Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e2039323332.roa
File: 3138352e32392e3136342e302f32342d3234203d3e2039323332.roa (raw, json)
Hash identifier: siJAr4idfhIvCv1IZ4LtxLmIXVGK0NwdKAUqPDWhvUM=
Subject key identifier: 63:50:27:D9:F2:8F:98:C1:D3:42:02:E8:13:F0:BC:9B:07:AC:CA:B6
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 438F8D96D1BCBB16E3FC807177CFEC660038000E
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e2039323332.roa
Signing time: Tue 14 Jan 2025 05:34:56 +0000
ROA not before: Tue 14 Jan 2025 05:29:56 +0000
ROA not after: Tue 13 Jan 2026 05:34:56 +0000
asID: 9232
IP address blocks: 185.29.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:8f:8d:96:d1:bc:bb:16:e3:fc:80:71:77:cf:ec:66:00:38:00:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jan 14 05:29:56 2025 GMT
Not After : Jan 13 05:34:56 2026 GMT
Subject: CN=635027D9F28F98C1D34202E813F0BC9B07ACCAB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a1:23:b6:86:53:19:f7:9e:e7:5a:50:c3:99:
0a:0d:f0:5f:1f:9c:a8:6a:7d:8d:35:48:a8:c0:0c:
f2:c5:e8:5b:dd:75:0c:f4:cd:b8:06:67:a4:63:ca:
c5:e2:b4:da:72:99:8e:af:44:91:00:bf:d7:fc:66:
7a:3c:ce:77:a8:c6:04:49:7f:63:69:ba:de:1a:82:
9d:86:a2:a8:dd:00:b6:78:5d:82:5c:70:c4:df:c1:
45:d3:55:97:9e:b2:35:57:f6:5e:0b:93:9c:72:1b:
7f:84:80:5a:16:e6:3a:c4:41:b9:82:c9:31:f6:74:
d9:0e:3b:9a:41:9b:ae:ed:dd:22:a5:5b:cd:59:a9:
9c:ad:6c:87:5f:0a:fa:ab:56:57:3b:1e:03:82:98:
6a:b2:9f:54:69:f7:0d:61:a7:30:15:23:9e:8d:31:
f8:f9:05:8f:c3:ee:c1:82:c4:8f:4d:25:e6:30:1c:
33:42:ce:9f:3a:56:a4:42:b2:09:ee:06:93:4d:9d:
83:f0:9d:b2:fa:38:dd:1f:83:11:08:6e:f5:c4:03:
66:9b:96:12:e1:c4:22:bf:ae:52:43:36:2b:fc:21:
89:5e:14:3a:5f:8d:75:3f:f7:84:33:33:37:c7:d3:
ec:e3:5f:eb:bf:9e:12:e0:2d:e8:4a:fc:65:0b:68:
7a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:50:27:D9:F2:8F:98:C1:D3:42:02:E8:13:F0:BC:9B:07:AC:CA:B6
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e2039323332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.164.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:b6:89:87:66:75:ec:92:fe:53:d1:46:ca:b9:e5:b6:ff:1d:
7e:d9:9b:f2:a6:c1:2e:21:38:aa:3f:e7:e0:c5:27:4b:91:37:
ef:3f:44:53:13:c4:97:ce:b5:ca:49:40:99:8d:f7:7b:ab:82:
a0:58:2f:d9:0b:c8:b4:6e:0f:97:56:26:00:05:53:42:46:07:
b0:4d:f3:35:3f:f2:ec:be:f2:d6:d2:9b:a2:9a:76:92:cf:bd:
23:8c:17:97:4e:ab:89:50:72:e0:ba:d8:71:47:18:a5:92:ee:
a6:82:74:37:38:fc:58:74:81:eb:53:8a:f9:d8:82:e7:fa:f1:
67:0d:6a:77:c2:ff:58:8c:cb:95:11:a3:a0:fd:7a:4d:a2:91:
d6:3a:ea:f8:99:53:07:68:14:11:41:7b:29:d3:14:3c:58:d1:
37:99:94:3e:7b:8f:b3:ad:69:0e:e9:c6:2e:52:af:75:c2:a2:
45:5f:a8:62:c5:2a:f1:ce:08:81:9b:48:4f:92:89:13:db:7c:
54:e9:16:02:20:ca:f4:04:67:96:e4:f2:76:80:f8:90:b6:83:
2c:e6:58:fc:ed:3f:02:91:58:3c:68:e2:35:12:ab:49:57:75:
3e:09:0d:09:22:75:01:79:2d:10:ac:18:8f:6c:62:e0:21:9c:
c1:62:e5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:07:43 2025 by rpki-client