Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138342e302f32342d3234203d3e20313337383937.roa
File: 352e3232362e3138342e302f32342d3234203d3e20313337383937.roa (raw, json)
Hash identifier: 8ofjdTvME8Ke87X/25f1Lfod2tGk31aa8QOq3yqQqBQ=
Subject key identifier: FC:55:8E:87:65:7D:44:F8:BF:2D:5D:02:2D:1E:A4:D7:FF:C1:A4:FA
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 5C165BE2555CE931E74C555800F5FF4EC6159B7B
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138342e302f32342d3234203d3e20313337383937.roa
Signing time: Sat 25 Jan 2025 13:46:04 +0000
ROA not before: Sat 25 Jan 2025 13:41:04 +0000
ROA not after: Sat 24 Jan 2026 13:46:04 +0000
asID: 137897
IP address blocks: 5.226.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:16:5b:e2:55:5c:e9:31:e7:4c:55:58:00:f5:ff:4e:c6:15:9b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Jan 25 13:41:04 2025 GMT
Not After : Jan 24 13:46:04 2026 GMT
Subject: CN=FC558E87657D44F8BF2D5D022D1EA4D7FFC1A4FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:cc:56:b6:c7:07:a9:27:dd:39:9e:91:6b:
97:52:b9:f8:0c:d8:f1:fe:78:f5:00:e1:8e:0d:f9:
64:6b:e4:0d:57:0d:0b:2b:c3:8d:01:5b:27:bb:1b:
b0:a5:82:99:40:3f:69:7f:08:5e:8b:21:00:bd:fb:
2c:49:b4:25:be:14:b3:0e:08:fd:e9:d8:63:ef:ed:
d3:58:cf:e6:16:75:89:c9:fe:ee:31:fe:a5:2f:e6:
22:5a:92:41:c4:f0:22:95:b5:2f:83:a1:7e:92:be:
8a:c5:81:0d:5f:6b:0c:78:b7:ba:39:0f:4f:6e:e8:
db:97:4d:5c:a8:92:0b:51:f3:e2:a6:09:89:75:04:
7e:7d:2b:8e:ae:d8:61:b8:ed:b6:f8:c4:71:5c:22:
67:0f:4c:f8:50:88:8a:f3:a2:4e:b2:68:b8:3f:5b:
9a:e2:05:ac:d4:a7:93:21:f6:eb:47:a6:d2:26:07:
82:12:8c:a1:4a:ac:de:50:fe:44:ee:d9:da:19:10:
ee:bf:33:0b:52:b7:65:d8:04:2a:49:a2:bc:8d:81:
90:4c:50:90:30:4a:41:94:54:c0:c3:72:08:08:a4:
9e:eb:55:35:9b:78:fe:b5:8f:ce:cb:57:24:7e:aa:
6f:64:9e:38:97:99:c5:13:de:ae:7a:25:00:5c:46:
01:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:55:8E:87:65:7D:44:F8:BF:2D:5D:02:2D:1E:A4:D7:FF:C1:A4:FA
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138342e302f32342d3234203d3e20313337383937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.184.0/24
Signature Algorithm: sha256WithRSAEncryption
89:4b:cd:fa:71:4c:1a:27:fb:fb:67:c8:4f:97:91:60:a3:58:
23:6a:35:5c:b7:31:51:fb:d1:d3:3e:2a:0e:91:7d:d7:4b:ae:
12:3a:5e:92:86:a7:5b:d6:f2:41:2f:3f:6d:81:03:3a:4c:76:
16:55:2f:81:e2:e5:96:95:86:f4:97:7d:ed:77:4c:bf:e0:64:
a5:03:79:ce:5a:8b:d1:bb:f7:d2:e1:70:e8:e5:8b:df:00:c7:
a7:f6:4e:20:75:27:6f:d8:f1:8d:5d:49:61:5b:20:f8:43:eb:
50:47:b2:2b:dc:9d:37:ac:a3:f9:73:a7:15:f4:14:49:55:7b:
6f:6b:4d:10:f4:d7:5b:c4:46:e0:cf:df:6b:41:62:f9:a8:92:
6d:a3:fc:07:cf:b3:06:d2:b5:6e:10:55:28:b6:af:b5:e4:3a:
55:7f:94:e9:5b:10:19:20:9d:d0:19:04:cc:1e:d7:c4:9f:6c:
72:db:a5:4c:3f:de:8c:fa:6c:8e:76:71:2f:ee:b6:52:85:51:
fc:54:49:ca:6f:c9:81:b7:e4:63:42:f9:ce:86:36:91:c5:b7:
5f:d3:14:96:07:1e:e1:4d:4e:45:1f:a9:87:1a:7e:38:7f:dc:
0a:d5:da:03:7f:c9:14:fb:51:ba:a4:df:7b:3e:78:78:f1:98:
93:93:5a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:51:42 2025 by rpki-client