Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138372e302f32342d3234203d3e20323130353338.roa
File: 3137382e3230382e3138372e302f32342d3234203d3e20323130353338.roa (raw, json)
Hash identifier: nc2LdYmKAYj8CbNXAt0MBNA76U6hDfLjRQ5jMQVyiwg=
Subject key identifier: 1F:65:93:2F:D9:02:02:17:1F:61:43:66:A7:C6:A5:E3:AF:B3:97:89
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 3393AEE22BCD0FCD6A3171EC33D83D86A02B969A
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138372e302f32342d3234203d3e20323130353338.roa
Signing time: Fri 27 Dec 2024 08:26:10 +0000
ROA not before: Fri 27 Dec 2024 08:21:10 +0000
ROA not after: Fri 26 Dec 2025 08:26:10 +0000
asID: 210538
IP address blocks: 178.208.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:93:ae:e2:2b:cd:0f:cd:6a:31:71:ec:33:d8:3d:86:a0:2b:96:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Dec 27 08:21:10 2024 GMT
Not After : Dec 26 08:26:10 2025 GMT
Subject: CN=1F65932FD90202171F614366A7C6A5E3AFB39789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:11:32:39:6f:b5:59:86:3a:cb:5f:89:a7:80:
6c:10:d6:7a:5c:03:5d:a2:c8:d2:9d:48:59:21:2a:
dd:b3:d9:4e:c6:bc:3d:c8:83:21:12:1d:cd:b0:2e:
e5:e7:cb:06:ce:b0:85:33:25:2e:65:5d:ee:8f:d5:
4e:18:10:52:30:20:5f:37:0d:47:53:95:cd:5f:d7:
1e:42:54:a5:7d:0b:9a:71:e8:d9:49:14:61:df:af:
62:4f:00:a2:a3:c7:06:99:02:13:82:97:49:c3:c9:
c0:59:7f:2c:ed:a9:ba:6f:e7:f1:59:72:00:7b:70:
a2:83:4d:cc:6e:9b:d9:16:54:00:7b:3c:ae:e6:52:
8e:ca:a0:0a:c3:ac:1d:c9:7c:98:33:63:1e:22:03:
c1:10:cb:43:d6:9b:ac:d4:2c:4c:7f:99:43:46:2e:
94:e4:00:22:d2:fe:8d:32:30:a5:3b:b7:02:11:e3:
56:5d:50:a7:d0:a3:84:a7:b9:65:57:0d:ec:43:eb:
f9:01:b6:85:69:06:cc:fc:6b:04:27:d9:59:62:a6:
de:87:4f:65:98:97:ab:f6:5e:16:c5:23:95:27:fd:
24:7d:85:fe:1d:44:4b:7d:36:8e:3e:34:b1:22:41:
8b:79:ff:1e:08:d0:64:c5:54:c3:ea:b9:51:a8:0e:
f0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:65:93:2F:D9:02:02:17:1F:61:43:66:A7:C6:A5:E3:AF:B3:97:89
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138372e302f32342d3234203d3e20323130353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.187.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:2e:d6:fe:2c:25:0a:46:81:5c:17:b3:6c:63:88:ff:c7:bb:
f7:6a:e4:26:af:34:c3:d4:de:45:b0:cc:78:25:68:f9:f1:2c:
08:6c:a6:b8:05:5a:11:27:d5:4b:f9:ab:be:5c:84:76:c3:ad:
d9:50:7b:84:f0:d9:3d:c8:25:08:af:20:3a:b2:c8:41:7c:02:
29:fc:62:48:dd:75:75:f1:18:39:ac:5e:25:71:e2:24:aa:4d:
90:75:f2:2a:67:3d:20:d3:2d:bd:ac:c5:6d:70:5c:fe:bf:21:
d1:71:9a:0b:42:6c:39:0d:10:0d:1f:f2:c2:40:00:4f:cd:0f:
1f:50:08:2d:aa:e3:d3:d9:98:25:cd:77:dd:9d:7d:e2:ce:07:
f0:1c:03:ba:68:57:50:96:96:39:e5:1b:f2:ab:5c:bc:69:40:
41:74:50:56:24:90:cb:33:19:8f:46:4b:5c:a6:fb:e8:06:cd:
81:54:9b:3b:f2:6e:b4:2f:ae:13:60:30:f7:2b:d4:32:08:7e:
8c:1f:1b:86:9f:e0:d9:77:33:62:80:68:10:28:71:f5:b4:93:
95:bb:ed:da:45:5b:94:81:f6:b0:2d:59:a4:2f:77:78:40:ba:
f0:52:a0:1d:46:d5:c5:ee:f9:15:f0:ab:d6:a5:6b:d7:04:22:
c5:74:67:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:14:24 2025 by rpki-client