Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3134302e31302e302f32342d3332203d3e20313336373837.roa
File: 39342e3134302e31302e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: hQN3ZyqXYHQami4F7LhySE9j/ofViVz+4xDSnRRYbJI=
Subject key identifier: C6:92:70:26:5B:05:5A:48:E2:0E:81:D2:05:53:4E:CC:98:80:F0:47
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3014F5A094AEEF6530770603BD2C7402CFFE99D0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3134302e31302e302f32342d3332203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:31 +0000
ROA not before: Mon 26 Feb 2024 08:48:31 +0000
ROA not after: Mon 24 Feb 2025 08:53:31 +0000
asID: 136787
IP address blocks: 94.140.10.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:14:f5:a0:94:ae:ef:65:30:77:06:03:bd:2c:74:02:cf:fe:99:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:31 2024 GMT
Not After : Feb 24 08:53:31 2025 GMT
Subject: CN=C69270265B055A48E20E81D205534ECC9880F047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a7:1c:f7:a4:94:4e:cf:29:74:66:7a:69:5b:
89:59:0e:da:66:ca:43:1e:19:ed:6a:54:3b:45:14:
c5:b1:8a:ee:04:39:17:a2:b2:9d:f2:2c:89:22:96:
cd:10:58:47:ab:8a:12:78:b8:c8:81:e7:24:11:12:
4e:d0:2a:13:5c:bc:ba:a7:88:46:33:b0:2a:06:0b:
de:be:81:47:19:ea:a9:4e:5e:74:fc:d0:f7:a1:cf:
27:32:e4:ab:4c:91:a1:17:22:fc:46:e9:e5:0d:cb:
03:88:2c:f7:9b:b5:1c:b4:25:35:c3:bf:a5:4d:83:
d1:11:9a:b3:18:55:e9:55:19:e0:55:20:92:92:25:
7a:4e:38:5e:c6:db:a4:fc:39:02:40:9f:ad:86:9c:
10:7a:99:6a:0c:34:65:86:96:4a:ab:5d:ae:c4:a5:
2e:b6:2e:90:3c:2d:c1:89:25:50:6b:0b:03:55:ba:
93:a2:71:71:f5:29:28:6b:2b:d0:d5:ce:95:b5:86:
00:de:1a:73:fc:7d:81:d2:ae:55:8c:15:5c:69:5c:
af:bd:e6:22:6c:38:fb:1e:41:2c:40:06:31:8b:6d:
1a:bc:f0:5c:35:35:31:13:18:ba:54:cc:56:72:98:
e1:c6:f3:fe:9b:50:76:7f:13:19:8e:76:e8:07:0a:
a3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:92:70:26:5B:05:5A:48:E2:0E:81:D2:05:53:4E:CC:98:80:F0:47
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3134302e31302e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.140.10.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:3d:d7:2f:4a:ed:d3:6d:59:84:9d:b3:54:78:e0:b9:d3:5f:
29:b8:f9:ce:bb:51:ea:8b:ac:14:32:59:1d:fa:2a:95:e3:e7:
6b:69:42:a0:d4:5a:37:38:16:5c:fc:c5:3c:0d:b4:19:a9:10:
9a:98:3e:46:92:8c:93:3d:0d:99:af:e9:53:d2:a1:41:3d:7b:
b2:1c:d6:ab:35:26:20:fc:71:79:1d:29:e0:11:fb:81:10:cc:
79:99:33:21:52:83:8f:d8:c6:96:3f:dc:f2:37:76:de:a5:6e:
4c:a7:08:da:25:e2:dc:8e:bf:6f:f2:91:70:ae:bb:47:e6:fa:
47:8b:85:22:e5:84:3e:95:0e:f1:af:bf:01:0f:ab:19:49:28:
0f:35:e3:91:7d:59:56:25:32:04:62:af:ad:9e:0e:2c:4b:67:
f7:3f:23:3c:74:c7:5f:1e:67:26:ad:f2:2b:3c:1e:95:a3:03:
83:6e:82:af:fa:a2:2d:5e:b5:06:92:1a:ef:c7:d6:77:78:79:
59:c0:7e:f3:cd:10:fe:45:e1:20:3c:cd:f9:ff:5d:69:e9:7f:
ee:e9:8a:7a:bc:d2:3e:dd:82:d0:11:32:d1:90:7d:a3:bd:bd:
ae:47:ea:53:a7:86:3a:ea:fd:73:00:c1:43:ce:b3:35:d4:e6:
92:bb:60:21
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUMBT1oJSu72UwdwYDvSx0As/+mdAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAyMjYwODQ4MzFaFw0yNTAyMjQwODUzMzFaMDMxMTAvBgNV
BAMTKEM2OTI3MDI2NUIwNTVBNDhFMjBFODFEMjA1NTM0RUNDOTg4MEYwNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnpxz3pJROzyl0ZnppW4lZDtpm
ykMeGe1qVDtFFMWxiu4EOReisp3yLIkils0QWEerihJ4uMiB5yQREk7QKhNcvLqn
iEYzsCoGC96+gUcZ6qlOXnT80Pehzycy5KtMkaEXIvxG6eUNywOILPebtRy0JTXD
v6VNg9ERmrMYVelVGeBVIJKSJXpOOF7G26T8OQJAn62GnBB6mWoMNGWGlkqrXa7E
pS62LpA8LcGJJVBrCwNVupOicXH1KShrK9DVzpW1hgDeGnP8fYHSrlWMFVxpXK+9
5iJsOPseQSxABjGLbRq88Fw1NTETGLpUzFZymOHG8/6bUHZ/ExmOdugHCqN/AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUxpJwJlsFWkjiDoHSBVNOzJiA8EcwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzkzNDJlMzEzNDMwMmUzMTMw
MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
XowKMA0GCSqGSIb3DQEBCwUAA4IBAQB9PdcvSu3TbVmEnbNUeOC5018puPnOu1Hq
i6wUMlkd+iqV4+draUKg1Fo3OBZc/MU8DbQZqRCamD5GkoyTPQ2Zr+lT0qFBPXuy
HNarNSYg/HF5HSngEfuBEMx5mTMhUoOP2MaWP9zyN3bepW5MpwjaJeLcjr9v8pFw
rrtH5vpHi4Ui5YQ+lQ7xr78BD6sZSSgPNeORfVlWJTIEYq+tng4sS2f3PyM8dMdf
HmcmrfIrPB6VowODboKv+qItXrUGkhrvx9Z3eHlZwH7zzRD+ReEgPM35/11p6X/u
6Yp6vNI+3YLQETLRkH2jvb2uR+pTp4Y66v1zAMFDzrM11OaSu2Ah
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:29:16 2024 by rpki-client on console-ams.rpki-client.org