Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e31332e37322e302f32322d3234203d3e20323033303631.roa
File: 34352e31332e37322e302f32322d3234203d3e20323033303631.roa (raw, json)
Hash identifier: UBvhcNmLtVxiF+a5uH58wISmu0GRHP3ZQT8XC9MrCJk=
Subject key identifier: CD:6E:54:C2:45:7B:22:FF:8C:F9:74:D2:32:8C:85:31:0B:B3:34:EE
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 7A155A00571F7960B8750E4B86B8142215004518
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e31332e37322e302f32322d3234203d3e20323033303631.roa
Signing time: Mon 26 Feb 2024 08:52:42 +0000
ROA not before: Mon 26 Feb 2024 08:47:42 +0000
ROA not after: Mon 24 Feb 2025 08:52:42 +0000
asID: 203061
IP address blocks: 45.13.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:15:5a:00:57:1f:79:60:b8:75:0e:4b:86:b8:14:22:15:00:45:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Feb 26 08:47:42 2024 GMT
Not After : Feb 24 08:52:42 2025 GMT
Subject: CN=CD6E54C2457B22FF8CF974D2328C85310BB334EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:60:99:6c:53:fb:b7:9d:07:47:0a:59:14:
68:af:0d:f7:88:45:42:4d:86:f8:c8:32:52:0a:db:
2b:49:5e:96:a5:d8:ee:3b:b6:22:91:3b:31:9e:62:
97:71:0b:09:36:8d:23:96:65:ee:d4:04:73:90:fc:
c7:4c:cb:9d:e4:78:07:67:fb:6a:0d:67:97:1c:78:
36:24:64:ac:2d:fa:1c:7d:86:7b:ed:94:aa:f8:76:
1c:68:2f:83:70:23:a1:ec:c5:d1:09:be:e6:bd:f6:
5e:c3:58:79:07:9d:e1:e9:82:f9:bb:c4:77:20:11:
7e:f9:98:96:99:2f:09:74:83:7a:0c:f5:a9:e6:7b:
c0:0f:3a:12:c4:f7:f9:7f:48:d7:b2:56:1f:9b:a7:
2c:71:b4:fb:56:3e:b2:2e:34:de:16:04:34:e6:86:
ee:66:2d:7e:8f:69:32:eb:bb:f2:02:80:93:e7:58:
2c:53:af:9e:9e:56:8c:39:fb:d4:bc:f8:68:7f:50:
3c:a2:fd:67:b8:64:c6:4b:8a:bc:23:ec:b4:c6:67:
b7:ce:a5:b8:12:aa:ac:45:f7:bb:d3:97:6c:eb:36:
28:1f:9a:99:6d:50:eb:79:d9:15:cb:b4:68:6d:cc:
31:ed:34:93:b3:28:71:1b:5c:05:f0:11:79:0c:d0:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6E:54:C2:45:7B:22:FF:8C:F9:74:D2:32:8C:85:31:0B:B3:34:EE
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e31332e37322e302f32322d3234203d3e20323033303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.72.0/22
Signature Algorithm: sha256WithRSAEncryption
24:d7:4a:1b:6e:98:f8:73:53:93:37:66:58:f9:35:22:ae:40:
1a:34:82:2f:eb:39:4d:b4:a3:2d:03:36:50:ee:84:1d:cd:64:
bc:7a:5d:45:c7:88:64:73:b7:59:d8:b2:6c:9b:54:98:20:a9:
fc:79:b3:91:c3:fd:44:84:58:54:bf:1e:29:c3:cd:e5:dd:6e:
5c:86:db:24:a3:fe:01:6a:1b:e5:8e:14:64:99:87:5e:ad:c9:
e2:37:8d:4e:08:8f:2c:61:2c:d1:bb:26:eb:f6:52:ba:cb:b8:
9b:03:aa:24:3f:b8:89:01:36:bf:68:ef:98:7b:56:37:6f:78:
8c:96:58:2e:4f:36:50:cd:05:2e:b4:bb:3e:0d:67:8e:a0:23:
db:30:ce:70:bd:ef:91:f8:1b:ba:be:19:f4:38:55:f1:65:8d:
df:21:6e:4d:37:31:19:81:86:5b:be:ff:c2:f0:ff:b9:96:1d:
8c:6a:35:90:21:8d:ef:b6:ce:81:ed:d2:dc:10:d7:a4:c7:91:
77:91:6d:d1:a8:b9:cd:5a:4f:d2:bb:86:ed:5e:e9:49:65:e1:
16:5f:5a:54:5e:06:b2:74:69:05:e6:8b:0e:8d:89:f4:2f:ef:
97:ed:9d:18:78:2c:dd:cb:dc:65:f2:e1:e1:e0:fd:5d:c0:44:
3a:a3:0e:1d
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUehVaAFcfeWC4dQ5LhrgUIhUARRgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNDAyMjYwODQ3NDJaFw0yNTAyMjQwODUyNDJaMDMxMTAvBgNV
BAMTKENENkU1NEMyNDU3QjIyRkY4Q0Y5NzREMjMyOEM4NTMxMEJCMzM0RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrWmCZbFP7t50HRwpZFGivDfeI
RUJNhvjIMlIK2ytJXpal2O47tiKROzGeYpdxCwk2jSOWZe7UBHOQ/MdMy53keAdn
+2oNZ5cceDYkZKwt+hx9hnvtlKr4dhxoL4NwI6HsxdEJvua99l7DWHkHneHpgvm7
xHcgEX75mJaZLwl0g3oM9anme8APOhLE9/l/SNeyVh+bpyxxtPtWPrIuNN4WBDTm
hu5mLX6PaTLru/ICgJPnWCxTr56eVow5+9S8+Gh/UDyi/We4ZMZLirwj7LTGZ7fO
pbgSqqxF97vTl2zrNigfmpltUOt52RXLtGhtzDHtNJOzKHEbXAXwEXkM0KHjAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUzW5UwkV7Iv+M+XTSMoyFMQuzNO4wHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzQzNTJlMzEzMzJlMzczMjJl
MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzMzMwMzYzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi0N
SDANBgkqhkiG9w0BAQsFAAOCAQEAJNdKG26Y+HNTkzdmWPk1Iq5AGjSCL+s5TbSj
LQM2UO6EHc1kvHpdRceIZHO3WdiybJtUmCCp/HmzkcP9RIRYVL8eKcPN5d1uXIbb
JKP+AWob5Y4UZJmHXq3J4jeNTgiPLGEs0bsm6/ZSusu4mwOqJD+4iQE2v2jvmHtW
N294jJZYLk82UM0FLrS7Pg1njqAj2zDOcL3vkfgbur4Z9DhV8WWN3yFuTTcxGYGG
W77/wvD/uZYdjGo1kCGN77bOge3S3BDXpMeRd5Ft0ai5zVpP0ruG7V7pSWXhFl9a
VF4GsnRpBeaLDo2J9C/vl+2dGHgs3cvcZfLh4eD9XcBEOqMOHQ==
-----END CERTIFICATE-----
Generated at Thu May 16 17:02:40 2024 by rpki-client on console-ams.rpki-client.org