Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e33372e3233302e302f32342d3234203d3e203630343538.roa
File: 3138352e33372e3233302e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier: xiVqSDY/g7ABR4IDbjuy1kX50SfNeC3pbMfBYX2QvI4=
Subject key identifier: A3:5E:65:7A:6D:57:1E:30:F9:67:8B:98:63:D8:36:18:61:19:A3:62
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 1ED38F580339D25B294905680C207D5983F6C9E4
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e33372e3233302e302f32342d3234203d3e203630343538.roa
Signing time: Mon 03 Jun 2024 06:05:16 +0000
ROA not before: Mon 03 Jun 2024 06:00:16 +0000
ROA not after: Mon 02 Jun 2025 06:05:16 +0000
asID: 60458
IP address blocks: 185.37.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:d3:8f:58:03:39:d2:5b:29:49:05:68:0c:20:7d:59:83:f6:c9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Jun 3 06:00:16 2024 GMT
Not After : Jun 2 06:05:16 2025 GMT
Subject: CN=A35E657A6D571E30F9678B9863D836186119A362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:74:cc:15:af:dd:06:6e:33:0a:85:09:90:0f:
e3:19:58:0c:8b:8c:e6:93:cb:5a:cc:ac:d1:34:77:
4d:89:8a:e4:43:dd:ee:88:30:23:c2:9d:60:04:25:
af:bb:1d:f1:62:e8:c6:a6:66:ea:1b:97:8f:ac:2c:
0f:8c:c5:17:55:75:19:40:cc:11:9e:7b:cf:33:42:
7f:9e:97:cd:ad:c9:66:8e:e4:0f:87:31:98:f0:c8:
7a:14:62:3a:08:c6:38:e4:53:7e:8e:10:fd:44:56:
59:1f:56:b6:e1:67:30:f0:42:b5:be:9b:7e:53:0c:
87:9d:37:84:3a:25:cf:25:c6:2d:d0:74:e4:06:dd:
0d:be:84:26:68:e7:36:ff:fc:bf:b8:81:47:0f:32:
62:4d:69:76:3d:b8:f0:7c:b8:c1:7d:74:01:18:b3:
02:24:c9:2f:de:9a:ad:ca:49:06:33:42:7e:67:d6:
b3:8d:7b:0f:4b:60:e2:01:da:d2:64:d2:73:e6:7f:
ac:49:20:70:3f:4d:c7:e9:5b:19:d5:5d:55:94:6f:
93:72:f6:47:00:0a:7a:57:6f:5d:c1:9b:7b:94:b9:
9b:31:e9:48:da:92:2e:64:bc:c7:2f:b4:0f:21:e4:
2e:ff:02:e8:a1:cd:b0:3a:88:10:fb:cd:6f:af:af:
ca:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5E:65:7A:6D:57:1E:30:F9:67:8B:98:63:D8:36:18:61:19:A3:62
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e33372e3233302e302f32342d3234203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.230.0/24
Signature Algorithm: sha256WithRSAEncryption
36:33:d9:ec:7f:da:a6:9e:00:fc:13:22:24:e5:a6:33:0f:e3:
ca:a4:2c:77:15:f4:94:72:5c:ab:26:80:84:88:68:3c:62:0c:
0f:40:d1:1e:24:14:84:f9:02:b7:d7:0e:d9:43:a1:de:b9:2a:
41:12:a7:51:0d:c2:0a:e3:ce:0f:b7:60:6b:35:da:1d:ef:c2:
9e:75:24:59:70:ab:31:31:98:b5:d0:62:ec:13:b2:6b:9c:3c:
e0:40:6b:e4:1f:f5:e7:cd:9a:06:7a:58:31:a4:17:e6:f5:c3:
36:34:d7:46:2c:bd:9d:a2:b6:2f:aa:27:06:41:36:1d:ff:ac:
a4:a8:c3:d6:51:66:f6:a0:dc:4a:f2:b6:0d:10:59:d1:51:c1:
76:78:b4:d0:0f:8c:ff:eb:b3:80:24:d8:ce:55:1b:1f:c7:95:
5a:b1:a8:a3:a6:9d:6a:25:e2:3f:45:be:db:92:79:d7:0b:06:
41:70:d1:28:c2:73:b7:bb:e3:4e:f8:8c:69:1e:3f:46:4c:d8:
3c:83:8f:91:25:30:f9:c5:ae:28:32:1d:23:fc:94:97:ff:c1:
f8:e6:0f:43:e2:63:65:28:f6:5a:48:99:2b:fe:17:0c:3f:15:
7a:e1:7d:9f:1f:eb:92:95:4d:a9:31:e1:b1:eb:53:70:c2:a7:
af:b8:5a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:55:50 2024 by rpki-client on console-fra.rpki-client.org