Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136352e302f32342d3234203d3e203232333633.roa
File: 3138352e32392e3136352e302f32342d3234203d3e203232333633.roa (raw, json)
Hash identifier: gQDSbXaIr1rTjgumDUhBwdfm8WfjWS43a0mOM2n3AyM=
Subject key identifier: 2C:74:DB:B7:57:E1:45:9B:29:75:7B:42:CC:A5:A9:E7:3B:C5:5F:A2
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 3C0FA82324DFDE2A7F231B55A98C1D1D78650505
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136352e302f32342d3234203d3e203232333633.roa
Signing time: Mon 02 Oct 2023 05:23:29 +0000
ROA not before: Mon 02 Oct 2023 05:18:29 +0000
ROA not after: Mon 30 Sep 2024 05:23:29 +0000
asID: 22363
IP address blocks: 185.29.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:0f:a8:23:24:df:de:2a:7f:23:1b:55:a9:8c:1d:1d:78:65:05:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 2 05:18:29 2023 GMT
Not After : Sep 30 05:23:29 2024 GMT
Subject: CN=2C74DBB757E1459B29757B42CCA5A9E73BC55FA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:3f:33:46:18:a6:cb:fc:22:5c:89:da:1f:
dc:9e:6f:a5:c5:b8:89:58:6e:a7:18:63:b9:15:18:
03:ad:53:c4:ce:c4:24:a0:90:27:27:45:96:fd:b1:
0f:5a:2b:2e:34:9e:a3:3e:13:e7:e9:fa:51:11:ac:
80:20:3f:1d:e5:7e:87:ee:e3:7c:3e:ec:b4:b5:7e:
20:98:85:67:09:f0:c2:a8:7a:22:33:9f:91:e2:a8:
31:c9:18:fc:52:7d:97:96:a0:be:4e:29:92:6c:1a:
f0:23:ea:32:40:f7:f8:fe:ff:df:10:b2:fc:44:a9:
3c:db:ab:f6:85:d7:ed:d9:42:f3:be:fb:6d:0b:e0:
27:69:f0:41:9c:95:b4:d6:b3:ce:7c:7a:e8:91:6f:
35:e8:4f:76:75:8b:94:ca:64:d3:9a:8d:5e:cd:40:
97:07:63:14:15:18:38:dd:8b:40:68:39:24:b3:f1:
cd:4b:19:8e:85:83:82:5d:ad:48:f8:1a:cb:9f:c8:
bb:51:1e:cb:42:89:7a:94:28:e7:9e:21:cf:bf:51:
84:fb:f3:8f:5f:07:d0:c2:93:20:84:34:fd:2f:65:
10:4f:f8:1c:33:4d:ca:e3:9e:f7:21:2c:03:d9:d4:
78:62:8d:d4:53:ff:92:e4:9d:54:46:22:5b:e4:75:
bc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:74:DB:B7:57:E1:45:9B:29:75:7B:42:CC:A5:A9:E7:3B:C5:5F:A2
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136352e302f32342d3234203d3e203232333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.165.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ec:13:63:6e:ff:ba:e3:2f:2d:d5:38:50:37:37:d1:c1:e5:
7e:da:34:ee:ff:b9:51:1d:a0:92:b3:df:69:de:c4:74:9b:b8:
5b:5b:f2:67:28:8d:7a:e3:f0:d8:f7:ab:a4:8b:64:64:d0:17:
89:07:07:c4:40:06:c2:a5:6e:97:bc:c4:d7:d7:61:d6:d8:52:
59:65:86:84:8c:f6:94:52:87:1e:52:5d:14:90:64:67:2c:47:
50:8c:3c:d3:f5:0e:eb:53:ca:63:6e:5e:5f:16:13:5a:bd:f1:
9f:2c:2a:b1:4b:3a:f3:3d:f7:21:3c:c2:b6:d9:0b:25:f4:f9:
2e:c2:11:48:db:d9:03:64:1e:87:05:38:48:46:0f:00:d4:34:
ca:38:f0:03:13:c8:96:a2:39:85:68:47:49:d9:00:20:5e:73:
88:91:25:fd:d5:2d:90:48:35:46:50:4d:b4:33:85:67:5c:9f:
58:63:94:9b:90:75:eb:d0:40:e2:5a:a9:bd:d5:a7:27:cf:38:
81:8e:a4:53:3c:4e:fd:39:82:f0:1c:65:b5:b6:81:43:38:b2:
fb:b1:79:6f:6e:12:8c:92:2e:12:67:2e:02:f8:70:b5:e5:5c:
d1:0d:2d:8d:13:1f:3b:32:30:de:c7:b1:67:af:93:72:5d:02:
48:c6:cf:03
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUPA+oIyTf3ip/IxtVqYwdHXhlBQUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yMzEwMDIwNTE4MjlaFw0yNDA5MzAwNTIzMjlaMDMxMTAvBgNV
BAMTKDJDNzREQkI3NTdFMTQ1OUIyOTc1N0I0MkNDQTVBOUU3M0JDNTVGQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/3j8zRhimy/wiXInaH9yeb6XF
uIlYbqcYY7kVGAOtU8TOxCSgkCcnRZb9sQ9aKy40nqM+E+fp+lERrIAgPx3lfofu
43w+7LS1fiCYhWcJ8MKoeiIzn5HiqDHJGPxSfZeWoL5OKZJsGvAj6jJA9/j+/98Q
svxEqTzbq/aF1+3ZQvO++20L4Cdp8EGclbTWs858euiRbzXoT3Z1i5TKZNOajV7N
QJcHYxQVGDjdi0BoOSSz8c1LGY6Fg4JdrUj4GsufyLtRHstCiXqUKOeeIc+/UYT7
849fB9DCkyCENP0vZRBP+BwzTcrjnvchLAPZ1HhijdRT/5LknVRGIlvkdbxpAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQULHTbt1fhRZspdXtCzKWp5zvFX6IwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzODM1MmUzMjM5MmUzMTM2
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzMzNjMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
uR2lMA0GCSqGSIb3DQEBCwUAA4IBAQAV7BNjbv+64y8t1ThQNzfRweV+2jTu/7lR
HaCSs99p3sR0m7hbW/JnKI164/DY96uki2Rk0BeJBwfEQAbCpW6XvMTX12HW2FJZ
ZYaEjPaUUoceUl0UkGRnLEdQjDzT9Q7rU8pjbl5fFhNavfGfLCqxSzrzPfchPMK2
2Qsl9PkuwhFI29kDZB6HBThIRg8A1DTKOPADE8iWojmFaEdJ2QAgXnOIkSX91S2Q
SDVGUE20M4VnXJ9YY5SbkHXr0EDiWqm91acnzziBjqRTPE79OYLwHGW1toFDOLL7
sXlvbhKMki4SZy4C+HC15VzRDS2NEx87MjDex7Fnr5NyXQJIxs8D
-----END CERTIFICATE-----
Generated at Sat Jun 1 18:48:53 2024 by rpki-client on console-fra.rpki-client.org