Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138352e302f32342d3234203d3e203232333633.roa
File: 3137382e3230382e3138352e302f32342d3234203d3e203232333633.roa (raw, json)
Hash identifier: h6ek+gdj7fa3wucosZ48mfhriaT+Yj6x562YSda9dqY=
Subject key identifier: F2:E0:1C:68:D9:35:FE:99:27:E9:00:D7:D2:63:A2:81:62:67:EB:7E
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 6703BC44C29A622BF025B6C94EDC8373EAF7B56A
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138352e302f32342d3234203d3e203232333633.roa
Signing time: Mon 02 Sep 2024 06:05:20 +0000
ROA not before: Mon 02 Sep 2024 06:00:20 +0000
ROA not after: Mon 01 Sep 2025 06:05:20 +0000
asID: 22363
IP address blocks: 178.208.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:03:bc:44:c2:9a:62:2b:f0:25:b6:c9:4e:dc:83:73:ea:f7:b5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 2 06:00:20 2024 GMT
Not After : Sep 1 06:05:20 2025 GMT
Subject: CN=F2E01C68D935FE9927E900D7D263A2816267EB7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e9:10:7a:61:e2:fc:81:13:1a:31:13:4f:f4:
1c:8f:73:94:7b:d1:8d:e6:85:05:c3:bc:cb:81:e2:
5a:f4:bf:79:97:14:c8:e1:eb:18:7e:fb:c4:3e:51:
b0:48:cd:e5:56:40:d5:28:ee:c1:f4:f8:fa:62:a3:
0d:95:51:f8:e3:93:8d:99:6f:0e:3e:4f:32:b6:a8:
8d:bf:aa:f7:28:19:f6:fd:5e:8e:d7:8b:d1:4c:8c:
ce:38:ee:c0:2b:ee:ab:d9:1f:bc:9a:c8:34:aa:31:
20:1e:9c:d5:49:89:94:62:cd:d3:73:6b:0a:d1:d3:
6c:04:ea:5c:c2:f3:fd:d8:b1:a5:1c:9b:49:98:4f:
35:0c:f8:21:f6:b5:d8:cd:e3:32:40:61:ae:bd:7f:
aa:83:19:a7:39:fc:82:aa:f2:0f:02:a0:6a:51:a8:
ea:7c:bb:12:b9:67:67:51:3d:d8:7e:7c:ce:ba:23:
ac:f8:65:bf:8e:12:54:ba:3a:72:64:ee:cd:ae:bf:
10:07:a8:4f:59:95:02:b8:ad:f0:af:41:5a:63:34:
90:0b:6b:02:f4:6a:29:6e:bf:13:df:e8:a9:9f:31:
06:3b:01:4a:9f:eb:b8:18:30:47:6c:90:e7:cb:3e:
35:06:a0:f8:8e:6a:8e:87:1a:f4:94:b5:ef:e3:c8:
be:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E0:1C:68:D9:35:FE:99:27:E9:00:D7:D2:63:A2:81:62:67:EB:7E
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138352e302f32342d3234203d3e203232333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.185.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:28:9f:63:a3:e8:24:f7:aa:55:00:c0:dc:21:c3:df:1e:c8:
ab:55:75:08:47:6c:cf:88:63:79:75:45:56:1d:01:2b:0c:e2:
92:d2:54:48:4c:cc:92:b6:8d:f4:e8:b8:3d:13:61:93:77:62:
68:1b:d3:b3:fc:39:25:4c:a8:8a:10:fb:71:e4:97:9d:a6:1c:
f1:3d:7f:35:3d:24:02:c3:95:aa:d0:d3:42:b5:e7:3b:a2:04:
73:14:43:37:b5:cc:15:5b:ce:07:00:05:28:3c:fd:f2:af:aa:
e0:bd:24:f8:cc:24:ea:c1:3c:a2:58:fb:b3:59:7f:61:e8:76:
9f:07:d1:11:83:c3:69:68:ea:01:13:b2:ae:5f:90:67:58:9a:
89:cc:7a:93:05:55:5d:07:73:53:13:b9:4c:6a:69:a8:4b:28:
8f:55:74:18:29:29:54:5e:32:d6:5a:84:93:85:74:30:43:d2:
3b:b7:6f:b0:4f:8e:20:88:0a:3a:99:6d:7a:28:ff:31:c8:bf:
e0:5d:20:1f:e6:53:b1:94:11:9f:c8:d7:e4:31:5c:fa:06:a6:
7b:70:e4:6b:9d:48:d8:ed:aa:85:e8:8e:f2:ad:fd:14:8c:72:
8f:80:00:89:f0:b4:43:64:fb:8c:50:95:cc:47:64:4e:a0:fb:
5b:2a:f4:9f
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUZwO8RMKaYivwJbbJTtyDc+r3tWowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDA5MDIwNjAwMjBaFw0yNTA5MDEwNjA1MjBaMDMxMTAvBgNV
BAMTKEYyRTAxQzY4RDkzNUZFOTkyN0U5MDBEN0QyNjNBMjgxNjI2N0VCN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL6RB6YeL8gRMaMRNP9ByPc5R7
0Y3mhQXDvMuB4lr0v3mXFMjh6xh++8Q+UbBIzeVWQNUo7sH0+Ppiow2VUfjjk42Z
bw4+TzK2qI2/qvcoGfb9Xo7Xi9FMjM447sAr7qvZH7yayDSqMSAenNVJiZRizdNz
awrR02wE6lzC8/3YsaUcm0mYTzUM+CH2tdjN4zJAYa69f6qDGac5/IKq8g8CoGpR
qOp8uxK5Z2dRPdh+fM66I6z4Zb+OElS6OnJk7s2uvxAHqE9ZlQK4rfCvQVpjNJAL
awL0ailuvxPf6KmfMQY7AUqf67gYMEdskOfLPjUGoPiOao6HGvSUte/jyL6bAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU8uAcaNk1/pkn6QDX0mOigWJn634wHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzNzM4MmUzMjMwMzgyZTMx
MzgzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzIzMzM2MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACy0LkwDQYJKoZIhvcNAQELBQADggEBAGoon2Oj6CT3qlUAwNwhw98eyKtVdQhH
bM+IY3l1RVYdASsM4pLSVEhMzJK2jfTouD0TYZN3Ymgb07P8OSVMqIoQ+3Hkl52m
HPE9fzU9JALDlarQ00K15zuiBHMUQze1zBVbzgcABSg8/fKvquC9JPjMJOrBPKJY
+7NZf2Hodp8H0RGDw2lo6gETsq5fkGdYmonMepMFVV0Hc1MTuUxqaahLKI9VdBgp
KVReMtZahJOFdDBD0ju3b7BPjiCICjqZbXoo/zHIv+BdIB/mU7GUEZ/I1+QxXPoG
pntw5GudSNjtqoXojvKt/RSMco+AAInwtENk+4xQlcxHZE6g+1sq9J8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:19:05 2024 by rpki-client on console-fra.rpki-client.org