Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139352e372e342e302f32322d3332203d3e203531313637.roa
File: 3139352e372e342e302f32322d3332203d3e203531313637.roa (raw, json)
Hash identifier: IlCV2MmfyZEMIYcYUNeKS1AMcHT0bkLgZwzfFJAlASA=
Subject key identifier: BC:FD:06:54:53:AA:54:3B:47:29:B5:9E:FA:54:D9:8E:57:E7:DE:0F
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 0F4FBDEB300A85B2783A9E2D96C89DF068D88D48
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139352e372e342e302f32322d3332203d3e203531313637.roa
Signing time: Thu 30 May 2024 20:39:11 +0000
ROA not before: Thu 30 May 2024 20:34:11 +0000
ROA not after: Thu 29 May 2025 20:39:11 +0000
asID: 51167
IP address blocks: 195.7.4.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:4f:bd:eb:30:0a:85:b2:78:3a:9e:2d:96:c8:9d:f0:68:d8:8d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: May 30 20:34:11 2024 GMT
Not After : May 29 20:39:11 2025 GMT
Subject: CN=BCFD065453AA543B4729B59EFA54D98E57E7DE0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:08:a6:80:4f:c7:76:5c:49:ce:71:02:40:a2:
32:0b:07:ea:33:e6:af:e6:17:5f:85:ac:8c:8c:62:
df:0c:b3:54:4c:23:75:ec:e7:b8:8b:e3:53:f3:08:
d6:63:fb:c0:00:22:14:a6:79:0e:00:cd:4f:b5:4a:
87:51:b2:8e:5f:45:e8:c9:7e:8d:19:62:50:07:00:
6b:4e:78:5a:3f:b0:76:2d:55:e4:40:c8:59:33:a8:
c1:1c:61:cf:23:ce:70:31:ab:1e:cf:f7:01:88:d2:
0c:e9:03:95:61:7d:cb:28:60:e8:13:0a:30:5f:ca:
7d:d3:10:70:db:46:a4:59:cf:0a:34:8a:27:23:d5:
93:0d:b1:5f:d7:5b:29:85:c2:9b:6c:9f:f0:a3:c9:
44:0f:87:29:05:90:43:5d:07:fd:49:86:19:37:8c:
d7:38:ff:d9:18:6e:7d:6a:94:64:1b:16:ef:68:0f:
fa:80:9e:36:a4:2e:a2:8a:6d:e9:ff:a5:45:0a:bd:
2d:06:52:2b:25:d4:d3:db:6b:9a:11:58:8e:61:b3:
33:d2:6c:2c:54:1e:e6:a1:a8:fa:20:09:e1:df:ad:
6b:d1:a2:22:8c:bb:56:fe:db:b2:ec:0c:e1:b1:ab:
58:4a:40:36:26:1e:6e:d9:90:09:e5:5e:42:e1:02:
3b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FD:06:54:53:AA:54:3B:47:29:B5:9E:FA:54:D9:8E:57:E7:DE:0F
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139352e372e342e302f32322d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.7.4.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:42:ce:37:ec:1a:c5:fe:46:1d:bc:6d:da:ee:df:8f:74:49:
48:1d:72:e9:8c:e5:17:cd:bc:93:f4:60:ea:be:d6:11:dd:9a:
f3:66:6f:14:d3:cc:42:1b:2a:4b:3d:ff:32:69:a5:45:ea:12:
c3:d7:c4:19:7f:18:3a:31:90:7e:30:39:01:ef:3b:49:3b:fc:
61:10:f2:f4:e6:ea:41:75:73:f0:35:c5:f8:1b:af:69:e0:95:
0f:d9:64:2a:03:03:ae:81:45:af:64:b9:fd:07:22:a0:b4:91:
e8:7d:27:eb:d6:11:e2:28:51:47:0a:2d:0e:aa:aa:87:bc:b3:
ff:0e:de:81:86:2a:f8:44:be:a2:2d:64:bf:dc:94:6b:31:06:
14:9a:f1:6a:af:56:2e:4a:c7:d6:8f:5b:90:bf:0e:62:93:ef:
19:d4:8c:e0:48:23:cb:79:7e:7a:d2:a8:45:4d:95:19:30:31:
ef:24:df:61:ce:aa:e2:76:e8:d0:cd:b8:57:8d:14:9d:c1:68:
62:65:e5:c5:c6:55:22:e5:e0:ba:50:c9:7f:19:bc:79:b2:fd:
61:f9:e5:62:ae:b5:58:f1:2f:30:9e:cc:b7:34:29:6f:14:74:
88:42:5f:40:b0:af:75:d1:8c:52:17:ae:24:fc:0b:e3:6a:b5:
72:8b:a5:ae
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUD0+96zAKhbJ4Op4tlsid8GjYjUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWQ3MDg0NTgyMmE2MTQwOGVjMmE1ZmQ1ODBjMTMyZGE3
NzdmMDlkMTAeFw0yNDA1MzAyMDM0MTFaFw0yNTA1MjkyMDM5MTFaMDMxMTAvBgNV
BAMTKEJDRkQwNjU0NTNBQTU0M0I0NzI5QjU5RUZBNTREOThFNTdFN0RFMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUCKaAT8d2XEnOcQJAojILB+oz
5q/mF1+FrIyMYt8Ms1RMI3Xs57iL41PzCNZj+8AAIhSmeQ4AzU+1SodRso5fRejJ
fo0ZYlAHAGtOeFo/sHYtVeRAyFkzqMEcYc8jznAxqx7P9wGI0gzpA5VhfcsoYOgT
CjBfyn3TEHDbRqRZzwo0iicj1ZMNsV/XWymFwptsn/CjyUQPhykFkENdB/1Jhhk3
jNc4/9kYbn1qlGQbFu9oD/qAnjakLqKKben/pUUKvS0GUisl1NPba5oRWI5hszPS
bCxUHuahqPogCeHfrWvRoiKMu1b+27LsDOGxq1hKQDYmHm7ZkAnlXkLhAjtjAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUvP0GVFOqVDtHKbWe+lTZjlfn3g8wHwYDVR0j
BBgwFoAUXXCEWCKmFAjsKl/VgMEy2nd/CdEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzgvNUQ3MDg0NTgyMkE2MTQwOEVDMkE1RkQ1ODBDMTMyREE3NzdGMDlEMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hYQ0VXQ0ttRkFqc0tsX1ZnTUV5Mm5k
X0NkRS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzgvMzEzOTM1MmUzNzJlMzQyZTMw
MmYzMjMyMmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwwcEMA0G
CSqGSIb3DQEBCwUAA4IBAQALQs437BrF/kYdvG3a7t+PdElIHXLpjOUXzbyT9GDq
vtYR3ZrzZm8U08xCGypLPf8yaaVF6hLD18QZfxg6MZB+MDkB7ztJO/xhEPL05upB
dXPwNcX4G69p4JUP2WQqAwOugUWvZLn9ByKgtJHofSfr1hHiKFFHCi0OqqqHvLP/
Dt6Bhir4RL6iLWS/3JRrMQYUmvFqr1YuSsfWj1uQvw5ik+8Z1IzgSCPLeX560qhF
TZUZMDHvJN9hzqridujQzbhXjRSdwWhiZeXFxlUi5eC6UMl/Gbx5sv1h+eVirrVY
8S8wnsy3NClvFHSIQl9AsK910YxSF64k/AvjarVyi6Wu
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:39:35 2024 by rpki-client on console-fra.rpki-client.org