Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3132352e37372e302f32342d3234203d3e203630343538.roa
File: 3138352e3132352e37372e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier: QohikauJjJ0kd0jYYLtcL0quU9HPoMZDxQlOtnXdlro=
Subject key identifier: 30:FD:D2:3D:36:15:16:2A:6B:01:30:F8:1C:7E:62:68:54:BD:86:7C
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 152BC9F0057D954BAF48D1652C2C11DE4343A68D
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3132352e37372e302f32342d3234203d3e203630343538.roa
Signing time: Mon 03 Jul 2023 05:41:59 +0000
ROA not before: Mon 03 Jul 2023 05:36:59 +0000
ROA not after: Mon 01 Jul 2024 05:41:59 +0000
asID: 60458
IP address blocks: 185.125.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:2b:c9:f0:05:7d:95:4b:af:48:d1:65:2c:2c:11:de:43:43:a6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Jul 3 05:36:59 2023 GMT
Not After : Jul 1 05:41:59 2024 GMT
Subject: CN=30FDD23D3615162A6B0130F81C7E626854BD867C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:d9:ca:d6:06:da:b7:f6:d6:52:d1:ba:55:
1e:78:6d:35:e6:e1:bf:49:22:5f:76:1b:3d:ce:98:
3e:a0:6f:b7:67:4e:1b:82:74:17:83:04:68:72:f9:
e4:4f:0e:f3:4a:79:34:c7:99:c2:55:b9:fd:e6:0e:
6e:99:12:eb:db:42:d5:f2:fd:53:b3:98:12:31:9c:
ed:f6:fa:e9:63:dc:c4:5a:a6:4d:ba:2d:bf:26:64:
7b:84:70:dc:07:f9:0a:53:a4:19:2a:bb:27:f1:52:
fa:ff:0d:12:d5:df:81:9d:9c:d7:fb:d9:42:1f:3a:
29:84:79:c5:bd:85:1b:3f:db:17:5a:23:27:1f:bb:
d7:ad:35:39:6f:7e:7d:f3:35:df:68:75:b9:97:06:
f8:05:07:13:a1:b8:21:84:b5:cb:a7:72:ed:2f:57:
4e:89:6c:1a:91:c1:ff:d1:ce:9a:33:1c:b3:0b:24:
f1:bd:4a:4d:ce:44:64:28:66:42:72:c1:13:28:7b:
cf:ba:51:cc:05:c5:0d:68:ad:9e:ba:20:91:19:c3:
aa:8b:c7:ae:f4:48:ae:e3:c2:40:06:3d:81:43:d9:
b5:18:85:b6:fe:6f:d3:55:12:7f:7f:dc:8a:e2:a1:
4e:26:ee:47:da:14:a5:14:9d:8d:9f:9f:d1:8e:03:
db:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FD:D2:3D:36:15:16:2A:6B:01:30:F8:1C:7E:62:68:54:BD:86:7C
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3132352e37372e302f32342d3234203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.77.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:45:d7:f9:d1:7c:15:85:a4:a6:a2:3d:73:d1:49:2a:a7:51:
eb:c7:73:82:1a:1d:32:8f:7e:6d:b4:d8:ce:75:ae:9c:6d:26:
17:c9:bc:b3:b6:de:02:62:17:7d:e8:2a:b8:fb:3d:f2:8e:db:
9d:47:c6:1c:5e:82:99:10:08:a2:f1:d1:e8:ea:8f:dd:de:82:
d4:01:db:54:58:20:f4:d4:bc:d7:4b:74:04:c2:9d:1a:22:dd:
b7:a1:a4:b8:a9:56:31:13:75:87:f5:c0:a5:b7:8f:bb:46:2f:
36:85:e6:2c:26:75:57:13:67:03:29:0b:b4:29:85:09:42:e4:
b7:db:0f:51:57:10:20:86:8f:90:f0:21:a3:2d:ae:06:67:5a:
06:33:89:be:a1:fc:1e:0f:69:a0:75:cb:53:c0:9e:da:e9:f2:
1d:61:ce:15:fa:b8:98:7b:f2:a0:4b:aa:89:14:0f:89:3c:83:
64:5a:b4:4b:59:4f:97:5c:61:a1:e6:d5:b4:4f:4e:41:50:43:
25:cb:e9:c4:45:ef:63:d3:4f:c8:6c:0a:a3:4d:63:38:7a:b1:
91:f5:55:c5:36:b1:d1:09:7c:1b:9e:14:a6:e1:fe:e6:d7:c1:
6c:55:b1:21:26:af:e7:91:17:5f:61:8e:f0:1d:2a:a4:2e:16:
2a:1b:72:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:08:53 2024 by rpki-client on console-fra.rpki-client.org