Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3135362e3231372e302f32342d3234203d3e203630343538.roa
File: 3138352e3135362e3231372e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier: 8jiJMQEMDfCP46aEORctsvOS64YIu8o6i/jztvFyab0=
Subject key identifier: 27:0B:0E:D6:89:C6:0C:14:1E:B7:A8:4C:96:02:A0:F2:3D:57:4C:65
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 4491372F17E150762368E752A728A84D8B794F3F
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3135362e3231372e302f32342d3234203d3e203630343538.roa
Signing time: Mon 03 Jul 2023 05:41:55 +0000
ROA not before: Mon 03 Jul 2023 05:36:55 +0000
ROA not after: Mon 01 Jul 2024 05:41:55 +0000
asID: 60458
IP address blocks: 185.156.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:91:37:2f:17:e1:50:76:23:68:e7:52:a7:28:a8:4d:8b:79:4f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Jul 3 05:36:55 2023 GMT
Not After : Jul 1 05:41:55 2024 GMT
Subject: CN=270B0ED689C60C141EB7A84C9602A0F23D574C65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:40:12:64:ad:0a:f8:68:4c:b8:83:03:ce:eb:
15:dd:05:a9:3f:f8:09:76:b8:fc:91:d1:49:72:ab:
0b:3a:12:af:76:a6:39:0c:47:07:d1:a7:fa:2a:d6:
6a:93:05:28:6d:7d:5b:ca:23:d1:a6:ea:85:19:03:
e0:a6:e8:17:b8:4a:fe:0a:4c:65:e3:90:39:d4:d1:
0c:88:61:32:21:6b:89:0a:77:2b:ff:34:f0:fc:ac:
cc:65:e6:d1:d5:5f:8f:5a:98:28:76:bf:1b:e1:8e:
f4:1f:17:a5:80:dc:ff:1f:33:53:8c:c9:8e:c1:2e:
88:41:8a:cf:10:bc:d5:98:c4:1d:08:c6:0c:2c:78:
c4:bb:d5:cb:01:17:28:ab:64:a2:ff:7f:98:88:30:
6e:5f:80:ab:91:85:c7:0b:dd:98:05:38:cd:63:c7:
81:fc:45:8f:d0:93:61:ed:7d:73:7b:ed:54:63:b7:
a2:39:0c:a4:d8:5a:7a:97:eb:74:58:bd:59:fe:34:
fc:b8:c5:09:5f:8b:04:15:84:38:5d:ee:8a:84:06:
8e:8e:91:0f:9a:7d:04:f4:29:12:4d:b8:7d:47:ab:
87:b5:c5:b9:c3:54:12:9d:29:29:fc:c4:bb:a5:29:
48:5d:b6:54:69:2d:af:cf:d9:63:5f:e5:70:43:be:
80:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0B:0E:D6:89:C6:0C:14:1E:B7:A8:4C:96:02:A0:F2:3D:57:4C:65
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3135362e3231372e302f32342d3234203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.217.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:5e:b6:fc:96:c9:13:a6:1f:ad:7b:fe:20:6f:24:d2:dc:fb:
d1:c9:d5:7e:98:6b:82:05:ae:a8:41:67:74:e7:78:45:40:76:
06:9a:2a:6f:07:1d:56:6e:b7:02:db:46:da:ab:0a:92:9a:86:
2c:7c:f5:ff:79:30:43:e9:e0:71:29:1b:12:a0:c7:10:94:28:
40:41:b1:55:52:d3:01:f1:36:9e:82:83:6a:12:3b:94:d4:94:
40:75:6e:30:68:d8:d5:ba:96:9c:86:84:84:2c:58:33:cc:d2:
d3:ab:2e:d8:ff:b6:be:81:9c:5e:21:0f:5f:3b:6f:e5:36:99:
9c:e0:ac:2b:9a:b6:f0:46:53:c8:c9:00:da:8f:38:32:94:0e:
3d:dc:4f:2f:4f:aa:80:20:13:a7:73:3f:12:44:d0:a3:db:84:
07:51:d5:cf:4f:f4:23:0b:04:3c:f2:a4:52:c7:44:e3:4e:b5:
bb:28:74:ca:fc:a1:3a:31:19:93:76:f1:44:24:5a:ce:db:12:
88:7b:6b:09:5b:8c:24:b1:c9:7e:1d:47:4c:29:fb:bd:40:4a:
7f:f8:e6:88:a1:14:59:35:bb:2e:83:7a:c0:31:f4:84:93:5c:
f7:23:f5:d5:1d:84:8c:f7:2f:6a:85:e5:d1:13:2d:33:b2:17:
de:53:b5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:08:53 2024 by rpki-client on console-fra.rpki-client.org