Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/34352e38302e3135322e302f32322d3234203d3e203437353833.roa
File: 34352e38302e3135322e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: j6cep/eYiyuueyWIAS+8DnoHVxSrzfVk+ksdyv9EvSM=
Subject key identifier: 5B:D5:60:A4:DE:3A:9A:C5:DF:B5:44:FA:0B:12:89:F8:E3:C6:04:E0
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 0C5D81397DA86E4449310EBAEDA52F137821EEFC
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/34352e38302e3135322e302f32322d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:47 +0000
ROA not before: Mon 26 Feb 2024 08:48:47 +0000
ROA not after: Mon 24 Feb 2025 08:53:47 +0000
asID: 47583
IP address blocks: 45.80.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:5d:81:39:7d:a8:6e:44:49:31:0e:ba:ed:a5:2f:13:78:21:ee:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Feb 26 08:48:47 2024 GMT
Not After : Feb 24 08:53:47 2025 GMT
Subject: CN=5BD560A4DE3A9AC5DFB544FA0B1289F8E3C604E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:90:41:6b:1e:ef:dc:57:bb:ec:7f:4f:08:
50:73:c9:91:1b:d6:41:42:45:b4:51:16:90:fc:44:
87:b0:09:df:e4:10:d3:17:22:b8:8a:70:dc:a2:25:
84:65:8a:91:61:cc:ba:42:da:8e:ab:4b:e8:28:2b:
30:9d:a9:de:ac:23:e3:1f:4e:c4:04:32:6a:ea:23:
6c:b8:6b:61:15:42:ee:be:48:f8:e2:05:11:fd:70:
1b:d9:74:e9:88:15:f5:4a:12:e3:00:56:a5:29:d0:
f5:2e:72:8f:93:07:6f:1c:38:04:f9:79:48:ee:be:
c8:b8:9e:24:85:ab:f6:da:aa:12:bd:e2:13:cb:ea:
47:55:3f:54:84:b3:e2:8c:9f:da:ff:0f:31:1f:ef:
d0:51:01:ea:ff:a7:1d:34:6a:4a:9c:6b:e3:5a:47:
ff:0e:0e:16:e8:58:c3:83:16:44:3e:19:9b:b2:ef:
49:6c:a5:3e:3c:90:9a:e3:37:d8:b2:85:f1:76:f2:
98:a1:a2:b5:4e:a4:a5:93:69:cf:db:7b:47:d6:97:
ce:48:7d:29:83:32:b4:6b:62:0b:1f:27:23:d0:61:
1a:a3:22:28:eb:0c:8a:2f:59:4b:17:4b:86:11:8b:
8c:55:7f:c5:c2:f3:2e:18:4b:e6:99:d8:9f:ac:dd:
be:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D5:60:A4:DE:3A:9A:C5:DF:B5:44:FA:0B:12:89:F8:E3:C6:04:E0
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/34352e38302e3135322e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.152.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:5b:b6:65:55:ee:af:00:c5:cc:17:ea:ca:10:5e:25:2f:73:
6c:4d:0e:97:3f:33:57:b5:81:43:67:b9:c8:df:d2:b7:a9:09:
15:b2:ff:b6:e4:a9:a4:e1:78:4e:8e:46:c9:29:e6:69:b7:5a:
dd:65:19:cc:e9:86:1d:9e:67:ab:23:05:03:98:3e:3a:f2:d6:
82:f0:dc:70:07:1e:91:f5:6c:69:cd:b6:99:ac:32:ad:16:d2:
91:4d:2c:a0:1b:25:f7:76:bf:b2:d1:51:15:b1:d2:d2:ca:52:
a2:24:d5:d7:9e:66:4c:a1:63:29:07:d6:de:b1:92:df:54:0d:
d1:df:7c:c8:c4:97:fc:90:3c:0f:39:c4:ca:b8:c5:92:86:c1:
a6:85:82:33:93:d8:fc:ec:0d:0f:04:3a:04:9f:32:e1:bd:af:
81:d0:3c:0d:0c:1a:7d:47:d6:d7:eb:02:1a:a5:2e:73:37:57:
8d:8e:7e:32:52:59:74:da:45:36:61:af:15:06:57:c1:0a:82:
76:31:b7:96:01:fe:9c:d5:64:59:7f:21:56:73:7b:4c:21:80:
9a:4c:03:4f:bd:64:6b:4d:a0:0d:ce:38:45:0b:e2:1e:c8:2c:
de:84:d9:5c:4f:1d:8e:3c:de:9c:d8:d8:45:87:f1:55:8c:cf:
8e:c3:80:a2
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUDF2BOX2obkRJMQ667aUvE3gh7vwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWQ3MDg0NTgyMmE2MTQwOGVjMmE1ZmQ1ODBjMTMyZGE3
NzdmMDlkMTAeFw0yNDAyMjYwODQ4NDdaFw0yNTAyMjQwODUzNDdaMDMxMTAvBgNV
BAMTKDVCRDU2MEE0REUzQTlBQzVERkI1NDRGQTBCMTI4OUY4RTNDNjA0RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIiZBBax7v3Fe77H9PCFBzyZEb
1kFCRbRRFpD8RIewCd/kENMXIriKcNyiJYRlipFhzLpC2o6rS+goKzCdqd6sI+Mf
TsQEMmrqI2y4a2EVQu6+SPjiBRH9cBvZdOmIFfVKEuMAVqUp0PUuco+TB28cOAT5
eUjuvsi4niSFq/baqhK94hPL6kdVP1SEs+KMn9r/DzEf79BRAer/px00akqca+Na
R/8ODhboWMODFkQ+GZuy70lspT48kJrjN9iyhfF28pihorVOpKWTac/be0fWl85I
fSmDMrRrYgsfJyPQYRqjIijrDIovWUsXS4YRi4xVf8XC8y4YS+aZ2J+s3b4FAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUW9VgpN46msXftUT6CxKJ+OPGBOAwHwYDVR0j
BBgwFoAUXXCEWCKmFAjsKl/VgMEy2nd/CdEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzgvNUQ3MDg0NTgyMkE2MTQwOEVDMkE1RkQ1ODBDMTMyREE3NzdGMDlEMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hYQ0VXQ0ttRkFqc0tsX1ZnTUV5Mm5k
X0NkRS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzgvMzQzNTJlMzgzMDJlMzEzNTMy
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1Q
mDANBgkqhkiG9w0BAQsFAAOCAQEAfVu2ZVXurwDFzBfqyhBeJS9zbE0Olz8zV7WB
Q2e5yN/St6kJFbL/tuSppOF4To5GySnmabda3WUZzOmGHZ5nqyMFA5g+OvLWgvDc
cAcekfVsac22mawyrRbSkU0soBsl93a/stFRFbHS0spSoiTV155mTKFjKQfW3rGS
31QN0d98yMSX/JA8DznEyrjFkobBpoWCM5PY/OwNDwQ6BJ8y4b2vgdA8DQwafUfW
1+sCGqUuczdXjY5+MlJZdNpFNmGvFQZXwQqCdjG3lgH+nNVkWX8hVnN7TCGAmkwD
T71ka02gDc44RQviHsgs3oTZXE8djjzenNjYRYfxVYzPjsOAog==
-----END CERTIFICATE-----
Generated at Sat May 11 08:13:55 2024 by rpki-client on console-ams.rpki-client.org