Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/33372e34342e3234362e302f32332d3234203d3e203437353833.roa
File: 33372e34342e3234362e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: 0ZPD+DtD0GtfiVsx3yl6TNnMP2NayzhmdUydi6E8vOc=
Subject key identifier: 9F:DB:4B:83:E6:17:B9:85:8B:96:A2:E4:54:8B:FA:ED:A6:5A:B9:FE
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 1780E6225C6C3D46A56095A12381C1E4DB264364
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/33372e34342e3234362e302f32332d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:52:42 +0000
ROA not before: Mon 26 Feb 2024 08:47:42 +0000
ROA not after: Mon 24 Feb 2025 08:52:42 +0000
asID: 47583
IP address blocks: 37.44.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:80:e6:22:5c:6c:3d:46:a5:60:95:a1:23:81:c1:e4:db:26:43:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Feb 26 08:47:42 2024 GMT
Not After : Feb 24 08:52:42 2025 GMT
Subject: CN=9FDB4B83E617B9858B96A2E4548BFAEDA65AB9FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:5f:1a:5e:56:d4:e7:bd:8b:36:f3:68:6c:
bb:f7:8f:a8:ea:5a:cf:7c:be:b7:29:58:79:ad:f0:
e6:86:e3:79:62:7a:cd:ef:8f:6d:64:91:13:5b:25:
ac:6f:0b:29:f6:0c:f0:01:8a:bb:a0:47:b4:d3:59:
8d:e9:14:dd:c8:ff:49:62:4f:86:62:b0:39:9a:86:
da:22:07:7d:4d:06:a4:0d:b5:3d:6f:2f:13:3d:d9:
09:3f:04:6f:1e:1c:34:e8:72:59:9d:84:be:1b:9c:
ff:a5:a3:6a:c6:ea:92:93:a9:f5:56:be:51:9a:e5:
ab:a9:f9:8c:cf:85:84:6f:a4:7c:fa:4c:69:f3:78:
73:15:a6:50:39:ad:65:70:ce:34:4b:9d:b3:74:5a:
6d:82:0c:e1:48:33:c2:22:95:02:62:ac:e8:9a:f9:
bd:05:ef:22:b0:97:9b:9a:29:64:73:cb:ba:14:b8:
34:1a:65:7c:52:8d:94:7e:8e:87:f4:7a:f2:5f:21:
f6:e5:59:b0:f3:a4:41:86:28:f5:a4:18:d8:d4:18:
f3:14:86:b8:03:51:38:be:69:78:42:de:f2:b1:76:
6c:99:6b:43:18:84:81:c1:03:87:8e:9f:1f:62:58:
53:4e:ff:28:34:1c:1a:ea:96:cb:ab:1c:b9:f1:fa:
09:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DB:4B:83:E6:17:B9:85:8B:96:A2:E4:54:8B:FA:ED:A6:5A:B9:FE
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/33372e34342e3234362e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.246.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:ee:9e:30:a0:a3:01:29:c5:a5:a3:a6:d1:17:48:dd:4f:b8:
db:60:70:4c:7f:74:d0:dd:e1:06:bb:7d:fc:8a:ff:f0:52:a6:
86:49:a1:37:3b:11:bc:9b:e6:aa:9e:9c:aa:48:68:f2:c4:a1:
b7:e5:53:d2:d3:33:79:9d:17:a4:e3:39:25:1b:69:36:a4:3a:
00:ff:c7:38:03:5c:8e:de:a3:39:a6:5b:73:f4:fb:12:c9:20:
f3:d6:da:7c:a2:44:53:97:6e:e4:0a:56:7f:24:f1:55:11:07:
d6:c2:98:21:b7:dd:67:cf:15:a2:ee:98:d9:34:95:97:07:11:
a8:0b:16:6e:a2:5e:f8:84:0b:55:8d:42:d1:5f:89:c5:7b:59:
49:44:2c:ae:dd:2d:33:16:ba:8e:1f:62:24:89:14:c1:d8:1a:
92:0b:a7:aa:5f:34:7a:2e:ec:3f:95:05:d1:e3:a1:97:1c:0a:
f3:6a:96:39:a9:3a:dc:c3:71:31:12:96:85:63:34:04:9a:59:
6f:67:26:f6:4b:e2:03:fd:e1:d1:1a:8a:d2:90:f6:b7:9c:ed:
08:f8:77:2f:57:bd:f4:31:ae:2a:8a:66:3e:35:c3:d6:cb:f6:
8f:ed:c1:cd:88:e8:bf:a4:13:cd:77:6c:34:eb:46:d2:a1:78:
6b:5e:74:f6
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUF4DmIlxsPUalYJWhI4HB5NsmQ2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNDAyMjYwODQ3NDJaFw0yNTAyMjQwODUyNDJaMDMxMTAvBgNV
BAMTKDlGREI0QjgzRTYxN0I5ODU4Qjk2QTJFNDU0OEJGQUVEQTY1QUI5RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6el8aXlbU572LNvNobLv3j6jq
Ws98vrcpWHmt8OaG43lies3vj21kkRNbJaxvCyn2DPABirugR7TTWY3pFN3I/0li
T4ZisDmahtoiB31NBqQNtT1vLxM92Qk/BG8eHDToclmdhL4bnP+lo2rG6pKTqfVW
vlGa5aup+YzPhYRvpHz6TGnzeHMVplA5rWVwzjRLnbN0Wm2CDOFIM8IilQJirOia
+b0F7yKwl5uaKWRzy7oUuDQaZXxSjZR+jof0evJfIfblWbDzpEGGKPWkGNjUGPMU
hrgDUTi+aXhC3vKxdmyZa0MYhIHBA4eOnx9iWFNO/yg0HBrqlsurHLnx+gmTAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUn9tLg+YXuYWLlqLkVIv67aZauf4wHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzMzNzJlMzQzNDJlMzIzNDM2
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEASUs
9jANBgkqhkiG9w0BAQsFAAOCAQEApe6eMKCjASnFpaOm0RdI3U+422BwTH900N3h
Brt9/Ir/8FKmhkmhNzsRvJvmqp6cqkho8sSht+VT0tMzeZ0XpOM5JRtpNqQ6AP/H
OANcjt6jOaZbc/T7Eskg89bafKJEU5du5ApWfyTxVREH1sKYIbfdZ88Vou6Y2TSV
lwcRqAsWbqJe+IQLVY1C0V+JxXtZSUQsrt0tMxa6jh9iJIkUwdgakgunql80ei7s
P5UF0eOhlxwK82qWOak63MNxMRKWhWM0BJpZb2cm9kviA/3h0RqK0pD2t5ztCPh3
L1e99DGuKopmPjXD1sv2j+3BzYjov6QTzXdsNOtG0qF4a1509g==
-----END CERTIFICATE-----
Generated at Thu May 16 15:36:04 2024 by rpki-client on console-fra.rpki-client.org