Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37372e302f32342d3234203d3e20313336373837.roa
File: 38322e3134392e37372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: elyPuQUnS1Qy2z/s+unjDYqMW2IEQZ3Avv98Mrscg4w=
Subject key identifier: 8C:96:7A:3C:11:B6:57:32:FC:2C:0D:6B:1D:1C:9C:89:18:04:83:0B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7365770DFAD5C48169E8DB52DB9E85682ADE51D5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37372e302f32342d3234203d3e20313336373837.roa
Signing time: Tue 31 Dec 2024 19:44:43 +0000
ROA not before: Tue 31 Dec 2024 19:39:43 +0000
ROA not after: Tue 30 Dec 2025 19:44:43 +0000
asID: 136787
IP address blocks: 82.149.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:65:77:0d:fa:d5:c4:81:69:e8:db:52:db:9e:85:68:2a:de:51:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 31 19:39:43 2024 GMT
Not After : Dec 30 19:44:43 2025 GMT
Subject: CN=8C967A3C11B65732FC2C0D6B1D1C9C891804830B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:00:7f:a7:fd:78:12:ea:a3:ce:e7:0d:67:22:
29:e0:05:83:99:00:96:af:81:d1:c1:93:5b:73:d7:
b9:8b:75:4b:a3:ef:27:d4:b3:41:8e:58:99:a8:b3:
9a:00:19:14:50:a8:1b:14:ea:03:a0:f0:48:72:85:
6d:b3:b4:be:47:4f:0c:40:11:ad:77:be:26:60:b1:
27:7b:08:ff:5b:5d:7e:9c:29:3e:d0:08:95:3d:dc:
5d:d1:61:20:ec:32:e8:d0:6b:f6:fa:d2:84:9f:dc:
69:74:1c:19:53:e9:e2:44:87:d3:53:dd:7c:ac:4f:
f0:56:8d:44:9d:5b:d1:e8:06:11:43:90:53:1a:39:
22:10:a8:7f:1c:44:f3:6f:0b:ce:cd:0e:2a:96:bc:
5e:b3:de:09:6d:ff:d4:5f:91:f0:9d:09:9c:e0:ee:
13:31:77:85:b0:38:c2:f6:2f:c4:bd:49:68:59:f9:
c7:9d:00:79:3b:38:17:02:b7:fc:ff:36:30:34:1f:
90:f2:6f:47:26:e3:80:4e:68:9d:89:c1:02:57:6e:
6c:41:b9:ac:fd:b4:d7:df:9f:6b:60:c6:75:39:77:
74:fa:b6:db:75:c5:d9:fa:83:f7:e0:7a:65:60:2c:
d6:be:64:e4:30:cf:e3:0e:4e:e5:7a:ff:e7:2d:e7:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:96:7A:3C:11:B6:57:32:FC:2C:0D:6B:1D:1C:9C:89:18:04:83:0B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.149.77.0/24
Signature Algorithm: sha256WithRSAEncryption
56:bd:56:fa:b6:41:82:44:e8:3b:0c:61:f4:03:53:41:74:5d:
57:de:6e:51:fe:3e:0f:33:ba:e6:ec:8b:7d:39:1a:3d:4f:05:
05:e8:d4:a1:cc:c8:f1:76:00:12:89:b3:76:0a:f2:ae:62:07:
bb:51:bb:27:7f:7b:0c:b1:60:16:0d:55:99:25:39:2a:61:f7:
97:54:6d:5f:df:af:19:4c:ad:97:c7:97:3a:0b:73:84:3f:e4:
47:97:8c:ff:22:63:25:fe:39:02:90:2e:4d:48:fc:0c:ca:b3:
ee:97:04:d5:ac:79:0b:6b:c9:c9:06:18:0a:f3:81:6d:d7:cb:
eb:a3:92:67:be:5b:d8:d2:36:43:5c:eb:08:7e:c8:3f:e2:9b:
4e:58:d6:db:77:79:fb:ed:c2:79:8d:d4:be:97:25:2c:0a:4d:
4e:7f:07:f3:ee:b0:0e:0d:4b:05:c0:26:3b:94:74:58:8d:ae:
7d:ae:59:79:b8:e9:8c:6c:0c:e2:9b:d4:1d:40:69:e6:0b:b6:
ec:ab:11:5c:6e:f2:32:d1:88:d8:ce:f2:18:4d:3d:c9:2f:4e:
05:00:db:55:f7:e3:74:37:11:3c:8f:28:ee:56:51:83:5a:be:
79:59:60:8e:68:95:99:ed:5e:b5:57:1c:4e:34:17:4a:fc:60:
63:8e:9f:53
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUc2V3DfrVxIFp6NtS256FaCreUdUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDEyMzExOTM5NDNaFw0yNTEyMzAxOTQ0NDNaMDMxMTAvBgNV
BAMTKDhDOTY3QTNDMTFCNjU3MzJGQzJDMEQ2QjFEMUM5Qzg5MTgwNDgzMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcAH+n/XgS6qPO5w1nIingBYOZ
AJavgdHBk1tz17mLdUuj7yfUs0GOWJmos5oAGRRQqBsU6gOg8EhyhW2ztL5HTwxA
Ea13viZgsSd7CP9bXX6cKT7QCJU93F3RYSDsMujQa/b60oSf3Gl0HBlT6eJEh9NT
3XysT/BWjUSdW9HoBhFDkFMaOSIQqH8cRPNvC87NDiqWvF6z3glt/9RfkfCdCZzg
7hMxd4WwOML2L8S9SWhZ+cedAHk7OBcCt/z/NjA0H5Dyb0cm44BOaJ2JwQJXbmxB
uaz9tNffn2tgxnU5d3T6ttt1xdn6g/fgemVgLNa+ZOQwz+MOTuV6/+ct5yWJAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUjJZ6PBG2VzL8LA1rHRyciRgEgwswHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzNDM5MmUzNzM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
UpVNMA0GCSqGSIb3DQEBCwUAA4IBAQBWvVb6tkGCROg7DGH0A1NBdF1X3m5R/j4P
M7rm7It9ORo9TwUF6NShzMjxdgASibN2CvKuYge7Ubsnf3sMsWAWDVWZJTkqYfeX
VG1f368ZTK2Xx5c6C3OEP+RHl4z/ImMl/jkCkC5NSPwMyrPulwTVrHkLa8nJBhgK
84Ft18vro5JnvlvY0jZDXOsIfsg/4ptOWNbbd3n77cJ5jdS+lyUsCk1Ofwfz7rAO
DUsFwCY7lHRYja59rll5uOmMbAzim9QdQGnmC7bsqxFcbvIy0YjYzvIYTT3JL04F
ANtV9+N0NxE8jyjuVlGDWr55WWCOaJWZ7V61VxxONBdK/GBjjp9T
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:37 2025 by rpki-client