Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133372e302f32342d3234203d3e203631333137.roa
File: 3138352e3135302e3133372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: nq6RWCHWZ2yeLlFsgbEfsKCqpnGPpCYC6Nz3829Syaw=
Subject key identifier: 8C:E3:52:6F:71:68:F1:4D:9C:CC:98:73:C9:6F:E8:5D:06:F9:2B:D2
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 56221B96D95AE5753DA83FA63BEE2F911814ACC1
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133372e302f32342d3234203d3e203631333137.roa
Signing time: Sat 21 Dec 2024 12:39:45 +0000
ROA not before: Sat 21 Dec 2024 12:34:45 +0000
ROA not after: Sat 20 Dec 2025 12:39:45 +0000
asID: 61317
IP address blocks: 185.150.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:22:1b:96:d9:5a:e5:75:3d:a8:3f:a6:3b:ee:2f:91:18:14:ac:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Dec 21 12:34:45 2024 GMT
Not After : Dec 20 12:39:45 2025 GMT
Subject: CN=8CE3526F7168F14D9CCC9873C96FE85D06F92BD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:66:08:68:a2:77:5e:c3:77:0f:a2:27:67:50:
02:2a:9d:4b:10:26:18:f9:51:11:7b:38:4e:27:cd:
da:86:73:4a:9b:71:f3:e5:ec:5d:d5:6d:4c:dc:dc:
a2:9f:69:74:90:c7:c4:9c:e7:81:10:16:a8:25:dc:
70:d4:34:ad:fb:bb:af:8c:e8:de:20:ea:ad:94:68:
68:99:ac:e7:50:1b:38:f2:cc:a3:77:77:3d:44:8c:
d9:49:b7:e3:7e:e6:fe:d9:e0:88:55:a0:0b:48:70:
a2:d1:46:65:de:a0:4d:35:4a:16:4b:49:61:e5:de:
62:59:3f:06:9b:2a:a1:3e:df:c7:fb:6b:67:ce:0f:
51:72:48:4e:c7:7e:97:0f:71:48:d5:58:ce:fb:91:
14:58:11:36:27:e6:f4:7e:14:42:f8:9c:a1:cd:e0:
c3:54:7e:cf:e3:be:7a:88:42:85:60:39:14:11:cd:
6c:4b:18:45:06:2c:76:bf:f3:83:be:e3:b8:fd:78:
f0:91:42:ff:ba:2a:71:67:f4:7e:53:c0:99:69:fe:
13:72:dc:53:32:6f:8e:23:36:a5:51:c1:cf:d8:c2:
af:72:d2:68:8d:5e:57:2b:29:e4:46:2e:f2:1c:c5:
37:aa:1a:41:50:9e:84:3f:13:81:08:9d:f4:4f:31:
55:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E3:52:6F:71:68:F1:4D:9C:CC:98:73:C9:6F:E8:5D:06:F9:2B:D2
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133372e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.137.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:63:4b:2d:6a:dd:13:32:10:4e:0d:8c:43:c8:f8:27:53:91:
49:01:1d:fb:84:ca:66:28:8e:87:f2:98:80:1e:c9:b5:a3:a9:
f8:bf:17:92:eb:d6:73:b8:e8:af:3e:6a:d9:d8:07:44:ee:a4:
c8:24:33:15:6a:7c:64:48:b3:f3:77:a4:74:76:a6:dc:29:0b:
00:f4:48:02:07:9d:dc:60:20:b5:1b:42:67:1d:d4:b6:60:85:
33:4d:46:21:b8:0f:95:e9:10:92:44:66:a0:43:ee:65:7c:d7:
a5:ad:0a:16:69:76:e7:6f:6d:99:8a:3f:03:6f:35:e0:fd:f7:
f2:30:90:97:12:77:a4:2c:41:3f:a5:dc:10:5c:7f:7f:4f:54:
10:be:cd:8f:e4:56:66:3e:4c:91:83:e6:f6:25:4b:49:42:e4:
99:52:f9:30:0f:81:62:7e:6e:f9:1b:06:52:0c:4f:88:4d:37:
0a:36:78:c8:55:53:e8:0f:9f:45:0d:4c:75:7e:90:fd:cd:73:
c1:4e:ed:9a:db:bc:55:99:48:4f:c1:12:25:96:cb:2a:23:95:
4b:a8:22:e6:ea:9c:fe:8a:af:d1:e3:18:9c:d1:29:72:a7:2b:
ad:81:66:ef:e3:1f:b5:e7:5e:63:33:c9:4f:61:38:af:63:5f:
0c:e3:38:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:23 2025 by rpki-client