Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31312e38322e302f32342d3234203d3e20313336373837.roa
File: 34352e31312e38322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: hhojT0W67FsCBfWZajdYYAbKAxDMNkOadz80YwnlmKU=
Subject key identifier: 6B:3D:8A:84:04:C8:AA:E3:AE:50:C0:27:3B:0E:A1:E5:CA:09:DA:E2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6539BDD8BE8154090B572F107FCE425B997B1D84
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31312e38322e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 27 Sep 2023 13:40:10 +0000
ROA not before: Wed 27 Sep 2023 13:35:10 +0000
ROA not after: Wed 25 Sep 2024 13:40:10 +0000
asID: 136787
IP address blocks: 45.11.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:39:bd:d8:be:81:54:09:0b:57:2f:10:7f:ce:42:5b:99:7b:1d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 27 13:35:10 2023 GMT
Not After : Sep 25 13:40:10 2024 GMT
Subject: CN=6B3D8A8404C8AAE3AE50C0273B0EA1E5CA09DAE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8c:e1:27:ac:b2:b7:a0:48:03:9d:41:19:3b:
a5:c7:95:b1:27:87:1e:21:e6:09:8a:f8:35:2d:ad:
32:ce:31:ff:6e:83:4a:12:71:e2:e6:13:62:6a:e1:
14:e5:d1:28:85:d3:e4:43:45:c6:62:a4:bd:41:1a:
99:91:e1:c3:e8:40:bb:7c:52:97:9f:89:17:c0:51:
33:a8:64:10:00:7a:5a:18:eb:e4:b2:46:35:8d:61:
1e:45:5e:2d:f3:a3:a9:78:5b:62:74:1b:c3:51:2a:
ae:db:8f:1b:d9:8b:2f:d2:4b:8b:b1:d6:f9:ac:3d:
86:fd:c5:9b:46:4d:da:6e:4e:ea:bd:4a:76:f7:ee:
7b:40:bc:ea:6b:83:4b:f9:c4:14:e2:40:78:05:85:
c4:77:9b:3b:50:6a:ea:a4:e8:d7:60:cc:97:7a:2b:
82:ae:f5:10:3d:08:b3:a8:34:d5:6a:76:36:81:14:
74:a0:8e:b2:7e:b1:21:6c:a0:d8:36:98:4d:41:fb:
fc:aa:05:43:a9:2b:01:8c:15:09:21:00:d6:3d:c9:
f4:d3:b5:64:1c:1e:b3:6a:30:91:76:04:14:42:d5:
ea:56:8f:ba:75:13:f1:23:29:32:ae:e7:15:66:87:
73:5e:ce:68:78:ff:90:ce:03:83:6a:25:b7:c1:b3:
59:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3D:8A:84:04:C8:AA:E3:AE:50:C0:27:3B:0E:A1:E5:CA:09:DA:E2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31312e38322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.82.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:2e:6c:8e:ae:6f:d9:d4:97:1b:b5:2c:31:f5:49:86:4d:a8:
73:95:44:91:03:0b:1a:54:63:1b:41:dd:b7:e8:a1:27:fc:ce:
39:ba:82:69:fd:9d:64:d2:15:a2:fa:f8:8e:5c:25:97:8d:e0:
83:d5:81:62:d7:37:86:c1:02:2e:3e:01:9f:44:bb:da:25:1b:
c4:a8:dc:9f:b1:0a:bc:2c:41:af:5e:b3:d1:4a:40:c2:b0:83:
c8:c3:1b:68:50:c3:47:52:6b:95:a9:c9:45:b3:0a:26:2c:a4:
16:9f:9a:b1:06:d4:5a:69:9b:93:90:3e:55:a6:6e:e1:0a:f3:
bf:b1:bf:d7:b1:f0:a2:4b:22:77:b2:3b:e1:36:1f:5b:72:24:
81:5a:0f:83:53:0b:ff:6c:4d:dc:ac:ec:38:16:57:9e:4c:a5:
ad:4f:60:15:c4:c1:57:7a:d0:a4:9a:d4:d0:0a:d2:09:49:6d:
97:df:28:4d:1e:3a:e5:62:8e:08:9f:94:6e:b4:cc:97:f5:65:
51:c7:06:a7:d6:8a:72:e9:44:96:e6:0e:fe:0c:58:8e:6b:b0:
cd:f5:cb:46:63:ec:bf:76:c5:23:a4:49:ef:65:d4:83:64:2c:
72:f6:4e:d7:f5:20:05:92:a0:c1:50:c6:f3:03:27:22:8a:0c:
59:c0:43:e2
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUZTm92L6BVAkLVy8Qf85CW5l7HYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzA5MjcxMzM1MTBaFw0yNDA5MjUxMzQwMTBaMDMxMTAvBgNV
BAMTKDZCM0Q4QTg0MDRDOEFBRTNBRTUwQzAyNzNCMEVBMUU1Q0EwOURBRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCljOEnrLK3oEgDnUEZO6XHlbEn
hx4h5gmK+DUtrTLOMf9ug0oSceLmE2Jq4RTl0SiF0+RDRcZipL1BGpmR4cPoQLt8
UpefiRfAUTOoZBAAeloY6+SyRjWNYR5FXi3zo6l4W2J0G8NRKq7bjxvZiy/SS4ux
1vmsPYb9xZtGTdpuTuq9Snb37ntAvOprg0v5xBTiQHgFhcR3mztQauqk6NdgzJd6
K4Ku9RA9CLOoNNVqdjaBFHSgjrJ+sSFsoNg2mE1B+/yqBUOpKwGMFQkhANY9yfTT
tWQcHrNqMJF2BBRC1epWj7p1E/EjKTKu5xVmh3Nezmh4/5DOA4NqJbfBs1k/AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUaz2KhATIquOuUMAnOw6h5coJ2uIwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzEzMTJlMzgzMjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0L
UjANBgkqhkiG9w0BAQsFAAOCAQEAGy5sjq5v2dSXG7UsMfVJhk2oc5VEkQMLGlRj
G0Hdt+ihJ/zOObqCaf2dZNIVovr4jlwll43gg9WBYtc3hsECLj4Bn0S72iUbxKjc
n7EKvCxBr16z0UpAwrCDyMMbaFDDR1JrlanJRbMKJiykFp+asQbUWmmbk5A+VaZu
4Qrzv7G/17Hwoksid7I74TYfW3IkgVoPg1ML/2xN3KzsOBZXnkylrU9gFcTBV3rQ
pJrU0ArSCUltl98oTR465WKOCJ+UbrTMl/VlUccGp9aKculEluYO/gxYjmuwzfXL
RmPsv3bFI6RJ72XUg2QscvZO1/UgBZKgwVDG8wMnIooMWcBD4g==
-----END CERTIFICATE-----
Generated at Wed May 8 19:21:53 2024 by rpki-client on console-ams.rpki-client.org