Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130352e302f32342d3234203d3e203630313137.roa
File: 3138352e3234302e3130352e302f32342d3234203d3e203630313137.roa (raw, json)
Hash identifier: nJLQI+3MB7hgnbhNjFug7l3lg1m6x3LnNsfdR2vKKGE=
Subject key identifier: 7E:CE:86:C7:64:E0:B0:ED:87:01:F8:33:98:72:24:C4:5D:60:0B:C3
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 6705E02B68620E1293D966358D856CDAB7FC9A1B
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130352e302f32342d3234203d3e203630313137.roa
Signing time: Mon 27 Jan 2025 14:20:50 +0000
ROA not before: Mon 27 Jan 2025 14:15:50 +0000
ROA not after: Mon 26 Jan 2026 14:20:50 +0000
asID: 60117
IP address blocks: 185.240.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:05:e0:2b:68:62:0e:12:93:d9:66:35:8d:85:6c:da:b7:fc:9a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Jan 27 14:15:50 2025 GMT
Not After : Jan 26 14:20:50 2026 GMT
Subject: CN=7ECE86C764E0B0ED8701F833987224C45D600BC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:52:6f:ce:21:81:fa:8c:d0:29:e2:e4:9a:
15:a1:3f:c9:91:73:ab:c6:42:b6:c4:0e:9d:ed:f3:
ee:b3:45:f8:b9:4c:72:33:2d:a9:f0:a3:14:60:e1:
cb:3d:57:66:0c:d8:c5:f1:ec:1f:5b:33:4a:b7:b5:
4c:10:2e:05:7f:0a:be:4c:6d:47:f1:74:1e:c1:85:
32:12:9f:ab:5f:7f:30:50:e1:1d:b1:e0:4f:8b:fb:
74:3a:26:ba:ec:88:80:38:b7:7f:51:4a:10:54:e3:
c8:12:88:95:fd:84:a9:d3:d3:66:04:68:42:18:85:
4e:4a:43:c3:82:e2:74:b9:68:2e:f7:f6:8f:a5:05:
01:b4:f3:0b:3b:86:f5:ba:17:ab:a7:db:f4:6e:c7:
a0:24:40:94:59:0d:02:3f:cb:0f:f1:93:27:1a:4a:
05:3b:29:6b:17:b7:33:b9:84:d7:cf:54:d5:02:2e:
6e:51:16:c5:1e:a9:ff:65:30:72:57:ad:70:bd:a3:
e2:69:77:da:0d:46:9c:b7:e4:ad:44:18:dc:4c:20:
1f:76:47:4a:b5:5a:11:12:02:41:fb:42:90:a7:cf:
03:2e:a6:21:af:85:4e:7a:ff:a5:fe:96:6e:fe:64:
d7:d5:54:fa:77:42:af:77:c9:b9:83:1e:23:68:97:
82:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CE:86:C7:64:E0:B0:ED:87:01:F8:33:98:72:24:C4:5D:60:0B:C3
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130352e302f32342d3234203d3e203630313137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.105.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:0a:b3:7a:be:d0:ff:df:42:79:68:07:ed:bd:dc:a2:44:04:
cf:a8:89:99:07:82:5f:a0:5c:23:cb:be:9b:e7:cb:e4:10:6a:
d2:fd:41:a9:c5:36:57:5f:e3:cd:ca:a5:1b:44:a3:97:b3:a5:
cd:84:50:12:cb:5b:ad:49:54:95:a0:a1:62:11:e2:20:41:0e:
c3:b0:37:53:ad:ad:f8:c9:39:83:f8:f3:a1:af:2b:35:c6:86:
22:7f:6a:b1:96:64:71:a2:b3:9b:25:17:2e:60:91:c7:e2:82:
b6:a3:f8:98:7c:99:d4:c4:1d:86:a5:0c:03:1d:e8:4c:10:7e:
ce:43:9b:4a:56:82:47:d5:50:c8:f1:f9:16:0b:b2:df:77:47:
24:c2:0d:d2:ad:0f:64:41:8a:ec:d6:59:7a:a9:51:12:26:9f:
21:e9:a8:11:9a:61:52:e1:cc:9a:c6:f2:0d:b5:de:6f:14:9c:
4d:af:56:63:cd:32:03:2d:19:03:7e:2c:2a:43:37:ce:92:46:
53:00:db:74:cc:92:d0:4d:ca:d2:a7:40:15:9f:bc:54:52:dd:
5b:f4:02:8b:14:b8:cf:c2:07:1e:18:59:84:34:6d:96:fb:35:
3a:68:48:07:cd:ad:39:8f:81:16:ec:03:b6:c3:8b:a9:7c:b2:
0c:67:fe:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:45:25 2025 by rpki-client