Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e36312e32382e302f32342d3332203d3e203531313637.roa
File: 3139342e36312e32382e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: A9flhK8x/WUE2/jpTS7Im+ffrJmzWO2fBRuIUq9M1J4=
Subject key identifier: AC:AF:4A:CA:55:1F:39:C9:F7:E5:BE:0F:40:06:7F:9D:09:E6:8A:F6
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 6EC57957E563A69825C0B6B5B5D56E16AE249DE5
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e36312e32382e302f32342d3332203d3e203531313637.roa
Signing time: Mon 26 Feb 2024 08:53:46 +0000
ROA not before: Mon 26 Feb 2024 08:48:46 +0000
ROA not after: Mon 24 Feb 2025 08:53:46 +0000
asID: 51167
IP address blocks: 194.61.28.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c5:79:57:e5:63:a6:98:25:c0:b6:b5:b5:d5:6e:16:ae:24:9d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Feb 26 08:48:46 2024 GMT
Not After : Feb 24 08:53:46 2025 GMT
Subject: CN=ACAF4ACA551F39C9F7E5BE0F40067F9D09E68AF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:13:fe:82:b6:18:ea:0c:7d:9f:0a:62:12:
ea:2f:6c:af:99:92:6c:00:0d:35:08:e9:b9:0a:3f:
03:a1:72:db:47:62:bb:b6:ab:b0:f2:e7:59:07:70:
dd:69:7d:40:0a:b7:55:ec:b0:47:dd:8e:72:81:50:
36:a2:6a:79:c1:2e:1c:78:2e:66:48:fb:fc:eb:48:
87:79:3f:e2:de:96:d7:1c:bf:c3:c0:ac:c4:f5:fe:
73:6e:a3:aa:93:37:0e:54:2e:ad:67:5f:5c:22:b0:
cf:ab:ad:2d:2b:e6:04:20:1c:39:9f:a5:f1:bc:83:
13:5d:21:8c:df:78:0e:c2:ca:61:54:40:00:42:d4:
25:42:70:d4:4f:34:c4:70:b0:5d:44:1e:39:2d:01:
55:d6:91:88:89:20:c3:dc:33:83:11:07:be:81:52:
92:77:33:34:08:21:16:e5:fa:a7:e1:49:d6:19:3d:
f8:de:cd:32:83:0c:99:b1:13:bd:f8:eb:61:96:ac:
d1:73:75:50:49:18:e4:cc:59:d5:e0:4a:c2:a1:37:
01:31:8a:76:53:31:4c:8f:b5:f9:f3:16:6e:73:e5:
d3:4a:d9:55:38:b2:f8:4d:44:06:8e:c8:ad:68:49:
88:f2:5c:53:0c:01:e2:c4:94:70:44:7c:a0:eb:fc:
c7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AF:4A:CA:55:1F:39:C9:F7:E5:BE:0F:40:06:7F:9D:09:E6:8A:F6
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e36312e32382e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.28.0/24
Signature Algorithm: sha256WithRSAEncryption
30:70:48:a3:76:14:5f:32:73:29:4d:e3:ad:27:7d:78:0c:dd:
67:ec:9b:0f:b2:4b:d0:52:24:59:b9:b8:ce:9f:46:52:42:b6:
39:db:20:49:53:9e:3a:4a:c2:24:10:87:da:e1:bc:5f:86:9b:
a3:73:4f:1a:d3:fe:48:6e:9a:73:76:fc:15:65:00:09:79:13:
f9:21:4e:f6:73:4e:8f:7b:70:99:6f:79:de:af:dd:fe:df:29:
c1:89:af:b6:8a:2d:ce:be:dc:fe:c7:09:e4:23:4b:bb:61:96:
64:09:06:20:96:06:c3:4b:31:be:74:f8:69:2c:a3:d6:dd:27:
e8:70:4a:ef:30:c6:30:69:54:b5:6c:be:06:82:84:99:a0:71:
f1:0f:bf:80:cb:fd:d9:95:3d:50:e0:ee:dd:f8:c8:c6:f1:ab:
39:95:ef:00:58:f5:0d:c4:28:4a:15:4c:9a:fe:58:20:93:19:
5a:dd:62:9a:1b:fa:a4:ba:65:2d:ea:c1:e7:ee:b2:d4:2e:45:
43:89:e6:45:7c:92:71:04:0d:15:ae:59:e3:6d:c5:a3:30:2e:
fd:8f:5a:46:f5:f7:3e:1f:0a:57:5b:07:6f:59:69:0f:ff:10:
da:47:ac:9a:41:dc:3e:35:89:e7:14:bd:03:81:c0:0f:9b:dd:
f4:26:7b:9c
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUbsV5V+VjppglwLa1tdVuFq4kneUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWQ3MDg0NTgyMmE2MTQwOGVjMmE1ZmQ1ODBjMTMyZGE3
NzdmMDlkMTAeFw0yNDAyMjYwODQ4NDZaFw0yNTAyMjQwODUzNDZaMDMxMTAvBgNV
BAMTKEFDQUY0QUNBNTUxRjM5QzlGN0U1QkUwRjQwMDY3RjlEMDlFNjhBRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsuxP+grYY6gx9nwpiEuovbK+Z
kmwADTUI6bkKPwOhcttHYru2q7Dy51kHcN1pfUAKt1XssEfdjnKBUDaiannBLhx4
LmZI+/zrSId5P+Leltccv8PArMT1/nNuo6qTNw5ULq1nX1wisM+rrS0r5gQgHDmf
pfG8gxNdIYzfeA7CymFUQABC1CVCcNRPNMRwsF1EHjktAVXWkYiJIMPcM4MRB76B
UpJ3MzQIIRbl+qfhSdYZPfjezTKDDJmxE73462GWrNFzdVBJGOTMWdXgSsKhNwEx
inZTMUyPtfnzFm5z5dNK2VU4svhNRAaOyK1oSYjyXFMMAeLElHBEfKDr/MdLAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUrK9KylUfOcn35b4PQAZ/nQnmivYwHwYDVR0j
BBgwFoAUXXCEWCKmFAjsKl/VgMEy2nd/CdEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzgvNUQ3MDg0NTgyMkE2MTQwOEVDMkE1RkQ1ODBDMTMyREE3NzdGMDlEMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hYQ0VXQ0ttRkFqc0tsX1ZnTUV5Mm5k
X0NkRS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzgvMzEzOTM0MmUzNjMxMmUzMjM4
MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMI9
HDANBgkqhkiG9w0BAQsFAAOCAQEAMHBIo3YUXzJzKU3jrSd9eAzdZ+ybD7JL0FIk
Wbm4zp9GUkK2OdsgSVOeOkrCJBCH2uG8X4abo3NPGtP+SG6ac3b8FWUACXkT+SFO
9nNOj3twmW953q/d/t8pwYmvtootzr7c/scJ5CNLu2GWZAkGIJYGw0sxvnT4aSyj
1t0n6HBK7zDGMGlUtWy+BoKEmaBx8Q+/gMv92ZU9UODu3fjIxvGrOZXvAFj1DcQo
ShVMmv5YIJMZWt1imhv6pLplLerB5+6y1C5FQ4nmRXyScQQNFa5Z423FozAu/Y9a
RvX3Ph8KV1sHb1lpD/8Q2kesmkHcPjWJ5xS9A4HAD5vd9CZ7nA==
-----END CERTIFICATE-----
Generated at Sun May 12 02:36:03 2024 by rpki-client on console-ams.rpki-client.org