Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e32382e302f32342d3234203d3e20313336373837.roa
File: 34352e38302e32382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: /Ewu4GIOWN1zuGgVuiyrY5wVK9AVkzVVjbDSay17xV8=
Subject key identifier: B1:25:98:C8:44:F1:9A:A9:22:67:F4:6D:58:5A:4F:38:46:63:6A:AE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4231DDACB47D20D351AA1ED7764E9342DF818AFA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e32382e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 20 Oct 2024 14:12:30 +0000
ROA not before: Sun 20 Oct 2024 14:07:30 +0000
ROA not after: Sun 19 Oct 2025 14:12:30 +0000
asID: 136787
IP address blocks: 45.80.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:31:dd:ac:b4:7d:20:d3:51:aa:1e:d7:76:4e:93:42:df:81:8a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 14:07:30 2024 GMT
Not After : Oct 19 14:12:30 2025 GMT
Subject: CN=B12598C844F19AA92267F46D585A4F3846636AAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1a:cd:9b:e7:2d:61:a0:de:a3:26:22:2e:3c:
9e:98:74:6a:3c:3f:11:5e:62:05:c1:4c:f1:d1:8d:
43:e3:44:43:01:0c:1e:b4:f1:5f:e4:7f:f8:7f:24:
4d:49:f5:7c:04:a0:31:5f:92:4e:a6:3e:cc:9c:80:
e5:a5:79:c9:ac:a2:f3:cc:9b:10:9d:cc:66:5a:78:
9f:1e:90:eb:b8:8e:5f:b7:fc:58:94:5b:9c:da:f8:
a9:8f:ee:c4:24:7d:fe:c8:6c:94:22:a9:57:9c:48:
68:7c:e6:0a:7d:de:ac:d4:65:28:45:37:c3:ef:69:
c2:d0:d2:37:48:09:37:70:ec:d8:0f:f8:a7:8c:61:
3a:a3:30:08:ca:26:a3:38:8d:59:35:1d:87:92:a7:
ca:81:d9:64:a3:b9:a6:37:12:72:33:e9:63:ee:1c:
f7:35:a4:de:5d:99:6d:42:49:72:69:93:dc:8a:e8:
af:2c:1d:89:5e:dd:68:0b:47:62:86:36:20:60:ba:
e3:b8:12:3e:ff:36:32:90:19:b4:d1:fc:9c:ba:d9:
17:c3:1c:d1:00:34:2e:43:79:79:4f:c8:da:6b:f3:
ee:8b:fa:5b:c4:a8:0b:00:11:c3:ac:71:3e:78:a4:
79:ea:ce:1f:af:96:54:3a:ed:96:95:c8:6b:8e:eb:
75:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:25:98:C8:44:F1:9A:A9:22:67:F4:6D:58:5A:4F:38:46:63:6A:AE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e32382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.28.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:12:88:a1:a9:b4:83:ec:9c:22:2e:09:62:1c:62:b3:f7:ef:
1d:82:3c:f2:ed:c7:73:6e:26:13:a6:eb:c8:5a:b3:14:42:be:
f7:51:15:38:8f:75:25:41:e0:e5:14:ed:ee:47:a4:af:00:e1:
c2:a3:c3:b7:c0:de:5d:e8:f3:d7:ce:9e:6d:12:b7:57:1b:31:
e8:3f:fe:53:fc:27:20:d5:c8:42:e3:05:74:d2:3d:ad:ec:ad:
7a:1b:26:c0:95:8f:22:5c:e6:74:f1:2c:96:9e:99:46:93:54:
fd:63:8b:5e:3d:1e:60:dc:57:90:aa:5b:66:f0:71:2f:8e:9c:
67:2e:75:96:41:44:1b:7b:c2:c5:60:da:9a:2e:2b:f1:7d:e5:
59:60:11:ba:6b:aa:ac:e3:52:11:41:f3:01:79:38:1c:4d:ee:
7c:59:ad:d9:5d:f9:3c:c5:77:cc:5a:4f:9e:92:59:73:b1:d3:
d1:25:9a:51:7b:be:c9:8b:62:78:b1:40:e3:fb:52:0b:2b:ce:
c0:19:ef:0b:89:d8:4e:f6:81:3e:db:1c:fb:d5:41:77:76:82:
12:0b:a4:88:e1:29:fd:11:41:a1:e1:ed:91:74:1e:9e:8d:32:
e0:da:45:36:bc:2a:da:5a:11:17:14:0e:11:c5:05:ed:80:3d:
50:bb:23:da
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUQjHdrLR9INNRqh7Xdk6TQt+BivowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDEwMjAxNDA3MzBaFw0yNTEwMTkxNDEyMzBaMDMxMTAvBgNV
BAMTKEIxMjU5OEM4NDRGMTlBQTkyMjY3RjQ2RDU4NUE0RjM4NDY2MzZBQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQGs2b5y1hoN6jJiIuPJ6YdGo8
PxFeYgXBTPHRjUPjREMBDB608V/kf/h/JE1J9XwEoDFfkk6mPsycgOWlecmsovPM
mxCdzGZaeJ8ekOu4jl+3/FiUW5za+KmP7sQkff7IbJQiqVecSGh85gp93qzUZShF
N8PvacLQ0jdICTdw7NgP+KeMYTqjMAjKJqM4jVk1HYeSp8qB2WSjuaY3EnIz6WPu
HPc1pN5dmW1CSXJpk9yK6K8sHYle3WgLR2KGNiBguuO4Ej7/NjKQGbTR/Jy62RfD
HNEANC5DeXlPyNpr8+6L+lvEqAsAEcOscT54pHnqzh+vllQ67ZaVyGuO63WfAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUsSWYyETxmqkiZ/RtWFpPOEZjaq4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzgzMDJlMzIzODJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1Q
HDANBgkqhkiG9w0BAQsFAAOCAQEAOhKIoam0g+ycIi4JYhxis/fvHYI88u3Hc24m
E6bryFqzFEK+91EVOI91JUHg5RTt7kekrwDhwqPDt8DeXejz186ebRK3Vxsx6D/+
U/wnINXIQuMFdNI9reytehsmwJWPIlzmdPEslp6ZRpNU/WOLXj0eYNxXkKpbZvBx
L46cZy51lkFEG3vCxWDami4r8X3lWWARumuqrONSEUHzAXk4HE3ufFmt2V35PMV3
zFpPnpJZc7HT0SWaUXu+yYtieLFA4/tSCyvOwBnvC4nYTvaBPtsc+9VBd3aCEguk
iOEp/RFBoeHtkXQeno0y4NpFNrwq2loRFxQOEcUF7YA9ULsj2g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:48 2024 by rpki-client on console-ams.rpki-client.org