Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e38342e3133392e302f32342d3234203d3e203632323430.roa
File: 34352e38342e3133392e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: 3KH9W8vsuhGTWnEEO9Nyic3lvHmWWN8c5DcsAegYqQ0=
Subject key identifier: B7:77:1E:81:B0:E7:2B:E3:91:F5:90:A0:72:A3:47:85:CF:4A:76:63
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 41FB2756DFD3D77182440F090339D83CBD2C51FB
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e38342e3133392e302f32342d3234203d3e203632323430.roa
Signing time: Mon 01 Apr 2024 14:03:24 +0000
ROA not before: Mon 01 Apr 2024 13:58:24 +0000
ROA not after: Mon 31 Mar 2025 14:03:24 +0000
asID: 62240
IP address blocks: 45.84.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:fb:27:56:df:d3:d7:71:82:44:0f:09:03:39:d8:3c:bd:2c:51:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Apr 1 13:58:24 2024 GMT
Not After : Mar 31 14:03:24 2025 GMT
Subject: CN=B7771E81B0E72BE391F590A072A34785CF4A7663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bc:af:a3:09:f2:48:a3:27:1a:46:41:fa:bd:
04:c1:2b:aa:42:3b:ef:89:7b:13:fd:ba:20:b4:ae:
73:ec:00:4d:7d:c4:85:b1:a0:82:a1:30:3d:2a:8d:
d4:90:c5:1d:31:a1:04:d3:59:dd:44:d7:95:d6:41:
92:4a:33:9e:c0:02:ee:d8:4e:c7:d9:c4:ec:45:4f:
b5:33:8e:5f:38:76:4a:43:cd:42:c3:f0:59:11:20:
9f:ec:f1:77:a0:d9:2e:3f:97:22:8c:da:c3:4c:7c:
59:73:de:50:2e:16:97:8f:93:18:c2:d0:a6:b4:05:
5e:3f:94:af:b9:72:ea:52:74:f4:36:0f:cb:9b:f6:
bc:bc:59:3a:d7:62:89:ea:b8:85:3e:9a:33:e6:b4:
9d:4a:ba:f0:8a:1a:dc:99:8a:1e:0a:0f:ca:65:e9:
a8:e3:8e:a2:5b:6a:f8:c0:2e:3b:1a:ec:d1:3e:52:
79:3c:3b:d3:ab:a0:84:0f:d6:3c:2a:54:0d:99:b7:
3c:bb:01:ef:20:97:7f:b0:d9:ba:50:12:a1:64:87:
a4:1b:2b:6e:a1:d8:3c:45:b9:fc:f9:3c:9d:d9:79:
a4:7c:08:b2:a8:41:87:d7:04:95:03:72:2e:cd:70:
5c:39:1d:11:af:3a:10:95:b6:18:42:99:39:c7:3f:
36:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:77:1E:81:B0:E7:2B:E3:91:F5:90:A0:72:A3:47:85:CF:4A:76:63
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e38342e3133392e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.139.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:ae:cd:7e:d6:86:4d:60:74:aa:e8:9a:ed:bf:89:bf:51:cd:
8a:75:b5:e2:a5:fd:e5:d6:9a:41:b9:48:72:1c:f2:11:bf:1e:
22:42:d9:18:cc:39:bd:0b:25:a3:a6:51:9a:29:f7:4a:9b:2d:
ea:99:bf:70:86:42:94:b6:7d:28:4f:ad:12:88:18:02:4f:ea:
0a:61:07:a2:1d:ee:0e:f1:0f:ed:24:9c:35:84:aa:a9:c9:1e:
ba:af:c9:64:7b:79:78:79:5e:66:bd:f2:d4:7c:81:29:f5:3c:
43:e9:04:90:c6:e5:65:5f:24:95:2e:4d:40:17:4f:2e:de:f2:
51:b0:23:e5:8b:62:05:f0:1b:d0:19:e3:89:9d:0f:37:45:1e:
f7:5f:f7:c7:5d:0f:d5:8f:6a:ad:f4:55:94:a6:09:e2:b9:f6:
ad:06:cd:e4:83:85:f1:c7:11:3c:d0:db:84:d5:d8:f5:0c:65:
e8:43:4b:d5:92:71:32:33:1c:92:56:1c:e3:ed:0b:78:0c:20:
d2:b0:46:11:e5:7f:23:7f:ce:8e:01:9f:0f:7b:95:a5:c6:51:
42:ef:cc:67:02:f4:c2:b1:c6:51:05:c1:2c:de:4e:87:a2:da:
eb:ac:5d:3c:4a:cc:3f:73:ae:e3:a5:d8:67:cf:57:8d:3a:1f:
79:e1:ca:0a
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUQfsnVt/T13GCRA8JAznYPL0sUfswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJjMmE4MzU0Njg5YWVjMmE3NGZjYTE0OTQ0OTI3NjIx
YmEyN2M5NDAeFw0yNDA0MDExMzU4MjRaFw0yNTAzMzExNDAzMjRaMDMxMTAvBgNV
BAMTKEI3NzcxRTgxQjBFNzJCRTM5MUY1OTBBMDcyQTM0Nzg1Q0Y0QTc2NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIvK+jCfJIoycaRkH6vQTBK6pC
O++JexP9uiC0rnPsAE19xIWxoIKhMD0qjdSQxR0xoQTTWd1E15XWQZJKM57AAu7Y
TsfZxOxFT7Uzjl84dkpDzULD8FkRIJ/s8Xeg2S4/lyKM2sNMfFlz3lAuFpePkxjC
0Ka0BV4/lK+5cupSdPQ2D8ub9ry8WTrXYonquIU+mjPmtJ1KuvCKGtyZih4KD8pl
6ajjjqJbavjALjsa7NE+Unk8O9OroIQP1jwqVA2Ztzy7Ae8gl3+w2bpQEqFkh6Qb
K26h2DxFufz5PJ3ZeaR8CLKoQYfXBJUDci7NcFw5HRGvOhCVthhCmTnHPzZzAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUt3cegbDnK+OR9ZCgcqNHhc9KdmMwHwYDVR0j
BBgwFoAUEsKoNUaJrsKnT8oUlEknYhuifJQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzcvMTJDMkE4MzU0Njg5QUVDMkE3NEZDQTE0OTQ0OTI3NjIxQkEyN0M5NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0VzS29OVWFKcnNLblQ4b1VsRWtuWWh1
aWZKUS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzcvMzQzNTJlMzgzNDJlMzEzMzM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMjMyMzQzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1U
izANBgkqhkiG9w0BAQsFAAOCAQEAsK7NftaGTWB0quia7b+Jv1HNinW14qX95daa
QblIchzyEb8eIkLZGMw5vQslo6ZRmin3Spst6pm/cIZClLZ9KE+tEogYAk/qCmEH
oh3uDvEP7SScNYSqqckeuq/JZHt5eHleZr3y1HyBKfU8Q+kEkMblZV8klS5NQBdP
Lt7yUbAj5YtiBfAb0BnjiZ0PN0Ue91/3x10P1Y9qrfRVlKYJ4rn2rQbN5IOF8ccR
PNDbhNXY9Qxl6ENL1ZJxMjMcklYc4+0LeAwg0rBGEeV/I3/OjgGfD3uVpcZRQu/M
ZwL0wrHGUQXBLN5Oh6La66xdPErMP3Ou46XYZ89XjTofeeHKCg==
-----END CERTIFICATE-----
Generated at Sun May 5 23:30:54 2024 by rpki-client on console-ams.rpki-client.org