Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa
File: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (raw, json)
Hash identifier: sx/iVfyDskrQoK42os+6TyQoUVUvVUXlGN9RH2id0Fo=
Subject key identifier: 2E:95:83:3F:90:E4:6F:E9:64:2B:42:A4:4C:A9:17:67:72:5E:07:1F
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 67F4E2EF8B7C7F459FBB4D90AC30912DB239FFB7
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa
Signing time: Thu 22 Aug 2024 15:49:46 +0000
ROA not before: Thu 22 Aug 2024 15:44:46 +0000
ROA not after: Thu 21 Aug 2025 15:49:46 +0000
asID: 41720
IP address blocks: 185.242.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 05:18:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:f4:e2:ef:8b:7c:7f:45:9f:bb:4d:90:ac:30:91:2d:b2:39:ff:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Aug 22 15:44:46 2024 GMT
Not After : Aug 21 15:49:46 2025 GMT
Subject: CN=2E95833F90E46FE9642B42A44CA91767725E071F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:33:0b:13:0a:68:ae:42:40:bc:4e:da:75:
53:15:38:54:9e:3a:c1:6f:ea:6b:50:5f:4f:ff:ef:
ee:c5:ef:64:3b:ae:e2:a5:96:e8:d4:02:94:b0:d0:
0f:fa:cd:55:32:cd:46:3d:33:d6:85:e2:d8:31:3f:
2c:5d:21:72:1f:9a:1f:11:fb:e1:99:c0:a7:2a:5d:
c0:bf:c6:9d:b6:12:43:7b:03:f5:71:41:45:19:4c:
49:b8:35:45:7a:bc:17:4d:51:4f:10:59:9f:d9:e8:
36:26:a4:74:01:06:a8:4e:5f:f6:f8:85:49:6e:fa:
64:65:85:e1:f6:8b:8e:f4:92:b9:68:82:db:21:bf:
42:d1:9d:71:54:18:26:7f:c6:c0:26:bc:44:47:e6:
f6:a8:00:8b:bf:08:44:66:27:3e:17:b2:67:3c:da:
41:b7:9b:59:23:ce:bd:f3:89:5d:59:d5:12:d9:48:
ff:76:a9:7f:9a:05:45:32:ea:76:b7:64:de:fa:49:
72:8a:2a:50:d2:ce:90:b0:35:72:07:1a:73:5f:88:
6a:92:9e:c1:42:97:05:81:25:51:00:f5:4f:09:33:
1d:94:ce:0b:7c:3d:0d:4d:12:32:16:47:a9:4e:bf:
dd:bf:2d:a9:c5:e8:08:40:b0:1d:80:11:3f:04:e3:
09:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:95:83:3F:90:E4:6F:E9:64:2B:42:A4:4C:A9:17:67:72:5E:07:1F
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.180.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:1d:5c:62:fc:b5:51:9a:05:75:c0:1d:67:4a:43:73:51:d1:
b4:0e:1d:79:7e:34:9d:71:3b:31:f3:d3:f7:16:8d:70:03:aa:
9a:78:5f:83:ab:f9:cc:c7:8c:e9:e4:cf:ef:e8:61:dd:2c:a4:
18:0d:44:cd:ef:d2:7d:7e:4c:f3:26:fb:09:8b:fd:c8:46:24:
35:b2:6a:3b:22:58:65:3a:75:a0:d1:2f:ba:31:fc:7c:5d:9a:
67:39:1a:3b:96:cc:3f:ed:af:81:f5:09:2b:72:b3:19:4b:7d:
6b:7b:b4:d3:7e:69:dd:13:89:7c:1f:5d:11:da:d8:ba:7b:9e:
f4:da:b8:c7:ca:a8:a3:dc:5d:98:44:05:5b:6f:36:c4:c0:17:
cd:88:0d:ab:64:f7:09:86:8a:16:b4:1c:0d:0b:85:da:e7:eb:
06:ae:52:57:c0:2b:f0:9c:82:ed:e2:49:c8:64:9e:67:81:20:
04:ae:90:91:d6:5d:5b:33:42:56:a7:64:62:3b:34:e0:24:f0:
49:4c:a9:3a:64:5a:4d:3c:d4:ef:89:32:3f:45:4c:a1:74:cc:
dc:ed:60:0d:0e:57:11:c9:f8:7a:02:bb:a4:20:ed:36:1b:93:
fc:5b:a4:16:55:08:81:9d:c5:7d:c4:e2:fe:e8:1b:1f:0c:f3:
ee:a7:d6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:55:01 2025 by rpki-client