Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa
File: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (raw, json)
Hash identifier: 5LOGXsAFfY8MpN+3dgrjf5uTyIh00nk/J0/MSXxVmy4=
Subject key identifier: 28:5C:5F:61:69:3E:AA:4E:70:35:0E:A6:6E:E1:C5:67:D9:CF:EA:BF
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 6FE6B96E82FCCF3522A98D6805E1B3306891B4B5
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa
Signing time: Tue 28 Jan 2025 19:11:07 +0000
ROA not before: Tue 28 Jan 2025 19:06:07 +0000
ROA not after: Tue 27 Jan 2026 19:11:07 +0000
asID: 213920
IP address blocks: 178.132.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:e6:b9:6e:82:fc:cf:35:22:a9:8d:68:05:e1:b3:30:68:91:b4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Jan 28 19:06:07 2025 GMT
Not After : Jan 27 19:11:07 2026 GMT
Subject: CN=285C5F61693EAA4E70350EA66EE1C567D9CFEABF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:b3:f7:35:80:3a:da:cf:da:40:45:66:8e:
32:b5:e6:bc:f9:dd:b1:7a:35:50:42:ae:65:96:04:
ab:59:5c:93:42:a6:77:bd:ee:f3:fe:54:24:74:2c:
e3:57:65:be:d1:54:23:0d:7c:2b:15:f3:8b:da:65:
89:22:6c:6c:6b:9c:8f:5c:70:26:64:db:9c:a5:47:
f3:67:aa:e4:9f:18:97:c0:84:eb:c4:a4:b5:d5:fd:
73:87:dd:28:9d:d3:0e:8e:72:ff:b5:f4:58:0d:9b:
19:5f:d3:31:ef:fe:e1:f9:11:31:44:c6:45:1c:d7:
31:60:e2:e3:01:2c:2b:e0:dd:ec:d9:83:98:60:ff:
de:f6:d3:60:ef:32:92:56:71:9c:c5:fe:1b:99:31:
0c:8b:c4:66:15:3f:93:33:5c:e2:eb:2d:4d:00:b6:
92:2e:e2:34:76:aa:7b:39:0a:53:eb:93:a4:88:cf:
31:2b:fa:3e:16:ff:e9:4d:72:d4:1b:d5:f6:02:04:
32:45:bb:b4:f7:7a:55:68:e5:fc:da:bc:db:4c:71:
04:04:6a:3d:92:56:10:8d:d8:31:81:74:06:95:28:
bf:3f:0c:a3:8b:2d:3b:82:d6:97:ca:34:9d:46:56:
0c:21:ed:f5:fb:87:cf:a2:33:7f:54:e6:b5:40:dd:
25:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5C:5F:61:69:3E:AA:4E:70:35:0E:A6:6E:E1:C5:67:D9:CF:EA:BF
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.198.0/24
Signature Algorithm: sha256WithRSAEncryption
09:35:71:4f:e9:af:7d:28:18:2e:62:3b:a2:95:a9:11:96:58:
94:45:a6:25:be:a7:e8:14:c0:b4:f4:52:7a:69:c0:05:de:53:
e6:27:48:1a:88:f3:6b:bb:9a:62:c1:1b:4c:f7:99:fa:78:60:
d9:26:89:62:b4:34:fe:08:fa:be:9f:8f:dc:f3:21:55:61:54:
7e:e0:43:ab:49:18:66:d6:61:04:cd:17:9d:21:be:a9:98:8a:
44:51:d1:9e:72:e8:52:2a:69:06:73:b8:c5:60:2c:16:1c:28:
a4:5f:47:45:a3:6e:6e:ba:43:d6:fc:a4:59:cb:19:3f:f9:e8:
b6:a1:45:f5:89:24:c7:d3:24:9e:c0:42:5f:30:14:4d:52:eb:
ee:04:7f:28:a7:86:2a:7a:f2:97:06:15:93:52:82:1f:b1:cc:
8a:9b:f8:6d:40:86:29:0d:52:ab:1c:c0:c6:ab:6c:c1:75:75:
9d:32:5f:3d:a7:af:1f:6e:86:fe:da:3b:5a:06:3b:75:78:04:
e3:16:10:2a:b0:30:15:ea:96:21:bb:e9:e5:b2:e4:94:38:61:
e4:d4:6b:27:cf:67:f2:69:71:56:2c:0f:4b:cd:ff:de:20:1d:
f6:5b:53:f1:07:fb:1e:fb:32:0c:e3:19:a4:06:31:0a:f4:32:
25:cf:18:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:05:13 2025 by rpki-client