Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e33372e3233302e302f32342d3234203d3e203630343538.roa
File: 3138352e33372e3233302e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier: Nzr+aEI5jT8/LOVo2F+J0u8mfnGq+cjlfRM9yjf5l4c=
Subject key identifier: FB:72:32:B2:28:C3:5C:BB:1D:A0:86:50:7B:D3:12:00:6A:75:24:E0
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 2DA44E112CF085F18D2A41B1DB7379F7723FBEF8
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e33372e3233302e302f32342d3234203d3e203630343538.roa
Signing time: Mon 03 Jul 2023 05:41:58 +0000
ROA not before: Mon 03 Jul 2023 05:36:58 +0000
ROA not after: Mon 01 Jul 2024 05:41:58 +0000
asID: 60458
IP address blocks: 185.37.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:a4:4e:11:2c:f0:85:f1:8d:2a:41:b1:db:73:79:f7:72:3f:be:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Jul 3 05:36:58 2023 GMT
Not After : Jul 1 05:41:58 2024 GMT
Subject: CN=FB7232B228C35CBB1DA086507BD312006A7524E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:6a:c1:cc:09:2b:6e:ac:4e:cc:b1:1b:85:
59:43:ba:5f:d5:bb:71:c2:96:6e:fb:41:33:43:48:
ee:73:c1:63:26:56:f9:d5:79:de:f9:05:94:9e:fa:
20:3b:5d:dc:79:3b:9f:7d:b8:37:91:0c:33:ee:a3:
f1:f7:56:9f:be:f3:65:70:29:e3:55:d4:a0:94:92:
08:0e:f2:e3:48:94:63:63:04:bc:83:3b:d0:d9:1e:
66:e4:be:66:38:22:5d:83:e6:2a:62:69:89:f1:80:
83:52:34:79:bd:87:f4:40:10:a8:59:44:0d:55:90:
35:11:90:cf:2a:c9:e7:ee:11:cf:b4:36:7f:ff:2f:
40:56:f9:10:1a:b5:61:5a:81:c5:53:70:83:a5:96:
bb:35:b6:57:c6:4c:36:a5:76:6b:a1:66:af:bb:7b:
40:93:21:a1:24:a2:18:f5:81:7b:31:35:da:03:3a:
4c:31:57:e2:74:95:b3:c5:40:bf:f9:8a:41:b9:90:
44:3c:3c:bc:93:69:48:a8:23:28:84:f2:01:73:b5:
be:66:6f:e6:79:97:67:dc:e0:15:21:78:75:34:2e:
94:14:5d:a8:dc:2a:92:ab:98:33:7e:6f:02:d6:ae:
44:d9:a2:df:bf:56:af:36:b4:4a:9c:1f:ed:cd:f4:
75:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:72:32:B2:28:C3:5C:BB:1D:A0:86:50:7B:D3:12:00:6A:75:24:E0
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e33372e3233302e302f32342d3234203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.230.0/24
Signature Algorithm: sha256WithRSAEncryption
34:26:a9:07:35:48:e3:a1:f2:bc:54:81:57:b0:72:c2:46:4d:
a2:62:27:0f:a6:0b:69:8a:61:87:93:fe:64:67:18:e5:15:bd:
cb:a2:c8:50:dd:24:c8:fa:5b:75:fa:51:47:89:6f:aa:fb:e3:
2b:0a:33:9a:fb:0f:9c:67:21:34:69:ec:88:21:c4:2d:34:53:
10:65:51:d3:22:ea:33:8c:3c:0c:3e:ab:15:f6:9b:d9:69:44:
f2:dd:0a:26:f0:e6:41:84:d3:36:1b:ba:e1:5b:fe:3a:8b:ea:
21:1a:df:3b:8b:ff:fa:ad:b3:ee:06:1c:5c:d0:3a:ac:2e:b4:
35:e4:44:80:fe:44:63:52:a9:dd:e1:a7:6e:a1:86:9e:e8:a6:
dd:9d:a4:88:3e:80:aa:4e:a5:7a:d9:cc:1b:f4:ae:fb:68:87:
ba:a0:c0:e4:b8:2e:5d:bd:f1:c3:34:84:c3:85:1a:65:70:c6:
33:ea:3f:aa:a2:0d:be:47:b4:75:30:18:b6:bd:21:9f:0c:3c:
af:1f:03:a5:6c:fa:ea:cf:24:95:69:ff:21:31:d2:52:ef:b0:
74:8f:29:5d:a4:a0:d2:bb:21:83:36:de:9b:f5:ab:39:57:d5:
fc:85:c8:fa:62:34:da:d6:a5:48:3d:fa:82:58:e5:23:ae:42:
35:02:f6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:08:53 2024 by rpki-client on console-fra.rpki-client.org