Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38342e33392e302f32342d3234203d3e20313336373837.roa
File: 34352e38342e33392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 6eUN4Ymm8cR3zDaYzGvYdNMlTFeXcxbLsV07HnB3bSA=
Subject key identifier: A1:9C:FE:DE:CE:C0:05:51:D4:7F:2C:2C:54:DD:29:B1:CA:83:51:C8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 77B385C5F2F168ED837B3C402A3900F2CCE24D22
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38342e33392e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 31 Oct 2024 14:05:24 +0000
ROA not before: Thu 31 Oct 2024 14:00:24 +0000
ROA not after: Thu 30 Oct 2025 14:05:24 +0000
asID: 136787
IP address blocks: 45.84.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:b3:85:c5:f2:f1:68:ed:83:7b:3c:40:2a:39:00:f2:cc:e2:4d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 31 14:00:24 2024 GMT
Not After : Oct 30 14:05:24 2025 GMT
Subject: CN=A19CFEDECEC00551D47F2C2C54DD29B1CA8351C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:fe:7b:c3:28:7b:fc:e2:88:4f:ee:86:36:
8d:1d:98:f5:2b:1e:90:4c:6b:13:c2:6c:d1:2e:07:
5a:03:a2:40:55:45:d9:21:33:43:58:ee:2a:b6:f6:
0b:dd:38:95:d9:ba:5d:6d:92:98:f6:29:36:9d:72:
5b:0b:99:6c:8c:bb:2c:2d:9b:ed:ec:56:8c:aa:e1:
bc:69:94:e9:ba:50:17:61:5b:96:b7:b1:31:7e:a8:
84:fe:30:18:e3:dd:c4:6b:83:33:12:2c:84:cb:c3:
81:66:9b:52:c2:ef:3a:03:bd:80:8f:9a:f6:d1:3f:
44:e3:53:5f:3e:a0:72:74:b1:a5:4b:ce:c9:38:36:
17:17:43:8a:08:19:f2:ce:af:8a:e4:bb:9e:64:81:
50:c4:19:13:38:88:7c:e9:d7:cf:c4:5c:ae:3b:91:
03:d8:5d:35:40:5c:1f:b5:a6:46:f1:c0:1c:99:cf:
42:91:c8:9d:1c:11:9f:78:eb:d5:fd:07:3f:f3:8f:
a5:8a:cf:87:77:54:0d:c1:ac:d3:54:5f:ea:47:b9:
0e:e4:e9:04:fe:62:87:4d:4d:10:6b:80:8c:0f:bf:
6c:ff:f6:ff:88:02:32:8a:f5:4c:85:3f:2b:ad:9d:
bf:1f:e4:77:80:46:cd:8c:3f:34:aa:3e:9b:41:b4:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9C:FE:DE:CE:C0:05:51:D4:7F:2C:2C:54:DD:29:B1:CA:83:51:C8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38342e33392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.39.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ba:3e:43:87:6b:e5:b5:5f:b7:f4:77:ea:43:52:20:82:29:
75:d1:fd:97:ca:4c:a2:22:05:59:13:1b:b0:ea:55:d6:94:d9:
4d:76:81:6d:52:59:1d:21:42:bc:dc:7e:7d:45:18:dc:d4:3c:
14:76:a9:63:64:06:f1:e1:50:ca:61:4b:b6:9e:45:8c:e9:ee:
3a:e8:0e:15:9c:dc:74:84:46:33:e6:13:5d:e4:35:93:36:38:
67:42:3a:fc:f2:83:74:37:57:48:19:d7:8d:f5:6a:96:11:9f:
c8:d7:3a:90:76:4e:02:61:63:f8:7b:71:42:e7:8d:40:0c:7d:
32:cc:5b:aa:a4:ac:0c:42:aa:53:29:bc:b8:86:69:d3:c4:7a:
2b:59:24:1b:8e:4a:48:55:ad:53:8e:08:91:7c:8e:2d:c0:b5:
24:40:e3:3d:7c:5f:e8:bf:67:4f:6d:23:1e:18:70:48:48:05:
f5:f8:7e:6d:b2:b1:fa:14:17:c0:22:0b:3d:b8:8d:6a:2a:78:
34:90:fa:a8:b5:82:e9:dd:64:76:1c:e1:1f:1a:ac:bb:44:56:
f0:93:d6:0e:d4:75:34:76:00:52:02:1b:23:3a:86:36:31:24:
4c:2b:cf:b9:f1:ae:5a:27:20:0d:fc:bd:3e:5c:74:68:1f:2e:
d3:2f:c9:40
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUd7OFxfLxaO2DezxAKjkA8sziTSIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDEwMzExNDAwMjRaFw0yNTEwMzAxNDA1MjRaMDMxMTAvBgNV
BAMTKEExOUNGRURFQ0VDMDA1NTFENDdGMkMyQzU0REQyOUIxQ0E4MzUxQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCvP57wyh7/OKIT+6GNo0dmPUr
HpBMaxPCbNEuB1oDokBVRdkhM0NY7iq29gvdOJXZul1tkpj2KTadclsLmWyMuywt
m+3sVoyq4bxplOm6UBdhW5a3sTF+qIT+MBjj3cRrgzMSLITLw4Fmm1LC7zoDvYCP
mvbRP0TjU18+oHJ0saVLzsk4NhcXQ4oIGfLOr4rku55kgVDEGRM4iHzp18/EXK47
kQPYXTVAXB+1pkbxwByZz0KRyJ0cEZ9469X9Bz/zj6WKz4d3VA3BrNNUX+pHuQ7k
6QT+YodNTRBrgIwPv2z/9v+IAjKK9UyFPyutnb8f5HeARs2MPzSqPptBtEGlAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUoZz+3s7ABVHUfywsVN0pscqDUcgwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzgzNDJlMzMzOTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1U
JzANBgkqhkiG9w0BAQsFAAOCAQEAIbo+Q4dr5bVft/R36kNSIIIpddH9l8pMoiIF
WRMbsOpV1pTZTXaBbVJZHSFCvNx+fUUY3NQ8FHapY2QG8eFQymFLtp5FjOnuOugO
FZzcdIRGM+YTXeQ1kzY4Z0I6/PKDdDdXSBnXjfVqlhGfyNc6kHZOAmFj+HtxQueN
QAx9MsxbqqSsDEKqUym8uIZp08R6K1kkG45KSFWtU44IkXyOLcC1JEDjPXxf6L9n
T20jHhhwSEgF9fh+bbKx+hQXwCILPbiNaip4NJD6qLWC6d1kdhzhHxqsu0RW8JPW
DtR1NHYAUgIbIzqGNjEkTCvPufGuWicgDfy9Plx0aB8u0y/JQA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:04 2024 by rpki-client on console-fra.rpki-client.org