Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3234382e302f32332d3332203d3e203430303231.roa
File: 38352e3233392e3234382e302f32332d3332203d3e203430303231.roa (raw, json)
Hash identifier: sW7z2S9Mn5/ovETUhEWHnckQq3lMbUhNtan0LcInOaY=
Subject key identifier: 3F:5F:FE:63:F4:93:D7:95:4F:78:53:29:7A:41:0D:D1:74:4F:0C:D2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4C5521183603FA47113F9BAFC8CAB33DC9BBF919
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3234382e302f32332d3332203d3e203430303231.roa
Signing time: Mon 26 Feb 2024 08:53:22 +0000
ROA not before: Mon 26 Feb 2024 08:48:22 +0000
ROA not after: Mon 24 Feb 2025 08:53:22 +0000
asID: 40021
IP address blocks: 85.239.248.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:55:21:18:36:03:fa:47:11:3f:9b:af:c8:ca:b3:3d:c9:bb:f9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:22 2024 GMT
Not After : Feb 24 08:53:22 2025 GMT
Subject: CN=3F5FFE63F493D7954F7853297A410DD1744F0CD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:da:38:71:82:83:9c:77:02:a5:ab:89:88:cd:
4e:d0:5e:a3:9a:30:5c:2d:67:b1:99:da:64:de:0d:
8f:b8:8d:62:40:c4:44:6a:d7:e6:db:4b:6d:17:9e:
d9:74:93:36:ec:96:37:36:ff:78:19:12:d5:72:32:
44:da:20:86:3d:2e:5e:03:53:9b:93:ca:7f:72:55:
90:22:fa:b0:79:43:98:90:31:1a:47:fd:f1:f4:cc:
38:3a:8a:ac:83:75:0e:49:78:8d:b0:6e:7c:ee:86:
54:16:c6:ff:e2:a2:74:85:d4:5b:10:b7:1d:6b:be:
c4:87:52:4a:a4:a6:f2:37:f7:27:a1:24:0d:11:09:
7d:a6:94:ec:3d:87:f0:9c:0a:ba:51:c6:c5:b7:40:
c0:7f:7d:83:e7:b6:1b:31:69:04:06:ec:62:7e:d2:
c7:45:27:e4:78:0e:d4:31:04:60:77:f8:60:f0:d3:
67:10:72:aa:e6:b5:ad:ed:3f:4b:3c:bb:e8:a5:ad:
b7:e6:45:04:ea:8c:18:74:f3:e0:4a:2d:0f:4c:65:
32:24:66:e6:75:ad:f2:32:a7:c3:d0:b9:fe:c9:2a:
f7:08:4b:39:34:29:df:4c:cb:9b:53:68:ca:88:47:
87:f8:45:8f:95:70:9c:a1:05:e9:51:13:d4:88:85:
9e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5F:FE:63:F4:93:D7:95:4F:78:53:29:7A:41:0D:D1:74:4F:0C:D2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3234382e302f32332d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.248.0/23
Signature Algorithm: sha256WithRSAEncryption
80:83:34:94:78:2d:11:93:d2:5c:8f:4e:dc:34:95:60:3f:23:
12:9d:2f:63:39:cf:f3:ee:2c:d8:d1:3f:f5:54:e6:1f:f9:99:
b8:a9:bf:96:63:ac:8a:40:43:8f:c5:48:b1:b1:5f:70:ce:0c:
f0:56:4c:20:78:90:9b:e2:68:4b:57:24:89:a7:d3:90:38:ae:
dc:ff:08:ea:0a:49:c4:33:09:b9:27:4b:82:e2:a2:2d:e7:5a:
8f:5c:72:fc:cd:dd:40:cf:90:ee:42:b4:a2:3f:2a:39:ec:ee:
ed:32:94:d0:f7:7d:99:b9:e3:c4:24:19:97:c6:e2:4c:6f:f3:
f8:ad:1d:9f:6e:9a:bb:a2:89:a2:42:ea:82:f3:5a:e8:fe:9a:
93:0b:f6:43:76:32:0c:39:c6:61:f9:22:25:8b:8a:0d:6e:91:
75:ef:a4:7e:6d:b3:e0:4e:d9:d8:d5:44:8d:b5:21:bb:c4:32:
a2:00:2d:48:39:9f:98:03:aa:3c:11:ff:c6:39:ab:34:a8:58:
09:4b:da:e5:63:b6:b0:97:65:df:42:5b:b9:12:e7:1a:b1:d3:
fe:a6:3e:34:fc:06:2f:4e:d5:76:c7:6e:36:c4:1f:39:62:a9:
75:e6:db:cc:c0:57:71:55:44:84:6a:97:dd:bd:72:e1:d0:f8:
af:96:d7:21
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUTFUhGDYD+kcRP5uvyMqzPcm7+RkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAyMjYwODQ4MjJaFw0yNTAyMjQwODUzMjJaMDMxMTAvBgNV
BAMTKDNGNUZGRTYzRjQ5M0Q3OTU0Rjc4NTMyOTdBNDEwREQxNzQ0RjBDRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/2jhxgoOcdwKlq4mIzU7QXqOa
MFwtZ7GZ2mTeDY+4jWJAxERq1+bbS20Xntl0kzbsljc2/3gZEtVyMkTaIIY9Ll4D
U5uTyn9yVZAi+rB5Q5iQMRpH/fH0zDg6iqyDdQ5JeI2wbnzuhlQWxv/ionSF1FsQ
tx1rvsSHUkqkpvI39yehJA0RCX2mlOw9h/CcCrpRxsW3QMB/fYPnthsxaQQG7GJ+
0sdFJ+R4DtQxBGB3+GDw02cQcqrmta3tP0s8u+ilrbfmRQTqjBh08+BKLQ9MZTIk
ZuZ1rfIyp8PQuf7JKvcISzk0Kd9My5tTaMqIR4f4RY+VcJyhBelRE9SIhZ5DAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUP1/+Y/ST15VPeFMpekEN0XRPDNIwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNTJlMzIzMzM5MmUzMjM0
MzgyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzNDMwMzAzMjMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
Ve/4MA0GCSqGSIb3DQEBCwUAA4IBAQCAgzSUeC0Rk9Jcj07cNJVgPyMSnS9jOc/z
7izY0T/1VOYf+Zm4qb+WY6yKQEOPxUixsV9wzgzwVkwgeJCb4mhLVySJp9OQOK7c
/wjqCknEMwm5J0uC4qIt51qPXHL8zd1Az5DuQrSiPyo57O7tMpTQ932ZuePEJBmX
xuJMb/P4rR2fbpq7oomiQuqC81ro/pqTC/ZDdjIMOcZh+SIli4oNbpF176R+bbPg
TtnY1USNtSG7xDKiAC1IOZ+YA6o8Ef/GOas0qFgJS9rlY7awl2XfQlu5EucasdP+
pj40/AYvTtV2x242xB85Yql15tvMwFdxVUSEapfdvXLh0Pivltch
-----END CERTIFICATE-----
Generated at Tue May 21 09:23:50 2024 by rpki-client on console-ams.rpki-client.org