Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38352e3230382e3135382e302f32342d3234203d3e20313336373837.roa
File: 38352e3230382e3135382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: kEthu/j7XFhgk7YfSon9a+FULgxbyVkL8ryHafYYNlc=
Subject key identifier: E1:AE:72:4E:FA:46:D5:26:2D:E8:DD:49:A4:22:CA:CC:21:3E:12:F3
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 194EF0C76C7F405FE085B7D610C0B9BA1A10CC6D
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38352e3230382e3135382e302f32342d3234203d3e20313336373837.roa
Signing time: Tue 13 Feb 2024 12:54:28 +0000
ROA not before: Tue 13 Feb 2024 12:49:28 +0000
ROA not after: Tue 11 Feb 2025 12:54:28 +0000
asID: 136787
IP address blocks: 85.208.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:4e:f0:c7:6c:7f:40:5f:e0:85:b7:d6:10:c0:b9:ba:1a:10:cc:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Feb 13 12:49:28 2024 GMT
Not After : Feb 11 12:54:28 2025 GMT
Subject: CN=E1AE724EFA46D5262DE8DD49A422CACC213E12F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8b:24:e5:08:8e:d6:2a:f0:b4:b0:2d:c1:42:
1b:4b:05:85:6c:ca:09:ee:7d:c1:d0:78:5f:f6:9f:
6c:36:a2:d9:74:4a:47:d2:62:93:06:61:16:03:4f:
a2:11:e1:d9:be:3e:69:b8:af:2c:a4:c5:dc:ec:4e:
32:1d:eb:31:fd:a0:c2:d1:ad:5c:fa:8b:3f:ac:73:
9b:2d:87:54:79:94:89:c2:3f:2b:f8:93:37:21:b7:
3b:52:74:7f:63:3d:33:38:f4:9d:aa:69:b3:09:33:
d0:fd:cd:87:c2:49:88:cc:ed:87:b1:77:f0:3d:4e:
f7:c6:67:c6:1f:e1:63:03:1c:82:31:b0:5d:bf:9c:
da:62:50:1f:2b:6e:f8:61:c8:87:15:a7:70:e4:71:
af:fd:3c:22:2d:76:1d:7d:8d:14:43:cf:ed:56:67:
c5:a1:9a:ab:4f:36:d8:47:c4:f3:28:12:71:f8:8a:
a0:48:1e:9e:c8:0f:27:cf:2e:30:03:68:2e:38:ce:
80:19:a9:eb:d0:e2:d4:ee:0e:59:4b:e3:f0:0b:56:
46:5f:c0:bd:9e:c6:05:b9:f4:32:ef:0e:12:19:6d:
ca:5e:6e:1f:93:ad:19:dc:29:79:9b:32:fb:18:af:
25:f8:fc:04:a6:d1:3f:90:6c:89:b4:7a:32:e2:33:
a5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AE:72:4E:FA:46:D5:26:2D:E8:DD:49:A4:22:CA:CC:21:3E:12:F3
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38352e3230382e3135382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.158.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:80:9a:51:d0:ef:81:c0:72:1d:85:32:80:b2:ac:7d:36:42:
00:ea:4c:4a:48:32:84:18:1b:02:78:31:40:2f:3e:e0:a3:ba:
0f:a3:3f:df:1a:40:34:1b:48:f8:9f:dc:95:42:c6:4e:d2:e2:
40:b6:bf:da:de:cf:1d:4e:55:e4:21:12:02:aa:58:94:c8:7e:
a3:04:51:93:a4:06:6c:df:7a:df:95:fe:94:65:cd:90:9d:1e:
a4:97:48:8d:39:61:1c:92:9c:da:8a:89:3c:16:e0:7a:d7:71:
da:f2:24:10:45:54:8f:79:dc:a1:bb:4c:f7:53:25:08:d3:59:
ac:59:3d:d0:31:74:78:e5:ab:9a:c5:53:9e:60:e6:c6:40:49:
12:b4:d0:18:8c:b6:2a:ae:55:c6:be:fd:44:b8:d1:97:9b:61:
c1:46:94:44:f0:6e:48:fd:eb:d8:a9:62:74:b4:de:16:8c:f8:
ce:34:31:dd:c8:fc:50:82:f4:3b:78:5c:9b:22:8d:99:1f:5e:
8f:64:19:f8:22:5d:f1:81:dc:47:e5:d7:9c:28:bc:09:e2:dc:
61:e1:92:a5:87:98:46:58:ce:a1:28:da:ca:b6:be:7d:89:e4:
5f:34:0c:d2:a4:dd:53:d2:57:94:9f:cc:8e:fc:2f:ee:8b:75:
c6:3c:b8:1c
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUGU7wx2x/QF/ghbfWEMC5uhoQzG0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWQ3MDg0NTgyMmE2MTQwOGVjMmE1ZmQ1ODBjMTMyZGE3
NzdmMDlkMTAeFw0yNDAyMTMxMjQ5MjhaFw0yNTAyMTExMjU0MjhaMDMxMTAvBgNV
BAMTKEUxQUU3MjRFRkE0NkQ1MjYyREU4REQ0OUE0MjJDQUNDMjEzRTEyRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMiyTlCI7WKvC0sC3BQhtLBYVs
ygnufcHQeF/2n2w2otl0SkfSYpMGYRYDT6IR4dm+Pmm4ryykxdzsTjId6zH9oMLR
rVz6iz+sc5sth1R5lInCPyv4kzchtztSdH9jPTM49J2qabMJM9D9zYfCSYjM7Yex
d/A9TvfGZ8Yf4WMDHIIxsF2/nNpiUB8rbvhhyIcVp3Dkca/9PCItdh19jRRDz+1W
Z8WhmqtPNthHxPMoEnH4iqBIHp7IDyfPLjADaC44zoAZqevQ4tTuDllL4/ALVkZf
wL2exgW59DLvDhIZbcpebh+TrRncKXmbMvsYryX4/ASm0T+QbIm0ejLiM6UbAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU4a5yTvpG1SYt6N1JpCLKzCE+EvMwHwYDVR0j
BBgwFoAUXXCEWCKmFAjsKl/VgMEy2nd/CdEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzgvNUQ3MDg0NTgyMkE2MTQwOEVDMkE1RkQ1ODBDMTMyREE3NzdGMDlEMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hYQ0VXQ0ttRkFqc0tsX1ZnTUV5Mm5k
X0NkRS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzgvMzgzNTJlMzIzMDM4MmUzMTM1
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABV0J4wDQYJKoZIhvcNAQELBQADggEBAKOAmlHQ74HAch2FMoCyrH02QgDqTEpI
MoQYGwJ4MUAvPuCjug+jP98aQDQbSPif3JVCxk7S4kC2v9rezx1OVeQhEgKqWJTI
fqMEUZOkBmzfet+V/pRlzZCdHqSXSI05YRySnNqKiTwW4HrXcdryJBBFVI953KG7
TPdTJQjTWaxZPdAxdHjlq5rFU55g5sZASRK00BiMtiquVca+/US40ZebYcFGlETw
bkj969ipYnS03haM+M40Md3I/FCC9Dt4XJsijZkfXo9kGfgiXfGB3Efl15wovAni
3GHhkqWHmEZYzqEo2sq2vn2J5F80DNKk3VPSV5SfzI78L+6LdcY8uBw=
-----END CERTIFICATE-----
Generated at Wed May 8 19:21:55 2024 by rpki-client on console-ams.rpki-client.org