Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231342e302f32342d3234203d3e203631333137.roa
File: 38352e3233372e3231342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: md7Dv7iLM06nFQ3B+BrJYSGv3Ys54MykGAX8NXWXGHI=
Subject key identifier: 88:4C:57:9E:86:B6:28:1E:6B:B7:ED:38:28:26:51:57:9F:8D:2F:C4
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 5CD2194B4D7D1473AB86626B039FDA3004749449
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231342e302f32342d3234203d3e203631333137.roa
Signing time: Wed 09 Oct 2024 09:43:24 +0000
ROA not before: Wed 09 Oct 2024 09:38:24 +0000
ROA not after: Wed 08 Oct 2025 09:43:24 +0000
asID: 61317
IP address blocks: 85.237.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 05:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:d2:19:4b:4d:7d:14:73:ab:86:62:6b:03:9f:da:30:04:74:94:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Oct 9 09:38:24 2024 GMT
Not After : Oct 8 09:43:24 2025 GMT
Subject: CN=884C579E86B6281E6BB7ED38282651579F8D2FC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:20:55:51:f7:21:d8:8f:5b:08:3d:db:c9:b6:
3e:8a:45:c8:22:cf:08:4e:74:45:88:74:ee:48:76:
21:8c:4a:b3:49:30:c0:46:df:17:9f:26:ae:21:93:
5f:2f:53:d1:1d:6c:63:96:5e:7d:30:9c:be:cb:1c:
8a:f2:0a:85:f6:6c:0d:a0:b1:5e:4d:99:68:5d:ea:
7a:f4:e7:93:95:5c:30:30:ba:d4:84:9e:b2:82:77:
d9:88:4c:7a:93:29:73:47:04:7a:a3:9b:8e:41:5e:
78:70:25:4e:aa:a7:a7:87:a8:72:1c:87:c4:57:6b:
3a:9d:26:0f:5d:fc:c2:0c:48:7c:8b:8a:e6:24:4e:
c3:60:2f:f8:28:06:c4:c4:4a:fd:1d:45:b2:66:15:
82:d4:a7:39:4f:95:99:80:36:cc:e9:c2:55:87:21:
d9:02:77:e6:ec:d7:29:7b:49:2e:89:62:da:0c:0a:
3a:8e:c8:7a:88:84:92:e2:8b:9e:88:0c:cb:ea:38:
db:27:24:15:10:39:68:d8:7f:af:ca:ab:24:9f:9d:
9a:ad:fa:f2:a7:bc:05:62:21:29:0c:48:e0:e7:f3:
4e:a6:41:da:fd:68:11:5c:7a:f5:3c:c6:e5:1b:d3:
d2:4f:6d:36:19:84:57:5a:69:14:7a:a7:8a:19:a7:
67:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4C:57:9E:86:B6:28:1E:6B:B7:ED:38:28:26:51:57:9F:8D:2F:C4
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231342e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.214.0/24
Signature Algorithm: sha256WithRSAEncryption
07:86:f8:93:d9:2d:e0:bf:57:b4:57:58:ec:2a:1b:c2:c6:e8:
ca:67:a4:39:59:a0:dc:92:d4:3e:d6:77:73:a5:68:c9:94:d6:
8c:3c:47:cf:30:f3:9f:14:6d:c6:83:14:21:9d:13:3b:ca:1d:
57:5b:db:45:c3:c7:bc:58:08:da:1f:fa:d2:ab:37:80:fe:cf:
08:9a:ce:c2:ef:5e:82:1d:1e:31:28:67:b7:f1:d7:cc:91:0c:
14:71:3f:1b:79:05:90:1a:c4:eb:22:ea:eb:b7:ea:e8:d9:a3:
d0:65:6b:30:b5:6d:88:2b:01:ed:87:3b:8a:1e:f0:b9:bd:26:
17:10:dd:b3:7e:ca:9e:24:03:24:b0:bf:b4:16:ed:41:f8:a5:
03:3a:c4:6e:20:01:78:8f:67:d2:21:1b:76:19:9c:c8:96:c0:
86:b5:cd:80:61:8e:90:6d:f1:dc:49:8e:f1:5e:c3:45:98:6c:
24:e6:46:18:8e:d2:1e:dc:fc:04:46:2d:14:67:50:39:95:ff:
de:cb:15:fd:6d:79:65:32:bd:2c:be:6a:b9:06:79:4f:1b:4a:
5a:48:1f:85:78:d0:54:3c:74:fe:11:6f:b3:ab:ce:63:44:da:
4e:19:8a:96:9d:c1:e6:da:3d:0a:74:60:54:88:9c:98:62:9e:
ed:8f:e6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:41 2025 by rpki-client