Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e3134362e3137362e302f32312d3332203d3e203430303231.roa
File: 36322e3134362e3137362e302f32312d3332203d3e203430303231.roa (raw, json)
Hash identifier: /g9Z/eeVq/W4qmJyijI0HV8uST+vnQd4ytc2fz8NbPU=
Subject key identifier: 3B:BA:E9:6E:09:CA:B6:D8:DA:0F:5F:28:03:F1:C5:59:76:0A:46:D0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 05F36D8F45769EAD2E867E9F44872D523B89370A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e3134362e3137362e302f32312d3332203d3e203430303231.roa
Signing time: Mon 26 Feb 2024 08:53:10 +0000
ROA not before: Mon 26 Feb 2024 08:48:10 +0000
ROA not after: Mon 24 Feb 2025 08:53:10 +0000
asID: 40021
IP address blocks: 62.146.176.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:f3:6d:8f:45:76:9e:ad:2e:86:7e:9f:44:87:2d:52:3b:89:37:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:10 2024 GMT
Not After : Feb 24 08:53:10 2025 GMT
Subject: CN=3BBAE96E09CAB6D8DA0F5F2803F1C559760A46D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4a:d4:de:bd:5f:d3:d7:41:e8:6b:59:da:51:
db:d2:0c:7a:2f:b2:84:f7:c4:dd:2a:da:d9:86:e1:
9d:b1:2a:92:5d:48:7f:40:88:6b:0b:5d:b4:07:76:
4d:cd:ba:fd:92:3a:95:5e:36:63:ca:3c:70:22:89:
2f:f1:fc:96:64:db:fb:29:cc:62:bd:f8:1d:f4:d6:
ff:20:93:28:ec:2d:fa:8a:ce:b1:a5:c2:27:58:80:
cc:d0:c8:9a:22:2a:24:70:91:43:92:c5:d2:d9:8a:
68:69:69:1c:9d:65:68:c2:8c:1a:0b:66:29:e3:c8:
a0:6f:f6:e6:43:7a:b1:6b:96:1e:0b:f3:d7:33:90:
74:1f:9b:bb:9a:0d:5a:aa:b6:d9:cc:8e:df:af:f3:
53:a5:a1:93:18:ce:90:62:d7:57:1d:1a:aa:10:85:
4d:dd:81:45:22:d8:ee:7d:72:cd:ec:cb:87:50:eb:
bd:e6:d4:29:66:a4:76:1a:21:a6:b6:62:85:08:c5:
39:0d:83:60:15:77:93:4e:c9:71:ce:e2:c2:93:0a:
ab:ad:2a:ba:8b:3a:ec:7a:7b:c0:7f:b4:86:c8:f3:
66:7c:f6:b3:2f:fa:9f:27:5a:2c:4c:1d:f7:d7:bd:
ac:9b:1b:3d:48:35:83:38:63:92:cd:d8:ed:50:cd:
8b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BA:E9:6E:09:CA:B6:D8:DA:0F:5F:28:03:F1:C5:59:76:0A:46:D0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e3134362e3137362e302f32312d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.146.176.0/21
Signature Algorithm: sha256WithRSAEncryption
10:46:95:b3:f1:cc:ad:84:fb:06:b0:96:49:a5:90:b1:41:01:
e6:9c:a4:e4:f7:c0:e9:a6:57:56:83:f2:e0:32:01:f2:8f:73:
dd:06:bd:5e:0c:3a:99:74:92:ec:97:84:29:fe:e9:0f:58:1c:
2f:d2:7b:1d:a0:f2:7d:ad:91:c9:97:94:f4:85:07:63:b3:02:
52:da:6e:b7:07:b0:ba:b8:94:9e:92:25:4c:b2:1e:89:7d:cc:
5e:01:14:54:ff:1c:72:03:3e:f7:9e:e3:3f:16:3a:91:1b:01:
9d:79:27:ef:f2:1d:8a:9e:cf:3b:d8:92:47:10:07:81:52:bc:
3e:7f:ec:d0:ca:22:49:5b:ed:45:b8:b2:de:3d:d1:e1:d6:f9:
d2:6e:96:29:82:8b:16:4c:5a:e4:42:fc:7b:d7:eb:b3:e2:f4:
99:93:c4:4f:ab:17:c0:fd:d1:52:6b:b2:54:eb:a8:dc:a1:3d:
b1:b8:5c:3b:8e:94:75:55:e5:bd:e5:f7:09:89:2b:d1:4a:f8:
82:0f:e1:03:c3:c9:73:a8:ee:74:c8:18:82:09:c5:f7:cb:2f:
1c:d9:3d:35:88:36:e4:9b:0a:e4:df:32:2d:d2:86:ef:96:5a:
51:b1:d2:b5:ab:7b:29:fd:45:b7:69:63:c6:2f:11:8a:f1:8a:
d6:e1:11:69
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUBfNtj0V2nq0uhn6fRIctUjuJNwowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAyMjYwODQ4MTBaFw0yNTAyMjQwODUzMTBaMDMxMTAvBgNV
BAMTKDNCQkFFOTZFMDlDQUI2RDhEQTBGNUYyODAzRjFDNTU5NzYwQTQ2RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtStTevV/T10Hoa1naUdvSDHov
soT3xN0q2tmG4Z2xKpJdSH9AiGsLXbQHdk3Nuv2SOpVeNmPKPHAiiS/x/JZk2/sp
zGK9+B301v8gkyjsLfqKzrGlwidYgMzQyJoiKiRwkUOSxdLZimhpaRydZWjCjBoL
ZinjyKBv9uZDerFrlh4L89czkHQfm7uaDVqqttnMjt+v81OloZMYzpBi11cdGqoQ
hU3dgUUi2O59cs3sy4dQ673m1ClmpHYaIaa2YoUIxTkNg2AVd5NOyXHO4sKTCqut
KrqLOux6e8B/tIbI82Z89rMv+p8nWixMHffXvaybGz1INYM4Y5LN2O1QzYsDAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUO7rpbgnKttjaD18oA/HFWXYKRtAwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzYzMjJlMzEzNDM2MmUzMTM3
MzYyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzNDMwMzAzMjMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
PpKwMA0GCSqGSIb3DQEBCwUAA4IBAQAQRpWz8cythPsGsJZJpZCxQQHmnKTk98Dp
pldWg/LgMgHyj3PdBr1eDDqZdJLsl4Qp/ukPWBwv0nsdoPJ9rZHJl5T0hQdjswJS
2m63B7C6uJSekiVMsh6JfcxeARRU/xxyAz73nuM/FjqRGwGdeSfv8h2Kns872JJH
EAeBUrw+f+zQyiJJW+1FuLLePdHh1vnSbpYpgosWTFrkQvx71+uz4vSZk8RPqxfA
/dFSa7JU66jcoT2xuFw7jpR1VeW95fcJiSvRSviCD+EDw8lzqO50yBiCCcX3yy8c
2T01iDbkmwrk3zIt0obvllpRsdK1q3sp/UW3aWPGLxGK8YrW4RFp
-----END CERTIFICATE-----
Generated at Tue May 21 23:31:25 2024 by rpki-client on console-ams.rpki-client.org