Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e2037303138.roa
File: 3138352e3232322e3138342e302f32332d3234203d3e2037303138.roa (raw, json)
Hash identifier: 7hx66GHmsj3dujwQPeNlNklQeMIyZLDEhC0HB9/iH+4=
Subject key identifier: 86:4F:6B:39:F9:89:17:80:70:9C:77:78:90:E0:04:CF:32:1F:1F:BD
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 2DA958A5AA5B44665067B45D91B0956AC99C58A2
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e2037303138.roa
Signing time: Thu 10 Oct 2024 14:16:36 +0000
ROA not before: Thu 10 Oct 2024 14:11:36 +0000
ROA not after: Thu 09 Oct 2025 14:16:36 +0000
asID: 7018
IP address blocks: 185.222.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 05:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:a9:58:a5:aa:5b:44:66:50:67:b4:5d:91:b0:95:6a:c9:9c:58:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Oct 10 14:11:36 2024 GMT
Not After : Oct 9 14:16:36 2025 GMT
Subject: CN=864F6B39F9891780709C777890E004CF321F1FBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:80:14:05:c4:64:2f:2e:25:3d:90:b6:e4:
bf:e4:c7:f6:7f:5f:b8:ea:1d:d9:29:08:7e:0e:62:
63:46:23:e1:47:f8:2a:86:bb:eb:cb:91:0c:fa:a7:
b4:73:b6:63:a8:f4:b6:3d:51:b6:ad:43:3c:d6:70:
9a:27:c9:c4:1f:64:84:94:1c:9d:95:7b:ed:d2:13:
24:ee:b5:8e:ce:2b:f3:0f:85:dd:a6:53:6c:76:70:
94:5f:4e:b7:38:b2:57:dd:13:0e:3f:b2:a2:b0:66:
27:f5:06:da:3a:06:86:6c:d3:a3:86:08:31:1b:e5:
ad:d9:fb:d2:95:c3:f8:5c:86:d4:ff:38:8c:04:9c:
de:0a:97:62:fc:2f:23:21:26:5a:71:97:a1:19:e1:
4d:3f:d9:59:2c:8b:c3:4f:f6:19:44:fd:17:f7:30:
91:b7:9e:df:64:42:91:59:bc:8d:d6:87:ee:48:6d:
8f:4c:1e:e5:7f:4e:d9:1c:95:ce:ec:3e:d4:4f:4b:
ce:63:4c:71:e9:ef:54:95:25:b9:88:89:ed:78:e9:
cc:75:cb:10:af:ca:c0:83:3a:c5:d1:96:d7:4b:3d:
7f:df:6e:ad:01:d0:6c:48:a1:84:d6:c8:fe:e6:b6:
5c:37:55:27:b6:63:24:69:0a:0e:a8:2e:d5:d4:2b:
35:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4F:6B:39:F9:89:17:80:70:9C:77:78:90:E0:04:CF:32:1F:1F:BD
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.184.0/23
Signature Algorithm: sha256WithRSAEncryption
97:5b:01:47:26:d8:92:bc:b8:a8:e7:89:27:63:62:0f:43:d1:
33:1d:9a:96:7a:bc:6c:02:04:f5:12:55:71:80:44:92:25:14:
19:64:3a:eb:c4:4d:99:1a:37:29:1e:bc:b4:cf:54:78:ff:d2:
60:7c:e6:2a:21:ad:9d:06:09:81:de:3d:59:9b:4b:d4:da:6f:
bb:10:38:f6:7b:d5:33:87:0c:47:c1:8c:47:d2:6a:45:54:32:
b0:90:f2:f0:a5:4d:87:a0:8e:8a:50:20:eb:6d:12:0b:88:fb:
9c:23:20:40:7e:a5:f4:98:dd:79:65:6e:27:04:1d:1c:7e:2f:
25:21:2c:59:1e:06:f9:b8:0b:6f:25:5f:fd:c7:44:c6:bb:1d:
40:e8:f6:e7:e5:6d:f2:1a:c6:c1:60:d6:eb:2e:0e:86:60:e2:
26:80:68:1f:bc:1d:f9:3c:76:ed:de:f2:6b:fd:cf:b8:e6:d4:
1b:31:ce:e1:35:81:5e:aa:e7:11:40:50:e6:fa:69:80:e8:a7:
5f:a0:79:25:0f:9e:e4:3e:e3:45:05:dd:78:c1:90:d9:38:bf:
20:9d:21:f2:3d:f4:59:47:a1:f3:fd:4a:72:cd:0c:b9:21:ff:
35:2e:4d:c6:bf:b6:64:27:03:6a:a7:c4:18:a0:0c:d6:0f:c5:
d3:76:f7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:16 2025 by rpki-client