Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/352e3235322e3134302e302f32342d3234203d3e20313336373837.roa
File: 352e3235322e3134302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: hr8e/0X4Ug5PW+mKI78/lozUe8gUO9HD3F49bC+8NQ8=
Subject key identifier: A5:E9:AA:2E:06:8A:5A:F6:91:AE:48:06:12:29:CB:21:19:4E:7F:78
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 71273ECC7D3EC311A923CFE65D3363F43DAEFA1A
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/352e3235322e3134302e302f32342d3234203d3e20313336373837.roa
Signing time: Tue 13 Feb 2024 12:54:15 +0000
ROA not before: Tue 13 Feb 2024 12:49:15 +0000
ROA not after: Tue 11 Feb 2025 12:54:15 +0000
asID: 136787
IP address blocks: 5.252.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:27:3e:cc:7d:3e:c3:11:a9:23:cf:e6:5d:33:63:f4:3d:ae:fa:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Feb 13 12:49:15 2024 GMT
Not After : Feb 11 12:54:15 2025 GMT
Subject: CN=A5E9AA2E068A5AF691AE48061229CB21194E7F78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ed:42:bf:5a:e5:69:6e:6e:fa:b5:9b:d7:d5:
1c:ba:15:9a:57:8f:51:0a:27:dc:56:61:8e:41:7a:
5f:b3:cc:99:a6:6f:9c:cc:57:45:6a:6a:36:f6:66:
73:6e:93:66:e7:cd:94:af:25:06:af:79:00:55:00:
56:e6:5a:5a:52:c9:46:b5:47:6b:1b:8f:5f:7c:8f:
f7:fa:19:42:9e:93:d2:b1:fc:b3:08:35:d3:ea:e8:
53:d9:4d:98:e9:67:7e:5f:b7:5c:1b:5d:53:f5:1b:
91:5f:3b:19:54:b8:d5:1a:98:2d:40:f4:6c:79:82:
f5:7f:cb:81:21:13:6d:6f:70:d4:49:36:a3:ce:01:
38:5a:70:f1:23:08:7d:9c:d4:c0:6e:69:8b:87:46:
3a:07:58:3e:52:4c:72:35:10:60:f6:66:48:26:d8:
bd:f2:bb:69:24:06:b7:b1:66:ea:ec:bc:5f:42:c4:
a4:8a:b0:35:80:dc:d8:e8:07:b2:bd:7b:55:51:21:
f6:8d:c3:b0:9a:7d:56:16:59:6f:51:d3:a5:17:13:
2a:87:2b:0b:82:75:88:87:d5:0b:dc:b8:d6:a4:60:
b7:e0:fd:59:c3:e2:bf:50:a6:e0:76:ac:11:e4:85:
04:3c:25:a9:85:34:35:c9:89:fb:9a:36:f2:46:76:
96:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E9:AA:2E:06:8A:5A:F6:91:AE:48:06:12:29:CB:21:19:4E:7F:78
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/352e3235322e3134302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.140.0/24
Signature Algorithm: sha256WithRSAEncryption
23:e6:cc:3f:ae:55:2f:ed:f0:bf:5a:eb:a5:d8:18:10:e1:5e:
bb:39:1b:73:1e:0b:de:f9:91:41:de:03:75:d0:f2:ad:69:c3:
33:d7:6f:e0:ee:8b:8e:46:db:b2:b5:5d:70:cc:d0:ca:4c:67:
3c:e2:23:85:72:05:60:d9:c4:45:6d:bf:30:5e:b4:1e:98:77:
28:f4:04:10:35:d8:47:b4:90:6f:c7:69:61:0c:cd:4f:6f:40:
cc:97:31:5d:47:5c:8b:82:ba:17:5b:88:c7:9b:e7:33:5c:cc:
c4:f4:dc:d9:5b:49:3d:c7:e0:6a:5a:81:ef:ce:32:e7:aa:e1:
50:64:41:53:9d:82:50:97:9b:4e:64:56:54:d0:a0:1f:7f:f8:
2b:89:33:c5:15:ae:58:e2:6d:87:b5:19:a3:8c:ec:e0:43:ad:
96:e6:5e:46:d2:20:1b:9d:05:a4:ab:ab:52:16:0f:cb:25:0c:
0b:13:74:e4:d3:a8:05:02:84:66:72:84:a3:09:e4:2a:c9:02:
e5:d1:b3:ee:4e:22:32:48:5e:1b:62:b8:d8:19:da:4b:63:7b:
21:9b:8e:a2:9d:17:3f:ca:71:1b:cc:09:78:88:30:79:85:7f:
42:38:6d:06:3c:59:07:5c:3b:21:a4:34:d7:5e:5c:f6:a4:c4:
af:45:1c:be
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUcSc+zH0+wxGpI8/mXTNj9D2u+howDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWQ3MDg0NTgyMmE2MTQwOGVjMmE1ZmQ1ODBjMTMyZGE3
NzdmMDlkMTAeFw0yNDAyMTMxMjQ5MTVaFw0yNTAyMTExMjU0MTVaMDMxMTAvBgNV
BAMTKEE1RTlBQTJFMDY4QTVBRjY5MUFFNDgwNjEyMjlDQjIxMTk0RTdGNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA7UK/WuVpbm76tZvX1Ry6FZpX
j1EKJ9xWYY5Bel+zzJmmb5zMV0Vqajb2ZnNuk2bnzZSvJQaveQBVAFbmWlpSyUa1
R2sbj198j/f6GUKek9Kx/LMINdPq6FPZTZjpZ35ft1wbXVP1G5FfOxlUuNUamC1A
9Gx5gvV/y4EhE21vcNRJNqPOAThacPEjCH2c1MBuaYuHRjoHWD5STHI1EGD2Zkgm
2L3yu2kkBrexZursvF9CxKSKsDWA3NjoB7K9e1VRIfaNw7CafVYWWW9R06UXEyqH
KwuCdYiH1QvcuNakYLfg/VnD4r9QpuB2rBHkhQQ8JamFNDXJifuaNvJGdpYBAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUpemqLgaKWvaRrkgGEinLIRlOf3gwHwYDVR0j
BBgwFoAUXXCEWCKmFAjsKl/VgMEy2nd/CdEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzgvNUQ3MDg0NTgyMkE2MTQwOEVDMkE1RkQ1ODBDMTMyREE3NzdGMDlEMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hYQ0VXQ0ttRkFqc0tsX1ZnTUV5Mm5k
X0NkRS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzgvMzUyZTMyMzUzMjJlMzEzNDMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
BfyMMA0GCSqGSIb3DQEBCwUAA4IBAQAj5sw/rlUv7fC/Wuul2BgQ4V67ORtzHgve
+ZFB3gN10PKtacMz12/g7ouORtuytV1wzNDKTGc84iOFcgVg2cRFbb8wXrQemHco
9AQQNdhHtJBvx2lhDM1Pb0DMlzFdR1yLgroXW4jHm+czXMzE9NzZW0k9x+BqWoHv
zjLnquFQZEFTnYJQl5tOZFZU0KAff/griTPFFa5Y4m2HtRmjjOzgQ62W5l5G0iAb
nQWkq6tSFg/LJQwLE3Tk06gFAoRmcoSjCeQqyQLl0bPuTiIySF4bYrjYGdpLY3sh
m46inRc/ynEbzAl4iDB5hX9COG0GPFkHXDshpDTXXlz2pMSvRRy+
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:05 2024 by rpki-client on console-fra.rpki-client.org