Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e34372e302f32342d3234203d3e203534323532.roa
File: 34352e3135322e34372e302f32342d3234203d3e203534323532.roa (raw, json)
Hash identifier: KIc4haYv6qIaAWECqoTLkhvwfm1XJei8HSDO1fsanTY=
Subject key identifier: C5:32:03:DC:19:AE:66:B9:42:5E:BF:4E:9D:FC:69:60:A3:E6:E6:DF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 62388D52E065DCEA0574B9ADDA235D81BC88A7EE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e34372e302f32342d3234203d3e203534323532.roa
Signing time: Mon 26 Feb 2024 08:53:29 +0000
ROA not before: Mon 26 Feb 2024 08:48:29 +0000
ROA not after: Mon 24 Feb 2025 08:53:29 +0000
asID: 54252
IP address blocks: 45.152.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:38:8d:52:e0:65:dc:ea:05:74:b9:ad:da:23:5d:81:bc:88:a7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:29 2024 GMT
Not After : Feb 24 08:53:29 2025 GMT
Subject: CN=C53203DC19AE66B9425EBF4E9DFC6960A3E6E6DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f1:e9:ec:81:73:01:19:91:7d:f8:44:ee:0f:
d7:2e:ab:67:54:b5:b3:f6:03:fb:59:41:ca:f6:95:
0a:d7:46:bb:0d:c5:a6:d1:42:7a:96:ef:2f:24:60:
30:3a:44:be:d8:ea:f9:46:e7:3f:e3:69:2b:75:81:
07:fd:e1:d1:4c:d3:a9:a4:57:dc:bb:af:aa:4b:7d:
05:9f:c9:c9:b4:8e:b7:33:55:79:10:6a:1c:cc:a4:
c7:87:58:92:f2:82:4d:55:cc:f8:5c:f2:96:fd:5a:
68:0a:69:c7:0e:a8:31:72:ed:52:42:87:0e:62:c2:
1e:1e:ce:f2:16:3c:f0:59:fa:87:7f:6d:14:52:33:
ca:b1:52:f7:91:86:c5:f6:9c:67:03:82:6e:b7:f8:
31:89:db:09:c2:ae:52:bb:99:13:c7:86:4a:25:13:
d4:20:9c:f4:3d:0e:00:9f:df:6b:26:90:1e:e9:c1:
ab:0e:ad:1e:46:7f:6f:4d:a3:5c:c6:cd:e0:6c:5c:
87:d3:9e:cb:f3:d9:6c:1b:ac:ea:63:99:09:03:f7:
19:48:0d:34:f3:72:a0:59:f6:eb:9a:28:c4:b8:6b:
02:f5:39:a2:2d:a3:4d:d3:ab:57:bb:ad:d1:d9:a1:
48:6a:c4:67:03:9b:af:e0:2b:4a:98:04:0b:29:be:
2b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:32:03:DC:19:AE:66:B9:42:5E:BF:4E:9D:FC:69:60:A3:E6:E6:DF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e34372e302f32342d3234203d3e203534323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.47.0/24
Signature Algorithm: sha256WithRSAEncryption
06:1a:c5:b9:61:1f:72:29:b8:74:2c:23:c3:5f:ec:6e:53:7a:
19:93:45:7c:f6:aa:3e:a3:e9:4d:81:77:98:b7:18:10:fc:df:
93:d4:d9:3d:e3:59:ca:2a:b5:ef:fa:b9:dd:ac:fa:c5:2c:30:
aa:09:0f:b9:76:2e:86:53:83:f1:89:26:de:44:8b:ac:32:3a:
1b:7e:2c:72:ba:bd:09:8e:2e:bc:75:20:85:6f:b6:47:76:d9:
08:85:5e:9d:ba:3d:85:3b:9f:89:9e:59:f5:75:e4:22:5c:ea:
51:42:4d:c7:b3:15:67:fc:80:4c:0c:da:f9:c0:09:51:30:8a:
fa:9a:be:98:3b:de:49:71:12:1f:0f:f2:00:a4:f6:ad:de:c5:
3a:1e:f3:a5:31:09:de:48:7d:b4:ba:69:54:79:6f:b1:35:a4:
0c:bc:f9:17:5a:5b:df:86:7d:f4:ec:da:01:a1:37:45:3a:bf:
42:75:44:6a:f9:f9:c9:b7:9d:ad:27:fc:4a:b2:7f:b7:30:17:
19:8f:23:f2:20:73:17:22:0b:71:f7:f1:41:1e:65:b9:23:84:
9c:34:38:42:37:03:fc:30:3d:94:38:5c:9e:13:36:5d:56:b6:
40:7f:b6:e8:be:a8:69:de:a0:a4:7d:75:74:e2:59:85:35:d3:
49:c9:54:e8
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUYjiNUuBl3OoFdLmt2iNdgbyIp+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAyMjYwODQ4MjlaFw0yNTAyMjQwODUzMjlaMDMxMTAvBgNV
BAMTKEM1MzIwM0RDMTlBRTY2Qjk0MjVFQkY0RTlERkM2OTYwQTNFNkU2REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy8ensgXMBGZF9+ETuD9cuq2dU
tbP2A/tZQcr2lQrXRrsNxabRQnqW7y8kYDA6RL7Y6vlG5z/jaSt1gQf94dFM06mk
V9y7r6pLfQWfycm0jrczVXkQahzMpMeHWJLygk1VzPhc8pb9WmgKaccOqDFy7VJC
hw5iwh4ezvIWPPBZ+od/bRRSM8qxUveRhsX2nGcDgm63+DGJ2wnCrlK7mRPHhkol
E9QgnPQ9DgCf32smkB7pwasOrR5Gf29No1zGzeBsXIfTnsvz2WwbrOpjmQkD9xlI
DTTzcqBZ9uuaKMS4awL1OaIto03Tq1e7rdHZoUhqxGcDm6/gK0qYBAspvisZAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUxTID3BmuZrlCXr9OnfxpYKPm5t8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzEzNTMyMmUzNDM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNDMyMzUzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2Y
LzANBgkqhkiG9w0BAQsFAAOCAQEABhrFuWEfcim4dCwjw1/sblN6GZNFfPaqPqPp
TYF3mLcYEPzfk9TZPeNZyiq17/q53az6xSwwqgkPuXYuhlOD8Ykm3kSLrDI6G34s
crq9CY4uvHUghW+2R3bZCIVenbo9hTufiZ5Z9XXkIlzqUUJNx7MVZ/yATAza+cAJ
UTCK+pq+mDveSXESHw/yAKT2rd7FOh7zpTEJ3kh9tLppVHlvsTWkDLz5F1pb34Z9
9OzaAaE3RTq/QnVEavn5ybedrSf8SrJ/tzAXGY8j8iBzFyILcffxQR5luSOEnDQ4
QjcD/DA9lDhcnhM2XVa2QH+26L6oad6gpH11dOJZhTXTSclU6A==
-----END CERTIFICATE-----
Generated at Wed May 8 11:54:24 2024 by rpki-client on console-fra.rpki-client.org