Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32322e3134362e302f32332d3332203d3e203531313637.roa
File: 3139332e32322e3134362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: PRK+KbKOKTeJ5YXNccBZsl+Itp9giwMn3yn4dV3muSo=
Subject key identifier: FE:E4:40:78:B5:B7:BF:E1:32:EF:A9:EF:61:D2:3C:93:FD:3B:93:E4
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 5F935839ED0A2426D60D4F3732F764B72B574D79
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32322e3134362e302f32332d3332203d3e203531313637.roa
Signing time: Thu 30 May 2024 20:39:08 +0000
ROA not before: Thu 30 May 2024 20:34:08 +0000
ROA not after: Thu 29 May 2025 20:39:08 +0000
asID: 51167
IP address blocks: 193.22.146.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:93:58:39:ed:0a:24:26:d6:0d:4f:37:32:f7:64:b7:2b:57:4d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: May 30 20:34:08 2024 GMT
Not After : May 29 20:39:08 2025 GMT
Subject: CN=FEE44078B5B7BFE132EFA9EF61D23C93FD3B93E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:55:8a:52:d3:30:69:19:19:c3:94:2f:bd:52:
6b:eb:76:0d:29:1f:60:2f:12:e8:01:ab:24:bc:2f:
12:01:29:45:23:7b:e6:6c:da:01:e0:83:7a:60:37:
da:90:47:28:3b:9a:d7:98:63:55:76:32:57:c9:50:
f6:b0:7b:f6:d5:1a:80:41:c2:75:33:fa:53:cc:b6:
79:8e:04:94:e1:1c:b2:a8:e7:02:de:75:f1:61:9e:
f1:0b:64:aa:f0:3d:61:91:c3:dc:9c:ad:ba:5f:5d:
e6:11:0d:19:7c:a6:09:b7:00:f6:98:e0:88:7d:df:
11:ae:e9:2a:7e:01:b5:26:f0:f1:63:e5:3e:5c:f1:
21:8f:55:e9:fa:7f:00:e8:09:0d:66:7a:08:f0:7a:
78:34:9c:e1:2a:71:e0:69:46:c1:a4:7a:ad:16:15:
9e:b0:8a:97:46:a5:61:01:9d:02:69:3b:c5:60:a5:
61:ce:02:c2:2a:22:e9:46:5f:db:ab:d5:69:41:5b:
54:37:cd:a4:fc:2a:a6:e6:42:d4:e4:a1:df:6a:c5:
ac:5f:c5:b9:6f:32:3e:e2:77:36:59:1e:0f:e7:a4:
d8:02:a7:b9:cf:dd:60:a5:05:53:02:99:a7:d2:7f:
19:2b:37:cf:39:4f:9c:87:36:1e:d0:14:12:f5:78:
8e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E4:40:78:B5:B7:BF:E1:32:EF:A9:EF:61:D2:3C:93:FD:3B:93:E4
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32322e3134362e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.146.0/23
Signature Algorithm: sha256WithRSAEncryption
95:6b:a5:2f:f6:e2:74:57:e8:8c:d4:70:6a:a0:3c:ac:37:15:
7b:d1:cf:df:fe:ed:09:34:57:1f:b6:d8:26:b0:8d:96:fa:2f:
02:64:6b:14:6b:86:e3:76:cd:84:b1:c7:6e:87:46:5c:5f:b1:
e2:1d:e0:53:7e:32:d5:ce:a7:16:ce:7e:33:e9:9f:aa:46:f3:
8c:3a:cf:6b:be:fe:51:be:1b:b8:80:c9:2c:eb:5d:2f:99:9e:
92:64:ea:a5:34:75:69:12:45:93:03:f6:24:6d:71:71:06:56:
98:57:ed:0c:fc:1f:dd:68:cc:54:df:3d:e0:e2:6a:fc:80:1e:
b4:fb:6a:91:22:ed:3a:15:08:d8:5d:50:be:84:f9:64:f1:29:
7a:ae:dc:e8:69:c3:5b:14:8a:99:17:af:52:60:ff:9c:da:3e:
55:42:8b:ce:3c:33:9d:ee:79:be:26:db:6f:f6:25:b8:87:75:
6e:91:5d:e8:60:c7:59:9f:fb:6b:81:18:87:39:e4:8a:02:7d:
63:52:25:60:0f:41:e9:43:a2:ab:fb:c8:ed:d7:2e:a3:3f:84:
02:cb:e8:a8:1d:ee:83:de:9f:23:42:1e:db:08:62:c4:13:0c:
b5:60:b8:c5:43:ef:f3:f2:c5:5a:c8:1d:ea:46:e5:f1:b8:f2:
5e:39:8b:be
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUX5NYOe0KJCbWDU83MvdktytXTXkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNDA1MzAyMDM0MDhaFw0yNTA1MjkyMDM5MDhaMDMxMTAvBgNV
BAMTKEZFRTQ0MDc4QjVCN0JGRTEzMkVGQTlFRjYxRDIzQzkzRkQzQjkzRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChVYpS0zBpGRnDlC+9Umvrdg0p
H2AvEugBqyS8LxIBKUUje+Zs2gHgg3pgN9qQRyg7mteYY1V2MlfJUPawe/bVGoBB
wnUz+lPMtnmOBJThHLKo5wLedfFhnvELZKrwPWGRw9ycrbpfXeYRDRl8pgm3APaY
4Ih93xGu6Sp+AbUm8PFj5T5c8SGPVen6fwDoCQ1megjweng0nOEqceBpRsGkeq0W
FZ6wipdGpWEBnQJpO8VgpWHOAsIqIulGX9ur1WlBW1Q3zaT8KqbmQtTkod9qxaxf
xblvMj7idzZZHg/npNgCp7nP3WClBVMCmafSfxkrN885T5yHNh7QFBL1eI4/AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU/uRAeLW3v+Ey76nvYdI8k/07k+QwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzOTMzMmUzMjMyMmUzMTM0
MzYyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
wRaSMA0GCSqGSIb3DQEBCwUAA4IBAQCVa6Uv9uJ0V+iM1HBqoDysNxV70c/f/u0J
NFcfttgmsI2W+i8CZGsUa4bjds2Escduh0ZcX7HiHeBTfjLVzqcWzn4z6Z+qRvOM
Os9rvv5Rvhu4gMks610vmZ6SZOqlNHVpEkWTA/YkbXFxBlaYV+0M/B/daMxU3z3g
4mr8gB60+2qRIu06FQjYXVC+hPlk8Sl6rtzoacNbFIqZF69SYP+c2j5VQovOPDOd
7nm+Jttv9iW4h3VukV3oYMdZn/trgRiHOeSKAn1jUiVgD0HpQ6Kr+8jt1y6jP4QC
y+ioHe6D3p8jQh7bCGLEEwy1YLjFQ+/z8sVayB3qRuXxuPJeOYu+
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:05 2024 by rpki-client on console-fra.rpki-client.org