Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133362e31372e302f32342d3234203d3e20383334.roa
File: 34352e3133362e31372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 5b7PuzWyypwvbvVRCfA2XKj63iSjrBd5r+10ZERbZaU=
Subject key identifier: F7:67:78:2D:CE:85:B6:6D:C6:25:7A:9C:23:1F:89:20:5C:FD:EA:2E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7A4BC56AA8EA3CD1543EF279C91A085B8F25F810
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133362e31372e302f32342d3234203d3e20383334.roa
Signing time: Tue 17 Oct 2023 06:34:00 +0000
ROA not before: Tue 17 Oct 2023 06:29:00 +0000
ROA not after: Tue 15 Oct 2024 06:34:00 +0000
asID: 834
IP address blocks: 45.136.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:4b:c5:6a:a8:ea:3c:d1:54:3e:f2:79:c9:1a:08:5b:8f:25:f8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 17 06:29:00 2023 GMT
Not After : Oct 15 06:34:00 2024 GMT
Subject: CN=F767782DCE85B66DC6257A9C231F89205CFDEA2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:8d:23:5b:d5:ae:c4:e7:d7:43:e9:98:a5:
44:16:d2:c2:9c:1e:de:8e:f6:3f:9c:63:4b:2c:f1:
2b:1b:63:6d:2c:14:aa:a8:2d:4d:47:35:49:1b:e9:
09:9d:9a:ca:52:e7:f5:3f:34:8b:09:73:31:75:dc:
64:b0:4e:3e:27:cf:69:67:91:58:56:b7:9f:4f:61:
ae:81:d8:f7:82:94:99:5a:c2:6e:11:ad:b2:bc:ee:
70:75:46:29:59:f3:08:23:34:5c:1f:1c:e1:22:7b:
fc:d1:8f:34:46:14:16:b3:46:c2:48:2a:df:02:c0:
9a:26:b9:ac:3b:3d:dc:cd:8a:fd:4e:fa:4f:97:d3:
49:98:27:c3:0c:d8:30:14:fc:9d:0e:24:b7:67:01:
a7:14:53:65:97:f2:da:b0:36:6e:f9:9b:55:51:45:
29:52:b4:e5:bc:59:35:d7:60:04:83:58:cb:99:da:
0f:2f:d8:f4:37:20:55:6b:14:10:28:af:f4:fa:c0:
96:24:b9:46:c7:eb:0c:5a:18:72:98:42:36:e4:1f:
99:98:fb:c7:b7:48:ae:c2:26:07:72:4e:a1:75:64:
31:24:5a:aa:cd:f2:6a:db:41:3a:75:23:52:f2:86:
44:8a:ad:80:63:cb:ee:c9:31:33:7f:53:c5:e0:23:
6a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:67:78:2D:CE:85:B6:6D:C6:25:7A:9C:23:1F:89:20:5C:FD:EA:2E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133362e31372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.17.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:fc:52:be:c7:f5:78:38:8e:5d:20:f6:95:b4:ae:4f:52:ba:
64:b4:e5:57:18:73:b3:a9:f6:24:6c:24:8c:d1:21:81:87:ca:
84:63:20:99:c7:a6:d3:8d:e1:dd:d4:00:69:8a:a0:d8:c1:59:
53:c7:4d:f8:15:a7:25:a6:dc:bb:42:dc:0b:73:38:73:1f:36:
bf:0b:1b:b4:99:6c:df:15:14:9a:de:90:81:76:e0:3e:f3:ce:
6a:6a:5f:85:91:80:ba:75:19:df:ec:29:2b:d0:b4:86:8f:b4:
22:43:fb:69:38:1f:82:64:99:78:8a:14:c7:c2:28:b6:57:fa:
55:a8:a7:4f:6d:7c:96:4b:d7:f1:53:e9:64:6b:24:32:8c:d8:
1f:89:1a:06:23:1c:af:8c:25:08:65:a9:66:b4:37:2e:f5:6f:
ad:c8:de:f4:b0:6c:6c:ef:e2:c7:a8:b9:e6:23:88:b3:d9:a0:
33:ca:b8:24:16:38:09:d1:c6:5e:b3:3f:5c:c0:59:4c:79:f2:
0d:bb:d1:0b:79:86:c5:20:82:4a:61:32:72:62:80:fb:89:de:
a0:83:91:46:c0:0a:5a:42:a3:47:1d:c0:54:d4:9f:7e:c1:80:
8b:13:ca:ae:c9:b7:4e:3e:9a:fd:1b:bf:3f:3f:d7:00:6f:70:
5a:22:ff:0e
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUekvFaqjqPNFUPvJ5yRoIW48l+BAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzEwMTcwNjI5MDBaFw0yNDEwMTUwNjM0MDBaMDMxMTAvBgNV
BAMTKEY3Njc3ODJEQ0U4NUI2NkRDNjI1N0E5QzIzMUY4OTIwNUNGREVBMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDY40jW9WuxOfXQ+mYpUQW0sKc
Ht6O9j+cY0ss8SsbY20sFKqoLU1HNUkb6QmdmspS5/U/NIsJczF13GSwTj4nz2ln
kVhWt59PYa6B2PeClJlawm4RrbK87nB1RilZ8wgjNFwfHOEie/zRjzRGFBazRsJI
Kt8CwJomuaw7PdzNiv1O+k+X00mYJ8MM2DAU/J0OJLdnAacUU2WX8tqwNm75m1VR
RSlStOW8WTXXYASDWMuZ2g8v2PQ3IFVrFBAor/T6wJYkuUbH6wxaGHKYQjbkH5mY
+8e3SK7CJgdyTqF1ZDEkWqrN8mrbQTp1I1LyhkSKrYBjy+7JMTN/U8XgI2pFAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQU92d4Lc6Ftm3GJXqcIx+JIFz96i4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzEzMzM2MmUzMTM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYgRMA0G
CSqGSIb3DQEBCwUAA4IBAQBr/FK+x/V4OI5dIPaVtK5PUrpktOVXGHOzqfYkbCSM
0SGBh8qEYyCZx6bTjeHd1ABpiqDYwVlTx034Faclpty7QtwLczhzHza/Cxu0mWzf
FRSa3pCBduA+885qal+FkYC6dRnf7Ckr0LSGj7QiQ/tpOB+CZJl4ihTHwii2V/pV
qKdPbXyWS9fxU+lkayQyjNgfiRoGIxyvjCUIZalmtDcu9W+tyN70sGxs7+LHqLnm
I4iz2aAzyrgkFjgJ0cZesz9cwFlMefINu9ELeYbFIIJKYTJyYoD7id6gg5FGwApa
QqNHHcBU1J9+wYCLE8quybdOPpr9G78/P9cAb3BaIv8O
-----END CERTIFICATE-----
Generated at Thu May 2 05:15:40 2024 by rpki-client on console-ams.rpki-client.org