Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3134392e3230342e302f32322d3234203d3e203432333636.roa
File: 34352e3134392e3230342e302f32322d3234203d3e203432333636.roa (raw, json)
Hash identifier: HOhq+5WTIsVqqFXOKfpiLy/LoYbyai6fLkEYFULi/rs=
Subject key identifier: C8:C2:D8:58:5C:B8:2D:B8:9C:91:BA:85:19:D4:4B:7D:75:AA:96:54
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 733316C286E6481FA0DE590E2558259CF58F44F2
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3134392e3230342e302f32322d3234203d3e203432333636.roa
Signing time: Mon 11 Mar 2024 08:59:34 +0000
ROA not before: Mon 11 Mar 2024 08:54:34 +0000
ROA not after: Mon 10 Mar 2025 08:59:34 +0000
asID: 42366
IP address blocks: 45.149.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:33:16:c2:86:e6:48:1f:a0:de:59:0e:25:58:25:9c:f5:8f:44:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Mar 11 08:54:34 2024 GMT
Not After : Mar 10 08:59:34 2025 GMT
Subject: CN=C8C2D8585CB82DB89C91BA8519D44B7D75AA9654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:fa:ca:f6:01:cf:e1:8b:17:c1:46:29:38:
87:07:cc:17:a6:3c:78:9f:46:ed:db:39:59:73:a0:
95:3b:2f:8a:69:e5:ee:c6:a0:fa:ae:21:df:fa:b3:
27:46:b1:b9:76:36:3b:52:d3:21:74:86:55:37:71:
1e:6c:74:e1:2a:3b:e5:76:c7:ce:7f:95:00:a1:9d:
61:5f:33:bc:59:b8:f0:63:37:28:46:36:d2:4a:cd:
3e:ae:5c:f6:e8:3b:e8:e2:4c:e6:87:e7:16:a0:e8:
dd:4a:78:b7:43:20:19:23:d0:cd:99:cd:a3:5a:11:
10:b5:8a:a9:9c:30:9a:d6:54:4c:05:b3:9e:21:73:
7a:20:9a:43:d0:1e:95:21:57:21:b8:77:2e:47:0b:
4d:7b:41:40:1f:e9:3b:84:4f:84:ae:10:a5:96:0e:
95:c3:c5:b3:95:8a:32:06:76:8a:00:ff:b5:24:07:
e9:6a:52:83:e7:b4:2d:4a:be:41:74:04:df:1b:ed:
0d:30:98:06:66:f1:a2:1b:06:d2:07:87:4d:ab:4c:
ea:a0:db:94:18:b0:60:d0:17:09:e4:bc:39:9b:4c:
b1:29:9a:b2:8b:20:03:66:4c:d2:7e:b9:3c:e6:99:
c0:95:33:ab:39:59:70:5c:ee:9d:be:c0:99:10:df:
03:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C2:D8:58:5C:B8:2D:B8:9C:91:BA:85:19:D4:4B:7D:75:AA:96:54
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3134392e3230342e302f32322d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.204.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:8c:d2:fe:29:85:aa:d3:c7:34:21:58:17:36:f6:44:98:f3:
b9:f8:b5:5e:32:b7:e1:f5:a3:ac:85:7b:6d:a2:30:22:59:46:
7b:c6:a1:d0:3d:3a:14:60:ba:dd:6d:14:03:68:0b:f4:df:cc:
12:cf:44:1a:ce:b0:2e:b1:5f:db:89:1c:df:21:2d:be:a6:5d:
bb:19:c0:dd:3d:1d:a0:66:bb:a7:49:ea:84:cb:77:5e:56:41:
35:27:a3:50:f2:4b:7e:8a:3d:5f:05:26:cf:41:07:18:16:fb:
b2:b4:1c:7a:57:ac:77:c5:8c:26:bf:58:f2:96:2d:c0:ac:a4:
88:bc:ed:d6:69:9a:bd:43:cb:08:5b:d4:37:55:67:01:5e:bd:
be:eb:4b:9e:1a:fa:d9:07:6f:18:0f:80:1a:60:d6:8e:cf:ef:
f7:90:34:4f:68:b3:df:3c:7e:4f:01:a2:39:dc:90:c0:f7:3b:
b8:7a:89:aa:65:9f:bb:bf:a6:27:62:42:cf:b9:65:52:ff:43:
7a:fd:cd:db:9f:5e:5e:a5:ff:8c:39:ec:5d:c7:5f:29:bd:37:
d3:b3:2e:cb:b7:36:2f:ae:91:73:24:e2:66:24:df:a3:df:f8:
27:19:47:2a:12:92:59:0c:f4:3e:f8:47:bb:6d:61:69:5b:5d:
23:d5:56:86
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUczMWwobmSB+g3lkOJVglnPWPRPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNDAzMTEwODU0MzRaFw0yNTAzMTAwODU5MzRaMDMxMTAvBgNV
BAMTKEM4QzJEODU4NUNCODJEQjg5QzkxQkE4NTE5RDQ0QjdENzVBQTk2NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqjvrK9gHP4YsXwUYpOIcHzBem
PHifRu3bOVlzoJU7L4pp5e7GoPquId/6sydGsbl2NjtS0yF0hlU3cR5sdOEqO+V2
x85/lQChnWFfM7xZuPBjNyhGNtJKzT6uXPboO+jiTOaH5xag6N1KeLdDIBkj0M2Z
zaNaERC1iqmcMJrWVEwFs54hc3ogmkPQHpUhVyG4dy5HC017QUAf6TuET4SuEKWW
DpXDxbOVijIGdooA/7UkB+lqUoPntC1KvkF0BN8b7Q0wmAZm8aIbBtIHh02rTOqg
25QYsGDQFwnkvDmbTLEpmrKLIANmTNJ+uTzmmcCVM6s5WXBc7p2+wJkQ3wNRAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUyMLYWFy4LbickbqFGdRLfXWqllQwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzQzNTJlMzEzNDM5MmUzMjMw
MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDMyMzMzNjM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
LZXMMA0GCSqGSIb3DQEBCwUAA4IBAQCmjNL+KYWq08c0IVgXNvZEmPO5+LVeMrfh
9aOshXttojAiWUZ7xqHQPToUYLrdbRQDaAv038wSz0QazrAusV/biRzfIS2+pl27
GcDdPR2gZrunSeqEy3deVkE1J6NQ8kt+ij1fBSbPQQcYFvuytBx6V6x3xYwmv1jy
li3ArKSIvO3WaZq9Q8sIW9Q3VWcBXr2+60ueGvrZB28YD4AaYNaOz+/3kDRPaLPf
PH5PAaI53JDA9zu4eomqZZ+7v6YnYkLPuWVS/0N6/c3bn15epf+MOexdx18pvTfT
sy7LtzYvrpFzJOJmJN+j3/gnGUcqEpJZDPQ++Ee7bWFpW10j1VaG
-----END CERTIFICATE-----
Generated at Thu May 16 17:02:40 2024 by rpki-client on console-ams.rpki-client.org