Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e35302e302f32342d3234203d3e203433323630.roa
File: 38352e3230382e35302e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier: vCNT9VNFRefQnQ6Wt+369O9guwzEMMqs8Ng9K4TTRXE=
Subject key identifier: CA:0C:F1:D4:0A:00:84:C5:D0:C8:FE:25:2A:D6:39:B3:63:DF:41:21
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1CDF4FB259314EEA7C89B5579A8F0A3ABA864EC9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e35302e302f32342d3234203d3e203433323630.roa
Signing time: Fri 20 Sep 2024 14:04:54 +0000
ROA not before: Fri 20 Sep 2024 13:59:54 +0000
ROA not after: Fri 19 Sep 2025 14:04:54 +0000
asID: 43260
IP address blocks: 85.208.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:df:4f:b2:59:31:4e:ea:7c:89:b5:57:9a:8f:0a:3a:ba:86:4e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:54 2024 GMT
Not After : Sep 19 14:04:54 2025 GMT
Subject: CN=CA0CF1D40A0084C5D0C8FE252AD639B363DF4121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:cb:01:90:4e:9f:06:66:83:db:38:45:0c:44:
74:7d:f0:dd:ef:88:c2:93:d5:aa:6e:3a:b0:75:53:
e0:67:f0:7b:e1:f2:5f:68:6c:7a:4e:df:da:b0:c6:
93:dc:59:d0:f5:45:c6:9a:41:ce:c4:71:02:59:04:
8e:69:a5:3a:e4:42:cd:88:40:b4:df:94:a0:9c:df:
8a:40:d0:75:f4:9c:ab:26:f9:13:13:b2:e4:09:23:
43:93:ac:c6:67:ea:cc:5e:82:4c:9b:82:a9:e5:0e:
a1:26:25:3e:3e:21:2f:8c:28:67:87:7d:bd:fe:15:
20:99:c5:99:6b:4f:e9:22:5c:58:16:43:74:87:dc:
3f:72:49:17:ef:44:81:dc:b9:b7:ba:74:2a:e3:79:
17:59:76:4e:7f:08:41:21:24:cb:6e:fa:75:6e:2d:
4d:87:aa:85:7b:6a:7b:4d:bb:5f:a7:c6:d1:99:6e:
6f:60:5b:a4:32:b7:4a:a3:ad:74:a9:77:cf:ea:51:
2f:86:36:7b:ef:5b:6e:b1:ba:92:9b:cd:0d:5e:cc:
ff:26:4a:f5:e5:6f:e0:2e:90:29:b9:c3:83:00:b2:
53:a4:a5:26:ab:9d:f8:15:5f:7c:ff:93:0e:dd:b3:
f3:d3:22:96:7c:bb:27:e1:31:47:1e:84:12:86:d4:
90:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0C:F1:D4:0A:00:84:C5:D0:C8:FE:25:2A:D6:39:B3:63:DF:41:21
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e35302e302f32342d3234203d3e203433323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.50.0/24
Signature Algorithm: sha256WithRSAEncryption
12:79:a5:38:36:7a:10:e0:de:8b:01:c8:ec:81:cb:02:b1:28:
72:90:a3:48:68:7b:af:38:59:69:01:40:ef:13:ec:17:fb:98:
05:64:9e:49:80:6b:83:fd:b5:78:97:3a:ef:d9:2a:78:50:27:
2f:fa:2a:76:d8:4b:b9:28:00:cd:5a:2f:0c:92:4d:f8:47:6a:
ab:47:ae:89:3f:aa:1c:9f:d4:0f:df:20:a8:1e:db:7f:43:2b:
f9:43:e4:98:56:e8:56:33:e7:6b:b1:42:e5:70:91:ff:44:20:
09:65:97:47:2c:6d:76:0b:34:30:ee:0d:00:1f:a2:29:94:6d:
28:af:94:c9:0e:41:38:e8:75:0a:f3:f1:a3:93:f9:8a:31:63:
0e:de:22:a2:3e:0c:c6:1a:b2:d5:42:c7:72:b0:bd:99:e2:ea:
e2:ee:de:46:95:b9:e6:14:69:34:eb:66:d3:cd:91:09:c3:2f:
89:15:a2:80:c7:11:b1:f4:9a:94:bd:7d:7c:f4:e5:a3:e6:d3:
56:ba:6b:da:8f:6a:72:8b:22:a0:5c:37:c1:4f:a6:25:f6:f9:
6e:05:3c:7a:7c:ce:55:07:d8:77:6c:ae:d5:bd:7c:19:c2:62:
9b:71:2c:3a:15:4a:70:52:88:74:59:c8:51:9a:b0:b3:0a:42:
b9:27:0a:6d
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUHN9PslkxTup8ibVXmo8KOrqGTskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDA5MjAxMzU5NTRaFw0yNTA5MTkxNDA0NTRaMDMxMTAvBgNV
BAMTKENBMENGMUQ0MEEwMDg0QzVEMEM4RkUyNTJBRDYzOUIzNjNERjQxMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzywGQTp8GZoPbOEUMRHR98N3v
iMKT1apuOrB1U+Bn8Hvh8l9obHpO39qwxpPcWdD1RcaaQc7EcQJZBI5ppTrkQs2I
QLTflKCc34pA0HX0nKsm+RMTsuQJI0OTrMZn6sxegkybgqnlDqEmJT4+IS+MKGeH
fb3+FSCZxZlrT+kiXFgWQ3SH3D9ySRfvRIHcube6dCrjeRdZdk5/CEEhJMtu+nVu
LU2HqoV7antNu1+nxtGZbm9gW6Qyt0qjrXSpd8/qUS+GNnvvW26xupKbzQ1ezP8m
SvXlb+AukCm5w4MAslOkpSarnfgVX3z/kw7ds/PTIpZ8uyfhMUcehBKG1JCrAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUygzx1AoAhMXQyP4lKtY5s2PfQSEwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNTJlMzIzMDM4MmUzNTMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMzMyMzYzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFXQ
MjANBgkqhkiG9w0BAQsFAAOCAQEAEnmlODZ6EODeiwHI7IHLArEocpCjSGh7rzhZ
aQFA7xPsF/uYBWSeSYBrg/21eJc679kqeFAnL/oqdthLuSgAzVovDJJN+Edqq0eu
iT+qHJ/UD98gqB7bf0Mr+UPkmFboVjPna7FC5XCR/0QgCWWXRyxtdgs0MO4NAB+i
KZRtKK+UyQ5BOOh1CvPxo5P5ijFjDt4ioj4Mxhqy1ULHcrC9meLq4u7eRpW55hRp
NOtm082RCcMviRWigMcRsfSalL19fPTlo+bTVrpr2o9qcosioFw3wU+mJfb5bgU8
enzOVQfYd2yu1b18GcJim3EsOhVKcFKIdFnIUZqwswpCuScKbQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:26 2024 by rpki-client on console-ams.rpki-client.org