Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39322e3131382e35342e302f32342d3234203d3e20313336373837.roa
File: 39322e3131382e35342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Xo5KQaUxdRScJ/w6vVlR78dfcHOI5WHW7BgIHJnC6MU=
Subject key identifier: 95:66:06:32:FD:36:1A:B3:F6:63:DC:BB:97:D0:3F:7C:09:AB:CC:EC
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 1C567B8F20177DE17B817086BA9CD92436FF7E0E
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39322e3131382e35342e302f32342d3234203d3e20313336373837.roa
Signing time: Tue 13 Feb 2024 12:54:33 +0000
ROA not before: Tue 13 Feb 2024 12:49:33 +0000
ROA not after: Tue 11 Feb 2025 12:54:33 +0000
asID: 136787
IP address blocks: 92.118.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:56:7b:8f:20:17:7d:e1:7b:81:70:86:ba:9c:d9:24:36:ff:7e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Feb 13 12:49:33 2024 GMT
Not After : Feb 11 12:54:33 2025 GMT
Subject: CN=95660632FD361AB3F663DCBB97D03F7C09ABCCEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:78:af:96:3f:4a:3a:17:ba:9c:f0:a4:79:
df:62:83:e2:8a:1d:f7:ba:e2:92:0e:6d:c2:73:b6:
5d:04:79:ba:94:df:9c:3b:ca:a1:6c:cc:14:86:7a:
06:ad:57:ff:99:57:a8:c5:08:54:b0:63:21:5f:8a:
fa:91:1a:52:3e:a2:6f:64:14:1e:3d:01:ca:1e:d0:
8b:36:8d:35:8e:9b:0c:f1:62:a9:d8:d9:20:19:84:
b2:56:59:89:d5:5e:4b:3a:67:89:e8:01:f8:c5:81:
67:ed:23:4e:75:ef:79:e5:4e:ea:98:81:de:97:a0:
1b:96:65:c1:f9:b4:d5:cc:25:b6:ac:2c:b4:fe:ca:
24:e4:df:01:59:d8:dc:cf:ef:0e:ac:05:97:1e:0b:
31:c4:50:74:b1:02:2c:28:a2:4d:53:b3:5c:51:cb:
0e:21:5c:e4:cf:a4:b0:1b:e7:d9:bc:ac:70:5e:3a:
1d:9a:e2:60:49:4a:e8:c2:77:6f:77:b8:ea:b2:b6:
38:cc:3e:2e:bb:60:9b:78:11:60:a2:17:d1:02:1c:
43:dc:f0:4a:08:51:f6:d1:1f:21:a5:80:f9:c3:52:
24:22:3c:e9:c7:62:10:49:b7:53:1c:1b:bc:54:c7:
68:68:21:de:06:57:64:6a:e8:1b:fc:07:c8:c2:ad:
9e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:66:06:32:FD:36:1A:B3:F6:63:DC:BB:97:D0:3F:7C:09:AB:CC:EC
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39322e3131382e35342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.54.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:3c:8a:75:a2:bc:31:21:e1:bd:51:33:6b:f8:f1:fc:a2:21:
2d:ee:d3:1f:cc:34:c4:c8:c8:2c:dc:0c:b4:5c:b7:88:c2:4c:
00:6e:9c:ac:72:59:1d:a0:dd:21:fa:da:a2:3c:f9:82:6e:a8:
16:ae:18:05:02:99:bb:b5:f1:5b:22:c9:e3:87:a9:66:01:ae:
b1:18:17:3f:e6:85:12:c5:b1:db:80:84:85:e2:08:a6:1d:96:
d2:e5:df:4a:cf:6c:ed:84:b8:a6:5f:e8:10:f8:7b:f2:5c:d3:
be:0d:16:28:ed:f6:1c:54:04:db:71:9a:31:07:63:a7:eb:7d:
a2:92:91:e8:05:13:b5:d9:8d:ee:26:f9:fe:ef:39:c1:87:b4:
97:e7:2e:1f:13:a9:96:db:26:d7:5c:a4:fa:e5:76:c1:ed:b9:
fb:a4:29:72:b4:c3:7c:14:c6:46:12:01:27:85:64:f2:cb:fc:
fa:bc:61:98:50:a5:cc:24:74:f7:eb:9c:a8:1b:b5:ef:7c:fd:
6b:4d:78:b5:14:49:72:8d:de:7a:41:f3:27:fe:7d:c0:64:05:
b3:4f:95:17:de:cf:9c:6f:18:d9:4c:ea:2e:ff:83:fb:2f:8e:
e3:a4:a0:2e:db:fc:cc:a3:1c:74:db:16:30:0d:fb:1f:2b:58:
bc:0f:52:ae
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUHFZ7jyAXfeF7gXCGupzZJDb/fg4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWQ3MDg0NTgyMmE2MTQwOGVjMmE1ZmQ1ODBjMTMyZGE3
NzdmMDlkMTAeFw0yNDAyMTMxMjQ5MzNaFw0yNTAyMTExMjU0MzNaMDMxMTAvBgNV
BAMTKDk1NjYwNjMyRkQzNjFBQjNGNjYzRENCQjk3RDAzRjdDMDlBQkNDRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvt3ivlj9KOhe6nPCked9ig+KK
Hfe64pIObcJztl0EebqU35w7yqFszBSGegatV/+ZV6jFCFSwYyFfivqRGlI+om9k
FB49Acoe0Is2jTWOmwzxYqnY2SAZhLJWWYnVXks6Z4noAfjFgWftI05173nlTuqY
gd6XoBuWZcH5tNXMJbasLLT+yiTk3wFZ2NzP7w6sBZceCzHEUHSxAiwook1Ts1xR
yw4hXOTPpLAb59m8rHBeOh2a4mBJSujCd293uOqytjjMPi67YJt4EWCiF9ECHEPc
8EoIUfbRHyGlgPnDUiQiPOnHYhBJt1McG7xUx2hoId4GV2Rq6Bv8B8jCrZ4XAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUlWYGMv02GrP2Y9y7l9A/fAmrzOwwHwYDVR0j
BBgwFoAUXXCEWCKmFAjsKl/VgMEy2nd/CdEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzgvNUQ3MDg0NTgyMkE2MTQwOEVDMkE1RkQ1ODBDMTMyREE3NzdGMDlEMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hYQ0VXQ0ttRkFqc0tsX1ZnTUV5Mm5k
X0NkRS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzgvMzkzMjJlMzEzMTM4MmUzNTM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
XHY2MA0GCSqGSIb3DQEBCwUAA4IBAQBbPIp1orwxIeG9UTNr+PH8oiEt7tMfzDTE
yMgs3Ay0XLeIwkwAbpysclkdoN0h+tqiPPmCbqgWrhgFApm7tfFbIsnjh6lmAa6x
GBc/5oUSxbHbgISF4gimHZbS5d9Kz2zthLimX+gQ+HvyXNO+DRYo7fYcVATbcZox
B2On632ikpHoBRO12Y3uJvn+7znBh7SX5y4fE6mW2ybXXKT65XbB7bn7pClytMN8
FMZGEgEnhWTyy/z6vGGYUKXMJHT365yoG7XvfP1rTXi1FElyjd56QfMn/n3AZAWz
T5UX3s+cbxjZTOou/4P7L47jpKAu2/zMoxx02xYwDfsfK1i8D1Ku
-----END CERTIFICATE-----
Generated at Wed May 8 19:21:55 2024 by rpki-client on console-ams.rpki-client.org