Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3232392e3234352e302f32342d3332203d3e203531313637.roa
File: 39312e3232392e3234352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: SMJkoJ9h2hdIkWy/PnS2e5PH48rdtxeT8zBsdKH8dRM=
Subject key identifier: 5F:20:44:8D:84:4E:5F:05:3C:54:3C:3B:92:9D:56:1B:6F:E9:58:21
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 17963EA92A4B5D488D16740232F6A003B6BA5973
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3232392e3234352e302f32342d3332203d3e203531313637.roa
Signing time: Wed 28 Aug 2024 14:04:44 +0000
ROA not before: Wed 28 Aug 2024 13:59:44 +0000
ROA not after: Wed 27 Aug 2025 14:04:44 +0000
asID: 51167
IP address blocks: 91.229.245.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:96:3e:a9:2a:4b:5d:48:8d:16:74:02:32:f6:a0:03:b6:ba:59:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 28 13:59:44 2024 GMT
Not After : Aug 27 14:04:44 2025 GMT
Subject: CN=5F20448D844E5F053C543C3B929D561B6FE95821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:31:f8:ed:ab:6c:7d:4e:bc:a2:da:a0:f3:a2:
ef:f7:9a:c2:0f:f6:fb:e1:82:eb:69:50:19:53:08:
c7:0c:3f:3e:fd:8c:6b:9b:86:7e:cc:bf:89:73:40:
05:41:1c:9d:04:e3:e1:2b:ec:01:80:5d:5a:70:44:
22:ed:39:7c:71:8d:08:3a:78:96:38:56:4c:4c:77:
06:c5:ad:aa:56:bd:eb:6f:64:6b:3d:ae:d2:26:22:
4d:6a:e2:32:34:75:52:1d:0b:3a:e1:5c:4f:85:d0:
da:43:31:70:2e:e8:7b:90:ff:78:1c:0a:33:2e:ab:
9f:ce:2d:f0:43:e3:a2:0f:b4:a5:00:c5:8b:28:91:
c7:44:90:a0:62:d1:aa:04:c3:b9:46:aa:f8:e9:9c:
d9:7c:18:96:c6:8a:07:25:d6:e2:e3:fb:66:aa:48:
2b:54:17:5c:18:f5:d0:9f:c9:39:f7:01:04:2d:3d:
a0:b9:9b:f5:12:87:63:d7:d5:f8:5a:84:eb:11:f7:
57:8c:fd:8b:de:34:ce:9d:81:e6:57:f4:21:ee:a8:
85:1f:10:62:18:c3:7b:92:b5:48:0e:3c:7b:44:48:
68:7b:aa:e4:0b:bb:07:e1:96:5e:ca:eb:19:8f:d6:
ee:9b:f9:38:20:39:63:fc:f0:d7:05:09:02:02:e6:
56:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:20:44:8D:84:4E:5F:05:3C:54:3C:3B:92:9D:56:1B:6F:E9:58:21
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3232392e3234352e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.245.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ce:94:1e:d2:03:14:ef:e0:20:d9:e9:c1:3d:ea:33:9e:c9:
43:6f:8f:72:d2:c3:7c:fe:0e:88:9d:c5:e0:49:78:81:1e:a2:
c9:9f:59:9b:85:69:41:b0:26:cc:d9:e9:21:43:85:0b:6b:b3:
66:e1:65:36:56:2c:ab:32:3f:09:1d:15:d2:64:e8:7b:94:8b:
36:b9:0b:04:77:5b:d7:d7:1f:ae:da:48:66:0e:5a:2a:5a:47:
dd:20:7b:2f:bb:9e:a0:34:74:64:b4:bb:84:85:d1:27:90:ba:
ac:8a:5e:33:58:0c:ad:13:f1:70:4a:f1:8d:d4:8a:a8:91:3e:
7a:b4:1a:35:20:c1:49:17:eb:94:ac:ef:42:7a:42:8c:fa:0a:
16:b9:9b:a0:ae:3e:8c:88:da:47:2f:da:da:47:60:3f:21:f9:
b3:56:74:48:3f:44:6d:c0:42:1c:cd:6e:4d:8d:8e:81:ae:7a:
04:7f:89:f1:9d:cf:b5:ce:37:a9:f4:ff:ec:0a:0f:ec:67:04:
01:1d:d2:f7:c6:d9:73:04:7a:3e:c0:e2:1c:df:36:b0:31:b0:
45:ec:a2:7d:27:88:1f:9c:fe:c1:5e:6e:a3:d8:b1:14:f2:7e:
fa:40:e5:20:78:23:9e:d6:77:32:a6:f5:0f:3c:38:ea:db:fe:
c6:d7:a4:bc
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUF5Y+qSpLXUiNFnQCMvagA7a6WXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDA4MjgxMzU5NDRaFw0yNTA4MjcxNDA0NDRaMDMxMTAvBgNV
BAMTKDVGMjA0NDhEODQ0RTVGMDUzQzU0M0MzQjkyOUQ1NjFCNkZFOTU4MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0Mfjtq2x9Tryi2qDzou/3msIP
9vvhgutpUBlTCMcMPz79jGubhn7Mv4lzQAVBHJ0E4+Er7AGAXVpwRCLtOXxxjQg6
eJY4VkxMdwbFrapWvetvZGs9rtImIk1q4jI0dVIdCzrhXE+F0NpDMXAu6HuQ/3gc
CjMuq5/OLfBD46IPtKUAxYsokcdEkKBi0aoEw7lGqvjpnNl8GJbGigcl1uLj+2aq
SCtUF1wY9dCfyTn3AQQtPaC5m/USh2PX1fhahOsR91eM/YveNM6dgeZX9CHuqIUf
EGIYw3uStUgOPHtESGh7quQLuwfhll7K6xmP1u6b+TggOWP88NcFCQIC5laBAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUXyBEjYROXwU8VDw7kp1WG2/pWCEwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzkzMTJlMzIzMjM5MmUzMjM0
MzUyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
W+X1MA0GCSqGSIb3DQEBCwUAA4IBAQBHzpQe0gMU7+Ag2enBPeoznslDb49y0sN8
/g6IncXgSXiBHqLJn1mbhWlBsCbM2ekhQ4ULa7Nm4WU2ViyrMj8JHRXSZOh7lIs2
uQsEd1vX1x+u2khmDloqWkfdIHsvu56gNHRktLuEhdEnkLqsil4zWAytE/FwSvGN
1IqokT56tBo1IMFJF+uUrO9CekKM+goWuZugrj6MiNpHL9raR2A/IfmzVnRIP0Rt
wEIczW5NjY6BrnoEf4nxnc+1zjep9P/sCg/sZwQBHdL3xtlzBHo+wOIc3zawMbBF
7KJ9J4gfnP7BXm6j2LEU8n76QOUgeCOe1ncypvUPPDjq2/7G16S8
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:04 2024 by rpki-client on console-fra.rpki-client.org