Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e3139302e302f32332d3234203d3e203439373033.roa
File: 34352e3135322e3139302e302f32332d3234203d3e203439373033.roa (raw, json)
Hash identifier: 4YexgjZnqCM90SJIExcoF8kB1XeRHnQnZ8Mtqvaju0U=
Subject key identifier: D0:42:9B:D7:62:07:BD:24:F4:FC:96:86:D7:B3:51:2A:3A:01:10:C5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7BF267195E087BA273B9A75FD9D25EF8B14ADF91
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e3139302e302f32332d3234203d3e203439373033.roa
Signing time: Mon 04 Mar 2024 08:56:42 +0000
ROA not before: Mon 04 Mar 2024 08:51:42 +0000
ROA not after: Mon 03 Mar 2025 08:56:42 +0000
asID: 49703
IP address blocks: 45.152.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:f2:67:19:5e:08:7b:a2:73:b9:a7:5f:d9:d2:5e:f8:b1:4a:df:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 4 08:51:42 2024 GMT
Not After : Mar 3 08:56:42 2025 GMT
Subject: CN=D0429BD76207BD24F4FC9686D7B3512A3A0110C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:25:b3:89:4a:27:57:f9:4f:95:d3:5f:c9:
8a:fc:ca:af:5c:cd:e2:63:38:e1:5d:c2:76:64:0f:
50:3f:bf:37:cc:d8:52:4f:3a:bb:2b:2a:24:f0:27:
95:b6:2c:d7:47:6b:65:42:4b:46:46:47:e4:ec:81:
d4:d9:48:52:70:22:79:50:11:b7:bb:3d:39:69:9f:
00:ef:79:ed:94:0a:2d:9a:55:1a:ec:1b:1b:9e:14:
87:16:aa:1b:aa:bf:8e:97:6c:7a:be:e0:93:e1:2f:
c2:cd:fb:6b:51:d5:dc:f2:5c:97:2f:49:3b:0a:64:
47:2a:86:8b:41:87:f8:fa:1a:b9:5e:63:5a:f8:b1:
b2:0d:b2:36:f4:ba:c2:e7:d6:35:64:4b:fe:75:31:
02:ff:eb:cf:99:e5:55:cf:7c:a7:7a:2f:c1:74:ed:
44:ae:66:36:12:82:75:50:c1:86:16:68:2d:4f:c0:
14:a7:0a:ad:81:fc:8e:d9:77:32:11:67:af:8f:f1:
34:09:c9:ce:c6:a8:c0:88:45:e7:a4:94:26:8c:7a:
18:b9:16:2f:69:52:55:7f:fe:f1:90:c2:7b:87:dc:
dc:23:dc:c1:23:e7:d0:bc:8c:1d:9b:a1:e9:dd:23:
48:55:83:27:b1:8f:07:df:f1:4e:b5:1b:47:bf:b8:
59:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:42:9B:D7:62:07:BD:24:F4:FC:96:86:D7:B3:51:2A:3A:01:10:C5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e3139302e302f32332d3234203d3e203439373033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.190.0/23
Signature Algorithm: sha256WithRSAEncryption
34:53:89:94:0a:84:94:83:7b:5a:e8:20:34:72:37:2a:37:da:
80:9e:ef:43:12:76:b5:f3:63:c0:8a:26:45:6d:1f:70:3c:01:
03:05:94:fc:7d:cb:82:d8:31:6b:32:51:28:12:f2:5b:32:4c:
c0:da:0d:67:7c:54:44:9a:40:33:9b:af:06:46:2b:9f:7b:4b:
db:7e:15:07:38:ab:23:f5:23:2e:20:fd:fb:85:64:23:b4:c6:
ef:34:1a:d6:d1:01:aa:5c:a3:2b:ec:b7:cc:db:bf:93:c6:44:
e3:c3:97:b6:07:db:5b:50:0c:a4:ad:4a:a6:c0:3f:99:42:fb:
ab:9f:e7:2d:8b:98:b6:ee:a9:d0:08:9f:a1:68:55:61:61:ea:
65:cd:d0:1b:2c:06:ae:ff:d9:12:3c:0c:05:ee:1f:ac:60:e9:
39:09:e1:b9:f6:b2:c6:05:90:4c:a5:61:e3:d1:b5:df:8c:5a:
fa:5b:1e:99:39:f1:f4:c8:fd:61:ae:e7:8d:40:36:de:f8:b3:
49:59:c9:8e:58:ae:f7:58:07:dc:a0:50:a2:68:7b:f0:88:c0:
d2:de:6e:9d:f1:81:4f:77:b3:da:48:d1:7a:06:c0:6a:41:a4:
98:85:3b:48:65:55:67:39:ab:fd:ae:c4:a5:f6:4b:78:66:96:
3b:c4:fa:c4
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUe/JnGV4Ie6Jzuadf2dJe+LFK35EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAzMDQwODUxNDJaFw0yNTAzMDMwODU2NDJaMDMxMTAvBgNV
BAMTKEQwNDI5QkQ3NjIwN0JEMjRGNEZDOTY4NkQ3QjM1MTJBM0EwMTEwQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9MiWziUonV/lPldNfyYr8yq9c
zeJjOOFdwnZkD1A/vzfM2FJPOrsrKiTwJ5W2LNdHa2VCS0ZGR+TsgdTZSFJwInlQ
Ebe7PTlpnwDvee2UCi2aVRrsGxueFIcWqhuqv46XbHq+4JPhL8LN+2tR1dzyXJcv
STsKZEcqhotBh/j6GrleY1r4sbINsjb0usLn1jVkS/51MQL/68+Z5VXPfKd6L8F0
7USuZjYSgnVQwYYWaC1PwBSnCq2B/I7ZdzIRZ6+P8TQJyc7GqMCIReeklCaMehi5
Fi9pUlV//vGQwnuH3Nwj3MEj59C8jB2boendI0hVgyexjwff8U61G0e/uFmXAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU0EKb12IHvST0/JaG17NRKjoBEMUwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzEzNTMyMmUzMTM5
MzAyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM5MzczMDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
LZi+MA0GCSqGSIb3DQEBCwUAA4IBAQA0U4mUCoSUg3ta6CA0cjcqN9qAnu9DEna1
82PAiiZFbR9wPAEDBZT8fcuC2DFrMlEoEvJbMkzA2g1nfFREmkAzm68GRiufe0vb
fhUHOKsj9SMuIP37hWQjtMbvNBrW0QGqXKMr7LfM27+TxkTjw5e2B9tbUAykrUqm
wD+ZQvurn+cti5i27qnQCJ+haFVhYeplzdAbLAau/9kSPAwF7h+sYOk5CeG59rLG
BZBMpWHj0bXfjFr6Wx6ZOfH0yP1hrueNQDbe+LNJWcmOWK73WAfcoFCiaHvwiMDS
3m6d8YFPd7PaSNF6BsBqQaSYhTtIZVVnOav9rsSl9kt4ZpY7xPrE
-----END CERTIFICATE-----
Generated at Tue May 21 09:23:50 2024 by rpki-client on console-ams.rpki-client.org