:31:ff:94:23:25:5f:88:4f:03:f1:0d:e1:53:4a:f8:6a:0d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 13 10:35:49 2024 GMT
Not After : Jun 12 10:40:49 2025 GMT
Subject: CN=65648E85E4FC3D190C3D68C1A51B847EA48313E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:bd:39:f4:f0:a3:63:46:7f:d8:0f:d1:1d:
94:a5:11:18:6c:e0:09:72:a6:50:ff:4f:b7:99:fb:
85:2f:02:e1:ed:31:93:54:af:1d:52:08:56:41:37:
8e:c7:35:f7:16:49:2d:f2:2a:1c:73:54:9d:9d:70:
03:a6:2f:5c:6e:34:fa:38:4c:a9:9f:07:f9:e7:0b:
b2:95:fc:7e:88:72:ce:09:11:ad:5c:5a:f4:21:de:
78:7e:d9:50:1f:f0:65:fb:1c:bb:58:38:85:d8:da:
f6:93:6d:ea:20:53:e9:55:96:21:8f:a8:66:39:6a:
5f:03:2f:da:e5:86:68:f4:8b:5e:3c:7d:c0:b8:c8:
24:a6:46:14:df:a8:86:26:57:ea:cf:83:b4:dc:c2:
3c:38:0c:c7:00:1a:d2:59:c4:c7:52:68:34:08:b8:
d7:6f:13:88:0f:01:59:c9:7f:38:b6:fc:ef:94:d7:
bc:53:fb:a7:00:e2:58:1e:1d:88:0a:24:24:ad:fe:
b5:a9:de:81:62:0a:78:1a:37:3b:b1:73:8e:30:3f:
50:02:a0:9e:3b:72:5b:dc:be:ae:f4:f6:92:a7:fc:
24:4e:3f:6f:3b:2a:dc:0f:9e:fe:ff:21:83:67:86:
80:96:87:50:e5:b5:b3:5b:b3:91:0e:fe:2d:a0:aa:
66:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:64:8E:85:E4:FC:3D:19:0C:3D:68:C1:A5:1B:84:7E:A4:83:13:E1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3139362e35362e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.196.56.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:41:0a:3f:0f:1d:6b:ac:d2:b0:bb:18:43:e7:45:48:77:27:
4e:92:c6:ce:e8:3b:f8:6d:1c:f9:98:bd:20:b2:3b:22:12:76:
17:1d:19:8f:1b:31:f8:e0:cc:71:8b:1e:21:8a:a7:b6:c9:ac:
f3:fc:66:60:a0:5a:91:ee:e0:d9:ad:9b:13:6a:63:13:6b:3b:
ca:ab:af:5e:c3:d1:4f:6b:c2:7c:7e:77:3d:25:1f:fb:f5:e2:
2f:83:e3:7f:28:d0:a7:87:aa:c2:d3:ae:41:0b:58:e0:4f:8f:
b5:e8:ff:19:84:3d:9a:27:13:74:50:e0:96:d5:22:09:1c:29:
96:e3:6a:2f:8b:a1:fa:61:9f:95:1b:62:2b:1b:32:38:47:06:
21:90:f0:4b:76:c6:75:63:7e:cd:d7:2e:0d:ce:8b:ea:50:d7:
28:8a:86:14:81:4e:5b:a6:e4:82:97:4f:dc:c6:cd:e4:40:e2:
e0:f0:f5:98:5b:fe:e7:a4:82:ff:07:43:2b:98:68:20:60:06:
25:9e:17:c1:44:e0:18:c6:df:01:bd:c0:d1:ae:3a:57:5d:7f:
dc:c4:6c:90:e3:27:51:ba:dc:50:a1:2f:5a:37:02:af:b5:4a:
22:61:41:0b:30:80:45:ed:a7:33:41:68:4c:36:90:27:4b:f9:
fb:75:b9:ab
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUAMUx/5QjJV+ITwPxDeFTSvhqDRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDA2MTMxMDM1NDlaFw0yNTA2MTIxMDQwNDlaMDMxMTAvBgNV
BAMTKDY1NjQ4RTg1RTRGQzNEMTkwQzNENjhDMUE1MUI4NDdFQTQ4MzEzRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClMb059PCjY0Z/2A/RHZSlERhs
4AlyplD/T7eZ+4UvAuHtMZNUrx1SCFZBN47HNfcWSS3yKhxzVJ2dcAOmL1xuNPo4
TKmfB/nnC7KV/H6Ics4JEa1cWvQh3nh+2VAf8GX7HLtYOIXY2vaTbeogU+lVliGP
qGY5al8DL9rlhmj0i148fcC4yCSmRhTfqIYmV+rPg7Tcwjw4DMcAGtJZxMdSaDQI
uNdvE4gPAVnJfzi2/O+U17xT+6cA4lgeHYgKJCSt/rWp3oFiCngaNzuxc44wP1AC
oJ47clvcvq709pKn/CROP287KtwPnv7/IYNnhoCWh1DltbNbs5EO/i2gqmZNAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUZWSOheT8PRkMPWjBpRuEfqSDE+EwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTM3MmUzMTM5MzYyZTM1
MzYyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
2cQ4MA0GCSqGSIb3DQEBCwUAA4IBAQB9QQo/Dx1rrNKwuxhD50VIdydOksbO6Dv4
bRz5mL0gsjsiEnYXHRmPGzH44Mxxix4hiqe2yazz/GZgoFqR7uDZrZsTamMTazvK
q69ew9FPa8J8fnc9JR/79eIvg+N/KNCnh6rC065BC1jgT4+16P8ZhD2aJxN0UOCW
1SIJHCmW42ovi6H6YZ+VG2IrGzI4RwYhkPBLdsZ1Y37N1y4NzovqUNcoioYUgU5b
puSCl0/cxs3kQOLg8PWYW/7npIL/B0MrmGggYAYlnhfBROAYxt8BvcDRrjpXXX/c
xGyQ4ydRutxQoS9aNwKvtUoiYUELMIBF7aczQWhMNpAnS/n7dbmr
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:26 2024 by rpki-client on console-ams.rpki-client.org