Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136302e302f32332d3234203d3e203630373831.roa
File: 3138352e322e3136302e302f32332d3234203d3e203630373831.roa (raw, json)
Hash identifier: lDHC0uXlsWzGsCJy6xBreXXKsUIglQFgdCUDr09FadE=
Subject key identifier: 61:B1:46:D6:3A:E4:35:87:31:E0:64:3B:FE:7C:C5:D8:14:97:A2:AE
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 666022BC7484A5E705679B81612D78FF00B6D7C3
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136302e302f32332d3234203d3e203630373831.roa
Signing time: Sat 26 Oct 2024 07:13:04 +0000
ROA not before: Sat 26 Oct 2024 07:08:04 +0000
ROA not after: Sat 25 Oct 2025 07:13:04 +0000
asID: 60781
IP address blocks: 185.2.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:60:22:bc:74:84:a5:e7:05:67:9b:81:61:2d:78:ff:00:b6:d7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Oct 26 07:08:04 2024 GMT
Not After : Oct 25 07:13:04 2025 GMT
Subject: CN=61B146D63AE4358731E0643BFE7CC5D81497A2AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1d:33:6e:d1:fb:b2:e8:86:60:60:b5:08:c7:
1f:67:87:4b:fd:47:36:ef:57:95:f1:27:c3:c1:36:
02:b2:e9:cd:3e:3b:d5:99:f0:52:eb:86:6a:48:c4:
b3:73:ce:60:5a:31:e6:60:83:df:4b:cf:fe:1a:9b:
3a:e3:79:02:35:c8:29:ba:79:76:f5:d8:85:d0:c6:
9a:71:4b:1a:53:1f:1e:38:8a:1e:19:d0:e4:c1:ee:
f7:c8:e5:6a:93:bb:cb:1a:34:55:bb:64:96:67:6e:
49:00:59:6d:ea:df:6a:b2:5f:00:be:31:d0:36:4e:
5c:cb:d5:df:59:a0:0f:be:0c:0c:93:7d:75:be:a0:
2d:6a:c5:9a:f0:59:d7:66:18:0a:28:6d:8a:76:78:
89:7a:e4:56:8b:65:04:c1:92:43:a3:fa:fd:7b:e1:
d9:b6:3f:a2:4f:64:c8:46:e0:43:8b:4e:94:cf:c5:
17:3b:05:dc:af:07:9a:91:4a:76:7a:73:99:6e:a4:
c5:47:40:f3:ca:58:60:77:d0:40:d6:94:d7:64:32:
27:16:e7:26:59:62:d0:f7:2d:99:39:60:2e:9f:1b:
c6:0c:3e:71:d2:59:83:c9:b1:57:29:03:2a:a0:18:
4d:08:0b:88:cd:8c:bf:55:5d:cc:5b:04:b8:f6:8d:
d8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B1:46:D6:3A:E4:35:87:31:E0:64:3B:FE:7C:C5:D8:14:97:A2:AE
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136302e302f32332d3234203d3e203630373831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.160.0/23
Signature Algorithm: sha256WithRSAEncryption
85:c1:97:5d:9b:48:0d:3c:0e:5a:9c:0c:cf:66:c5:6d:a4:43:
c4:c2:49:7c:c8:07:bc:8c:f8:86:80:81:4d:1c:d6:7b:38:05:
e2:2e:06:69:b6:5d:bd:09:e6:5b:1c:24:de:df:69:97:0b:46:
92:27:5c:10:4a:cd:fb:18:bd:0f:f1:92:c2:b0:72:33:c1:c9:
e0:a2:48:60:f3:23:d0:9c:32:d2:69:45:a0:da:a9:ba:48:a1:
4a:1d:d9:a7:28:99:53:7c:f4:9b:69:6c:72:a0:23:5e:9d:26:
af:71:59:8b:2b:8d:fe:5e:31:d2:fa:68:4a:f9:51:b7:b4:02:
4d:28:2a:fa:0d:9f:2a:cc:22:da:a3:fc:28:2e:49:b8:5e:f2:
ff:55:2e:1d:c4:6c:51:fc:0e:9c:f2:c0:c7:81:52:c0:2c:6f:
0b:91:2f:23:3e:b5:97:d5:50:dc:48:12:32:4e:78:1b:ad:07:
dd:aa:37:a9:5b:10:54:6c:b6:fa:b5:e2:5e:86:ed:4a:04:b7:
c7:24:42:98:09:d6:01:a1:c7:17:13:3e:0d:de:4a:70:67:e8:
90:83:2f:61:66:df:5b:91:37:5a:9f:5a:38:92:b7:74:fd:71:
0c:36:2a:4e:16:7f:80:0a:26:6f:3a:44:11:de:e8:65:a9:77:
52:f0:bc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org