Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37332e302f32342d3234203d3e20323039383534.roa
File: 33312e3138372e37332e302f32342d3234203d3e20323039383534.roa (raw, json)
Hash identifier: X+CtysmeTyL+p28tq+hyFS/nLuzFxkQLid253Oyh14A=
Subject key identifier: 56:A3:E8:1C:74:A9:2A:AB:4E:F2:31:91:28:0F:89:E3:21:17:59:5F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3D2CA560E58A88E1275EFB3F6B59A6B92A6C9AA2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37332e302f32342d3234203d3e20323039383534.roa
Signing time: Mon 04 Mar 2024 12:40:53 +0000
ROA not before: Mon 04 Mar 2024 12:35:53 +0000
ROA not after: Mon 03 Mar 2025 12:40:53 +0000
asID: 209854
IP address blocks: 31.187.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:2c:a5:60:e5:8a:88:e1:27:5e:fb:3f:6b:59:a6:b9:2a:6c:9a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 4 12:35:53 2024 GMT
Not After : Mar 3 12:40:53 2025 GMT
Subject: CN=56A3E81C74A92AAB4EF23191280F89E32117595F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:31:2c:22:63:65:4b:fe:60:84:1f:db:e0:c1:
ef:27:4b:55:f5:7d:34:69:c5:1c:5a:0b:09:e5:64:
80:78:fb:32:0e:cc:26:ec:67:3d:0b:b6:5b:e3:6f:
3a:53:16:9b:2c:58:54:48:48:91:b9:f7:12:f3:cc:
11:f3:04:89:7c:50:49:35:0e:63:fd:29:60:6e:b7:
34:5a:1d:5e:b9:ea:3c:4f:10:ae:91:4e:7c:14:db:
63:cb:ab:5b:55:11:6d:16:23:ff:ea:96:eb:d1:fe:
0b:4a:73:ba:e8:92:03:51:0b:63:54:fc:dd:48:91:
09:e4:e5:9b:a8:8a:fa:f5:6f:3a:fd:a5:e8:e7:c3:
45:89:ec:c6:64:2e:8c:97:9c:91:5b:aa:9b:de:74:
f5:e3:0b:88:32:2e:1c:2a:3e:58:dc:b5:4b:25:e5:
8f:cc:43:d2:40:c4:fe:59:37:6c:31:18:12:9d:e1:
01:b4:a1:4b:8b:3c:8b:a6:2b:34:c9:51:88:a0:6e:
b2:e0:66:ea:16:76:95:99:86:d4:75:55:45:12:cc:
48:97:91:60:e9:8e:ef:f3:f3:39:4c:fa:46:f4:1d:
9e:70:46:45:03:0a:3e:b7:81:6b:80:d4:4c:ee:8a:
b2:7b:29:1c:7e:78:c3:a4:da:38:a2:a9:df:ee:e9:
49:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A3:E8:1C:74:A9:2A:AB:4E:F2:31:91:28:0F:89:E3:21:17:59:5F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37332e302f32342d3234203d3e20323039383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.73.0/24
Signature Algorithm: sha256WithRSAEncryption
86:15:ce:95:09:71:9c:91:62:12:88:1d:04:07:6b:9a:da:2a:
de:b6:53:9b:2b:74:4a:a3:c3:6a:ec:af:f9:0f:02:d5:43:d4:
38:5b:2c:f1:c7:3c:98:7f:76:6f:d3:04:62:1d:a9:93:3a:a2:
8f:cc:86:94:14:94:9f:b6:57:d4:00:90:f3:1c:dc:67:d2:43:
e2:f7:6c:cc:88:d7:74:b8:49:48:4b:aa:b0:ff:e3:87:71:d1:
21:78:d6:89:79:81:14:57:50:f6:9c:e5:51:a0:75:23:81:3d:
db:5f:46:65:42:da:43:82:cd:84:cc:87:6d:d1:f7:50:e9:27:
25:e2:b5:0b:37:d2:6f:b8:22:67:9e:2b:16:1f:8d:14:02:cd:
00:49:cf:e4:bc:4a:41:a3:03:97:73:9c:15:5f:16:57:8a:ca:
47:b7:9f:66:dc:bd:29:7b:3a:80:98:82:f7:05:cb:74:6c:01:
eb:c9:d0:75:df:22:7d:7e:58:aa:ec:26:e2:27:93:77:50:e4:
4c:c1:b9:45:0d:6c:6a:da:ff:a7:e1:86:9c:72:78:e9:ff:e7:
e3:3d:bc:6b:c6:ea:6b:5d:fd:3a:a7:a4:1f:0e:a4:ff:84:6d:
66:28:73:ba:a1:8c:14:1f:a9:10:83:00:90:5e:f6:85:db:68:
2c:27:07:3d
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUPSylYOWKiOEnXvs/a1mmuSpsmqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAzMDQxMjM1NTNaFw0yNTAzMDMxMjQwNTNaMDMxMTAvBgNV
BAMTKDU2QTNFODFDNzRBOTJBQUI0RUYyMzE5MTI4MEY4OUUzMjExNzU5NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnMSwiY2VL/mCEH9vgwe8nS1X1
fTRpxRxaCwnlZIB4+zIOzCbsZz0LtlvjbzpTFpssWFRISJG59xLzzBHzBIl8UEk1
DmP9KWButzRaHV656jxPEK6RTnwU22PLq1tVEW0WI//qluvR/gtKc7rokgNRC2NU
/N1IkQnk5Zuoivr1bzr9pejnw0WJ7MZkLoyXnJFbqpvedPXjC4gyLhwqPljctUsl
5Y/MQ9JAxP5ZN2wxGBKd4QG0oUuLPIumKzTJUYigbrLgZuoWdpWZhtR1VUUSzEiX
kWDpju/z8zlM+kb0HZ5wRkUDCj63gWuA1EzuirJ7KRx+eMOk2jiiqd/u6UlNAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUVqPoHHSpKqtO8jGRKA+J4yEXWV8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzMzMTJlMzEzODM3MmUzNzMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM5MzgzNTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
H7tJMA0GCSqGSIb3DQEBCwUAA4IBAQCGFc6VCXGckWISiB0EB2ua2iretlObK3RK
o8Nq7K/5DwLVQ9Q4WyzxxzyYf3Zv0wRiHamTOqKPzIaUFJSftlfUAJDzHNxn0kPi
92zMiNd0uElIS6qw/+OHcdEheNaJeYEUV1D2nOVRoHUjgT3bX0ZlQtpDgs2EzIdt
0fdQ6Scl4rULN9JvuCJnnisWH40UAs0ASc/kvEpBowOXc5wVXxZXispHt59m3L0p
ezqAmIL3Bct0bAHrydB13yJ9fliq7CbiJ5N3UORMwblFDWxq2v+n4Yaccnjp/+fj
PbxrxuprXf06p6QfDqT/hG1mKHO6oYwUH6kQgwCQXvaF22gsJwc9
-----END CERTIFICATE-----
Generated at Tue May 7 21:49:15 2024 by rpki-client on console-ams.rpki-client.org