Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3233302e302f32332d3332203d3e203430303231.roa
File: 38352e3233392e3233302e302f32332d3332203d3e203430303231.roa (raw, json)
Hash identifier: Nx5f3bGyhikEkTefKuCdKEio9WKdkYMg3GnUohjP/ng=
Subject key identifier: C4:E8:13:4B:8B:AF:BC:5F:53:78:42:78:E8:D2:3A:AD:F9:C6:7B:8C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0115316844C1DD47FF05440C2A1E1247FC562DAF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3233302e302f32332d3332203d3e203430303231.roa
Signing time: Mon 26 Feb 2024 08:53:16 +0000
ROA not before: Mon 26 Feb 2024 08:48:16 +0000
ROA not after: Mon 24 Feb 2025 08:53:16 +0000
asID: 40021
IP address blocks: 85.239.230.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:15:31:68:44:c1:dd:47:ff:05:44:0c:2a:1e:12:47:fc:56:2d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:16 2024 GMT
Not After : Feb 24 08:53:16 2025 GMT
Subject: CN=C4E8134B8BAFBC5F53784278E8D23AADF9C67B8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:bc:23:83:48:8d:ad:eb:cb:e6:0e:d3:87:
7f:79:ce:af:3f:3e:28:b2:77:13:73:20:01:70:8a:
61:ce:d3:cd:66:a9:69:03:b3:7a:f5:e0:42:c3:1b:
ce:37:0d:03:91:87:ed:b1:41:3e:14:f6:6c:21:fe:
16:e8:43:2d:76:3e:68:b8:25:ea:af:c1:3e:8b:e5:
f1:12:ba:52:50:71:1c:73:8d:08:1f:fd:d6:ab:2c:
45:d3:43:cb:62:6a:4d:0a:42:2c:84:b7:b4:b3:cf:
36:f0:9e:8c:ad:e9:e4:d7:1b:9f:c3:8c:bd:e0:fb:
4b:ca:77:15:83:b4:fa:3f:a9:02:20:1c:94:11:1e:
07:0d:58:77:ea:18:e2:23:60:07:c9:63:63:aa:2f:
58:36:42:68:f9:80:d1:c6:ca:c7:a1:75:9d:15:d1:
3b:3d:49:03:d6:36:64:19:17:38:f4:21:f4:6a:8c:
91:fc:ab:32:e5:1d:89:f4:e0:76:d8:c0:88:7e:31:
8c:fe:91:72:d2:71:e3:0b:7e:11:9e:06:c2:05:42:
34:39:5b:3e:3f:d9:59:ad:c4:7d:ed:7c:c7:8a:97:
87:19:ac:38:37:02:ec:c2:f8:70:44:47:c0:f3:81:
71:5a:21:bc:10:4a:18:7b:84:4a:ea:66:c2:64:5e:
f5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E8:13:4B:8B:AF:BC:5F:53:78:42:78:E8:D2:3A:AD:F9:C6:7B:8C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3233302e302f32332d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.230.0/23
Signature Algorithm: sha256WithRSAEncryption
09:c9:f3:b9:b3:98:7b:5f:9d:22:38:6f:cd:77:40:11:5c:82:
73:59:81:65:45:8b:ca:c3:1f:31:ad:48:6a:0a:4b:df:25:9a:
15:1d:db:2f:e7:f4:60:a9:93:c6:43:10:3c:d6:aa:83:05:37:
af:3e:4b:d3:01:8b:66:55:75:1b:21:d5:0b:53:e1:bd:6d:2f:
1c:30:fb:fb:52:9e:14:6b:b0:bd:25:2e:bb:dc:66:64:85:35:
5c:e7:5f:bb:8f:57:6f:84:d3:0b:c0:fa:72:73:ca:f6:ae:e9:
82:47:3f:61:11:82:15:a6:29:8d:28:48:62:27:df:0b:10:2d:
e3:ac:ca:37:fd:6e:41:26:ff:45:ee:c3:8d:2d:d0:97:bb:53:
cc:e1:14:80:a9:aa:b5:ba:c3:40:3d:a0:cc:4a:c5:85:f7:26:
b9:12:d1:91:4d:d0:e9:ee:4f:5c:2e:a0:ac:6c:09:cd:27:e7:
0f:40:51:ac:bd:23:b4:8b:3e:b1:7e:61:e6:02:5a:8c:bb:91:
44:82:eb:32:b7:88:9d:f6:1a:63:02:23:04:dc:6c:a7:cf:33:
bd:d7:cd:e7:59:23:29:d6:29:6a:81:e9:7e:6f:b3:6e:bb:0c:
4f:f3:4f:0f:f1:c1:64:d8:ae:16:de:b9:4c:3f:67:15:6a:85:
1d:4a:05:cc
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUARUxaETB3Uf/BUQMKh4SR/xWLa8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAyMjYwODQ4MTZaFw0yNTAyMjQwODUzMTZaMDMxMTAvBgNV
BAMTKEM0RTgxMzRCOEJBRkJDNUY1Mzc4NDI3OEU4RDIzQUFERjlDNjdCOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ1bwjg0iNrevL5g7Th395zq8/
PiiydxNzIAFwimHO081mqWkDs3r14ELDG843DQORh+2xQT4U9mwh/hboQy12Pmi4
JeqvwT6L5fESulJQcRxzjQgf/darLEXTQ8tiak0KQiyEt7Szzzbwnoyt6eTXG5/D
jL3g+0vKdxWDtPo/qQIgHJQRHgcNWHfqGOIjYAfJY2OqL1g2Qmj5gNHGysehdZ0V
0Ts9SQPWNmQZFzj0IfRqjJH8qzLlHYn04HbYwIh+MYz+kXLSceMLfhGeBsIFQjQ5
Wz4/2VmtxH3tfMeKl4cZrDg3AuzC+HBER8DzgXFaIbwQShh7hErqZsJkXvVFAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUxOgTS4uvvF9TeEJ46NI6rfnGe4wwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNTJlMzIzMzM5MmUzMjMz
MzAyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzNDMwMzAzMjMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
Ve/mMA0GCSqGSIb3DQEBCwUAA4IBAQAJyfO5s5h7X50iOG/Nd0ARXIJzWYFlRYvK
wx8xrUhqCkvfJZoVHdsv5/RgqZPGQxA81qqDBTevPkvTAYtmVXUbIdULU+G9bS8c
MPv7Up4Ua7C9JS673GZkhTVc51+7j1dvhNMLwPpyc8r2rumCRz9hEYIVpimNKEhi
J98LEC3jrMo3/W5BJv9F7sONLdCXu1PM4RSAqaq1usNAPaDMSsWF9ya5EtGRTdDp
7k9cLqCsbAnNJ+cPQFGsvSO0iz6xfmHmAlqMu5FEgusyt4id9hpjAiME3GynzzO9
183nWSMp1ilqgel+b7NuuwxP808P8cFk2K4W3rlMP2cVaoUdSgXM
-----END CERTIFICATE-----
Generated at Tue May 21 09:23:50 2024 by rpki-client on console-ams.rpki-client.org