Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e382e302f32342d3234203d3e20313336373837.roa
File: 33312e3232302e382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: ASD8UEACCKzFvZCL1tVWN6LkbQVhjVz4BUFlHKMxerE=
Subject key identifier: 92:BE:94:97:A9:CA:04:29:0E:4E:8A:ED:A7:EF:D7:1C:FD:F2:8C:4E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 39DB25FE14EBEE4B6D7240AAAF61F44D74730572
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e382e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 27 Oct 2024 20:05:19 +0000
ROA not before: Sun 27 Oct 2024 20:00:19 +0000
ROA not after: Sun 26 Oct 2025 20:05:19 +0000
asID: 136787
IP address blocks: 31.220.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:db:25:fe:14:eb:ee:4b:6d:72:40:aa:af:61:f4:4d:74:73:05:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 27 20:00:19 2024 GMT
Not After : Oct 26 20:05:19 2025 GMT
Subject: CN=92BE9497A9CA04290E4E8AEDA7EFD71CFDF28C4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:c8:f2:82:aa:55:af:f4:8c:06:bb:51:ba:
08:54:6e:4c:fa:61:fb:da:8a:28:e0:d0:a0:46:e9:
b5:1e:52:80:28:73:e6:bd:a0:07:f3:4d:30:b1:53:
9a:a9:8b:dc:98:0e:4e:72:61:47:f3:45:fa:5f:d8:
d6:d3:7b:82:e7:c5:58:99:a8:7b:af:4b:20:95:92:
f7:06:9d:a9:73:b5:4a:e2:dc:90:69:01:93:48:3d:
b5:d8:9c:ed:0f:27:ac:56:d1:69:98:ad:e1:ea:d7:
a1:25:a4:01:58:b3:bf:0a:c9:bd:0e:06:cc:81:b6:
f1:53:a2:39:65:29:fe:07:7f:fa:3b:a8:3e:9c:f5:
c5:d5:24:b7:7c:de:6d:45:3b:53:79:35:33:fd:10:
19:c9:6c:f4:23:bb:67:66:91:5f:3f:a3:f5:b3:e2:
d6:37:ff:70:b4:46:d6:a7:44:ae:5b:c3:7a:85:ff:
49:6e:59:bb:08:2c:57:d4:19:ca:0e:b5:13:f5:a0:
f6:b9:9a:95:e7:eb:24:41:cf:3f:8e:a4:41:d1:91:
6b:32:2e:7c:c9:03:a6:1f:36:3a:d5:19:d8:ce:82:
47:cc:fd:e8:a6:5b:f5:0b:58:de:45:84:3a:45:ed:
fe:91:44:3d:b3:09:d5:cb:11:ee:4d:0e:92:ad:17:
e3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BE:94:97:A9:CA:04:29:0E:4E:8A:ED:A7:EF:D7:1C:FD:F2:8C:4E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.8.0/24
Signature Algorithm: sha256WithRSAEncryption
43:07:b7:94:ec:b5:32:a2:21:81:3b:c6:7b:ee:48:f8:2f:97:
b9:58:37:2b:20:44:c5:57:63:a9:aa:50:5a:b2:7f:f5:44:be:
6e:04:01:23:94:66:e7:4f:bd:67:fd:02:2e:df:d8:0e:42:3e:
96:25:e9:59:34:ec:85:58:ec:0e:0b:2b:cc:3a:e8:b5:bf:b9:
c7:15:bd:a7:d2:4e:51:8b:f3:6b:66:14:14:ac:1a:f8:d5:1b:
1e:4b:c0:f8:c1:8e:70:5f:67:3f:0e:b8:0e:65:f6:19:bb:67:
ce:10:f1:57:ae:dd:18:ac:26:c1:92:d0:5f:14:1f:8f:b9:75:
1f:ec:6e:94:87:21:09:90:74:36:f2:25:92:0b:a7:8c:b1:78:
b0:5d:bc:36:e7:c8:95:19:ee:cb:cc:d0:56:42:4a:db:08:09:
1a:b7:17:98:f0:8b:38:7d:fb:06:0d:28:05:86:2c:9c:14:bc:
8a:2f:4f:a6:ca:d2:0e:97:69:c9:a2:d2:fd:e3:a5:22:63:9a:
8f:db:f0:a8:34:5d:1b:5a:ac:39:57:0c:33:5d:80:5c:c2:d8:
1a:20:e3:a7:53:8f:ba:9e:91:6b:f9:2c:06:1b:1b:85:e1:b3:
3f:5b:6e:5e:88:a4:f1:71:13:6b:cf:90:af:59:f5:07:38:97:
fb:77:e4:cf
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUOdsl/hTr7kttckCqr2H0TXRzBXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDEwMjcyMDAwMTlaFw0yNTEwMjYyMDA1MTlaMDMxMTAvBgNV
BAMTKDkyQkU5NDk3QTlDQTA0MjkwRTRFOEFFREE3RUZENzFDRkRGMjhDNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEC8jygqpVr/SMBrtRughUbkz6
Yfvaiijg0KBG6bUeUoAoc+a9oAfzTTCxU5qpi9yYDk5yYUfzRfpf2NbTe4LnxViZ
qHuvSyCVkvcGnalztUri3JBpAZNIPbXYnO0PJ6xW0WmYreHq16ElpAFYs78Kyb0O
BsyBtvFTojllKf4Hf/o7qD6c9cXVJLd83m1FO1N5NTP9EBnJbPQju2dmkV8/o/Wz
4tY3/3C0RtanRK5bw3qF/0luWbsILFfUGcoOtRP1oPa5mpXn6yRBzz+OpEHRkWsy
LnzJA6YfNjrVGdjOgkfM/eimW/ULWN5FhDpF7f6RRD2zCdXLEe5NDpKtF+N3AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUkr6Ul6nKBCkOTortp+/XHP3yjE4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzMzMTJlMzIzMjMwMmUzODJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB/c
CDANBgkqhkiG9w0BAQsFAAOCAQEAQwe3lOy1MqIhgTvGe+5I+C+XuVg3KyBExVdj
qapQWrJ/9US+bgQBI5Rm50+9Z/0CLt/YDkI+liXpWTTshVjsDgsrzDrotb+5xxW9
p9JOUYvza2YUFKwa+NUbHkvA+MGOcF9nPw64DmX2GbtnzhDxV67dGKwmwZLQXxQf
j7l1H+xulIchCZB0NvIlkgunjLF4sF28NufIlRnuy8zQVkJK2wgJGrcXmPCLOH37
Bg0oBYYsnBS8ii9PpsrSDpdpyaLS/eOlImOaj9vwqDRdG1qsOVcMM12AXMLYGiDj
p1OPup6Ra/ksBhsbheGzP1tuXoik8XETa8+Qr1n1BziX+3fkzw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:48 2024 by rpki-client on console-ams.rpki-client.org