Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa
File: 3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa (raw, json)
Hash identifier: FBdBmLEGxXhvarnPJcmElFlCgeLSIQ6GXw75K+usirs=
Subject key identifier: D1:22:37:4C:CE:A3:BF:DA:8F:A8:55:8A:CB:75:69:22:08:90:35:38
Certificate issuer: /CN=b3d0280f500695a43204251c9830454ca8a2e7ac
Certificate serial: 08CE4B47398DF53F7C9D538611F10047374751EA
Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa
Signing time: Sun 15 Dec 2024 10:39:35 +0000
ROA not before: Sun 15 Dec 2024 10:34:35 +0000
ROA not after: Sun 14 Dec 2025 10:39:35 +0000
asID: 215703
IP address blocks: 185.186.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl
rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 05:56:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:ce:4b:47:39:8d:f5:3f:7c:9d:53:86:11:f1:00:47:37:47:51:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac
Validity
Not Before: Dec 15 10:34:35 2024 GMT
Not After : Dec 14 10:39:35 2025 GMT
Subject: CN=D122374CCEA3BFDA8FA8558ACB75692208903538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:ad:2d:bc:6e:0a:2c:5d:6b:e0:8f:d4:1a:
ed:a5:8b:e0:e7:74:93:ea:4e:ad:b5:f0:98:92:7f:
5d:dc:98:80:8b:49:82:19:80:00:ca:3d:b0:a4:5e:
72:d8:99:2d:af:96:89:f1:67:2a:02:be:c7:a2:76:
3e:05:6d:2b:04:90:66:6d:14:8c:70:c4:9e:d7:80:
54:89:b2:20:de:86:9c:e3:51:20:86:2d:53:bf:6c:
fa:bc:39:f6:57:0e:e5:6b:c4:28:15:4f:f0:b8:aa:
63:6e:0e:72:31:a8:6a:32:c4:8a:9b:5d:ad:12:3c:
d9:b6:05:21:53:bf:ad:2a:17:77:bf:87:f9:05:c3:
bc:48:eb:18:f7:30:4b:1a:ad:f7:54:0a:25:ea:30:
a6:1b:8b:c9:e4:31:06:33:ed:f6:42:5d:42:80:39:
42:99:56:99:14:ac:68:61:54:f0:bf:bf:2b:bd:1c:
da:b2:1e:fe:75:8e:ed:8f:fd:6e:78:72:5f:6a:5a:
b2:b2:90:c8:0e:17:70:3e:b7:60:76:e2:09:5e:d8:
00:59:ed:18:99:f5:f8:88:31:ea:7c:d9:80:5d:65:
95:db:6e:df:67:8c:d9:ee:1f:67:92:97:f0:9a:69:
3e:c1:aa:d0:52:54:eb:da:ba:25:8f:ec:74:1c:47:
7c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:22:37:4C:CE:A3:BF:DA:8F:A8:55:8A:CB:75:69:22:08:90:35:38
X509v3 Authority Key Identifier:
keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.26.0/24
Signature Algorithm: sha256WithRSAEncryption
01:e2:95:69:a3:27:8f:4d:d3:2d:ac:df:ef:36:ad:bb:24:d4:
25:24:63:00:e7:98:9d:bd:41:12:9a:ff:f3:f6:84:03:38:98:
50:54:12:ff:80:f4:e8:a7:92:d9:39:22:f4:a2:2d:80:0e:07:
6b:c4:17:c3:59:c5:00:bb:83:a6:cb:1f:aa:db:a1:59:4e:8d:
ec:ba:e0:a9:6c:23:37:3c:f2:e2:01:7e:f1:86:9c:a1:2c:7f:
7a:95:36:64:e4:44:3b:27:fc:dd:f8:0c:05:37:0b:55:87:3c:
b1:67:14:6a:6c:ca:07:03:40:66:d6:e8:0d:9b:1a:c0:cb:ed:
84:92:92:29:6c:c2:aa:ea:dc:81:b1:12:2f:69:81:08:2b:20:
c4:c4:9c:32:17:e1:a8:c6:ec:88:7c:a2:71:0c:73:5f:3c:64:
aa:d9:f1:31:a1:72:d0:ed:e8:aa:cc:8b:6f:3c:61:11:4c:2c:
0c:ab:bc:59:c6:e1:b4:44:f5:91:a6:e8:73:45:6a:7c:79:1a:
b4:13:02:0b:2d:fd:a6:a8:f6:e2:fa:ff:db:25:b8:58:61:bc:
97:7c:39:62:11:ed:12:61:30:c4:74:6b:fc:81:5e:44:bd:a4:
7c:7a:28:06:30:72:e6:f6:c7:55:7a:a8:fd:f3:13:14:b5:e6:
63:3a:56:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:44:52 2025 by rpki-client