Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232322e302f32342d3234203d3e203534323532.roa
File: 3138352e3230352e3232322e302f32342d3234203d3e203534323532.roa (raw, json)
Hash identifier: vlJdreBh2umV1MLSfDeDJS8OcWUeLiiMXwJF1JDhYug=
Subject key identifier: E7:5C:A7:A5:1D:4C:E3:41:82:B7:22:74:2C:E1:68:28:9C:A3:15:F3
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 7DD6DA55FBA2B8C454652F00FE4ABAB798C7AC52
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232322e302f32342d3234203d3e203534323532.roa
Signing time: Wed 06 Nov 2024 19:54:24 +0000
ROA not before: Wed 06 Nov 2024 19:49:24 +0000
ROA not after: Wed 05 Nov 2025 19:54:24 +0000
asID: 54252
IP address blocks: 185.205.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:d6:da:55:fb:a2:b8:c4:54:65:2f:00:fe:4a:ba:b7:98:c7:ac:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Nov 6 19:49:24 2024 GMT
Not After : Nov 5 19:54:24 2025 GMT
Subject: CN=E75CA7A51D4CE34182B722742CE168289CA315F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:4f:db:83:fd:ef:75:12:18:c1:31:ec:ff:
88:de:52:b1:f2:a0:a8:5b:1e:53:61:d0:2d:39:d5:
32:1a:ae:bb:52:25:e6:db:c6:aa:7c:3c:af:f6:01:
9f:b9:50:c8:c2:be:0c:f7:8e:21:f5:55:3b:33:9b:
68:c0:b2:15:2c:f2:3b:f3:b4:dc:75:f4:a9:09:4e:
a4:37:af:b8:4d:9d:3f:e0:e5:33:7f:a3:9a:6c:61:
c7:ef:67:29:65:bb:9b:dc:ea:00:df:f8:9d:eb:6f:
c6:49:cc:c4:6a:7e:af:e1:f3:74:33:78:ca:8d:19:
2d:e6:f9:29:9f:b0:a0:aa:5b:15:0a:9f:26:0c:23:
c8:6e:49:6a:f2:0a:9d:aa:6c:ab:a1:78:44:8d:ce:
0e:c8:ea:2d:c1:07:44:63:d7:74:fc:0c:a1:f4:45:
20:ac:ff:2c:2e:c4:06:a6:91:04:c7:da:7b:b3:fa:
d3:d1:d1:85:3b:c7:87:49:31:86:f5:ab:33:9c:ec:
cc:35:fe:ff:13:b5:09:45:ed:7d:6e:69:bd:4c:b5:
d7:5d:dc:0d:1d:e9:31:1e:63:85:63:47:83:a0:b6:
40:4f:14:13:68:8a:af:ba:4b:45:df:e8:29:f3:6c:
7d:ba:e9:40:77:c0:53:68:00:f6:21:0c:25:4f:35:
c0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5C:A7:A5:1D:4C:E3:41:82:B7:22:74:2C:E1:68:28:9C:A3:15:F3
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232322e302f32342d3234203d3e203534323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.222.0/24
Signature Algorithm: sha256WithRSAEncryption
29:a1:c6:ae:15:9a:96:be:b7:98:37:fe:35:f9:8b:5f:63:6b:
08:e1:25:7d:83:15:5e:25:39:22:a6:48:50:e1:23:f1:4d:39:
9e:ba:4f:9c:42:90:22:05:81:03:c5:aa:4b:12:95:bb:93:36:
be:68:44:2e:56:b2:06:6f:a4:3e:d5:f2:70:31:ec:5e:4a:05:
4c:fc:aa:3d:67:1c:b1:02:94:c4:a2:44:c6:96:7a:04:da:00:
5a:5a:73:e7:55:16:f9:eb:3f:78:54:cd:2d:a6:6d:ba:c6:8e:
80:00:02:0b:3a:2f:c8:2f:15:5d:2e:c4:4b:9e:10:8e:98:ea:
94:9b:cb:26:f2:f6:5b:45:c1:95:0c:d7:1e:ff:15:86:8e:b5:
87:dd:10:17:06:70:96:f2:cd:40:d6:1c:6c:57:b4:1c:36:50:
c1:72:09:e3:8a:20:ed:fb:4e:04:78:bd:ea:80:b9:d4:fe:1b:
59:ee:dd:3b:f4:86:d8:6d:77:71:d1:e4:59:48:c4:0b:23:91:
62:b9:4f:9d:d5:12:f7:cb:5b:a3:1b:19:fa:f0:d2:32:16:ff:
e1:96:f7:e3:67:fb:b5:48:e2:a3:a6:b9:84:9c:3c:ab:c5:12:
7c:c2:ad:be:b8:5e:2c:02:02:f6:e7:b4:a0:8f:24:e3:d1:0b:
54:64:44:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org