Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e31322e302f32342d3332203d3e20313336373837.roa
File: 38362e34382e31322e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: 3b/FYnmUpNU+xHOABY7YOu7iTNa4f+2/5Anmrvja82U=
Subject key identifier: 66:D2:C4:32:EF:41:69:3C:35:CF:9B:C5:13:C9:8A:B8:E6:52:CA:9A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 679979CA73A4BE244326C3CFE415A37722F1B4C5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e31322e302f32342d3332203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:32 +0000
ROA not before: Mon 26 Feb 2024 08:48:32 +0000
ROA not after: Mon 24 Feb 2025 08:53:32 +0000
asID: 136787
IP address blocks: 86.48.12.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:99:79:ca:73:a4:be:24:43:26:c3:cf:e4:15:a3:77:22:f1:b4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:32 2024 GMT
Not After : Feb 24 08:53:32 2025 GMT
Subject: CN=66D2C432EF41693C35CF9BC513C98AB8E652CA9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:d9:ed:30:29:6b:64:a0:00:f2:7d:fc:d6:
60:43:a0:ea:c5:1d:3e:e8:b2:a4:69:e9:63:b6:7f:
3f:ed:3a:f1:9b:4e:bc:72:d0:21:b9:6a:75:87:e5:
90:d6:d0:5d:ee:ed:3c:f5:f0:9b:88:fc:ff:75:a4:
d4:d3:e2:52:9c:e9:58:4e:2a:76:c8:16:02:6f:77:
94:80:aa:fc:2f:ea:65:d1:e5:e0:04:a8:1e:d5:fb:
a3:48:d5:7e:ea:c8:1a:4d:02:b2:9e:23:99:d2:5c:
b1:a6:07:39:50:01:c3:8b:b6:dc:4c:25:ba:7e:96:
0a:66:5c:06:90:1a:27:35:9a:9c:02:e7:35:f1:31:
1f:f7:0c:9a:c1:6f:f8:85:ff:29:21:1a:88:fd:9a:
0d:87:b0:d1:a0:58:13:88:af:7b:40:8b:06:69:a8:
94:17:d4:3a:87:c6:ea:42:88:b7:42:49:d3:8c:24:
6a:f1:98:77:73:69:d3:f6:1b:44:66:5a:6d:ac:86:
0b:54:05:2d:b4:a9:ff:ea:39:ab:a8:94:e9:00:f1:
9c:1e:2b:10:bd:64:95:8d:2b:4f:29:de:c1:2e:b3:
c3:3f:ac:9c:86:dc:80:53:5d:57:fd:69:86:15:61:
03:74:c4:4e:a4:d3:5d:c5:f7:f4:75:9d:95:e6:fa:
51:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D2:C4:32:EF:41:69:3C:35:CF:9B:C5:13:C9:8A:B8:E6:52:CA:9A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e31322e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.48.12.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:05:d4:90:16:6f:ef:8d:09:59:20:76:3f:79:4e:c6:18:b2:
25:7c:00:10:8a:92:e5:22:fa:e8:9b:3f:7d:4b:92:a4:8a:27:
a8:45:20:55:ae:72:a0:52:e5:68:0e:44:17:08:22:fd:26:be:
5a:51:54:e0:d2:b3:3a:46:b8:26:eb:2d:23:50:d1:44:1e:33:
30:d7:18:73:71:91:14:ea:37:f5:42:07:25:25:83:13:e5:71:
c1:af:d8:a8:08:5e:82:0b:9f:35:88:3f:ff:e7:f3:5e:88:45:
07:1b:36:83:e5:8b:d9:85:f7:18:ee:43:03:8c:92:02:3e:9c:
fc:00:71:c7:10:c6:ba:ed:39:a7:ee:8f:09:d6:2f:54:83:4e:
4f:52:30:a0:36:6d:e6:15:72:b4:9b:ab:22:38:e0:d5:5c:7e:
fc:f7:1f:86:1d:07:cc:70:4d:ff:80:0b:0e:06:b1:95:ad:f0:
58:17:02:40:52:a0:37:7c:b5:de:f0:49:40:9b:5c:96:0a:d3:
78:a9:3e:aa:94:9e:72:42:84:6f:23:9d:9c:2a:0d:d3:32:7d:
7e:a9:7c:2c:25:f4:e3:6a:22:85:12:71:03:45:fb:de:3c:ab:
72:aa:3d:ad:bc:1d:cf:78:3b:ec:6e:3d:81:20:08:c4:9e:8d:
bb:a8:29:81
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUZ5l5ynOkviRDJsPP5BWjdyLxtMUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAyMjYwODQ4MzJaFw0yNTAyMjQwODUzMzJaMDMxMTAvBgNV
BAMTKDY2RDJDNDMyRUY0MTY5M0MzNUNGOUJDNTEzQzk4QUI4RTY1MkNBOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4LtntMClrZKAA8n381mBDoOrF
HT7osqRp6WO2fz/tOvGbTrxy0CG5anWH5ZDW0F3u7Tz18JuI/P91pNTT4lKc6VhO
KnbIFgJvd5SAqvwv6mXR5eAEqB7V+6NI1X7qyBpNArKeI5nSXLGmBzlQAcOLttxM
Jbp+lgpmXAaQGic1mpwC5zXxMR/3DJrBb/iF/ykhGoj9mg2HsNGgWBOIr3tAiwZp
qJQX1DqHxupCiLdCSdOMJGrxmHdzadP2G0RmWm2shgtUBS20qf/qOauolOkA8Zwe
KxC9ZJWNK08p3sEus8M/rJyG3IBTXVf9aYYVYQN0xE6k013F9/R1nZXm+lFxAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUZtLEMu9BaTw1z5vFE8mKuOZSypowHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNjJlMzQzODJlMzEzMjJl
MzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFYw
DDANBgkqhkiG9w0BAQsFAAOCAQEAogXUkBZv740JWSB2P3lOxhiyJXwAEIqS5SL6
6Js/fUuSpIonqEUgVa5yoFLlaA5EFwgi/Sa+WlFU4NKzOka4JustI1DRRB4zMNcY
c3GRFOo39UIHJSWDE+Vxwa/YqAheggufNYg//+fzXohFBxs2g+WL2YX3GO5DA4yS
Aj6c/ABxxxDGuu05p+6PCdYvVINOT1IwoDZt5hVytJurIjjg1Vx+/Pcfhh0HzHBN
/4ALDgaxla3wWBcCQFKgN3y13vBJQJtclgrTeKk+qpSeckKEbyOdnCoN0zJ9fql8
LCX042oihRJxA0X73jyrcqo9rbwdz3g77G49gSAIxJ6Nu6gpgQ==
-----END CERTIFICATE-----
Generated at Wed May 8 19:21:54 2024 by rpki-client on console-ams.rpki-client.org