Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136322e302f32332d3234203d3e20323135323639.roa
File: 3138352e322e3136322e302f32332d3234203d3e20323135323639.roa (raw, json)
Hash identifier: C51KB3vmzIVuzhz63IWTP1lTGLSpJxZj4/CH5M0kfBA=
Subject key identifier: B1:1C:3C:10:2E:6C:FA:08:F2:05:1F:4B:04:7E:9C:4D:18:C6:01:2E
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 65BDBC6276D11590C4F9C76562D87FE2C481016B
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136322e302f32332d3234203d3e20323135323639.roa
Signing time: Mon 02 Dec 2024 16:56:59 +0000
ROA not before: Mon 02 Dec 2024 16:51:59 +0000
ROA not after: Mon 01 Dec 2025 16:56:59 +0000
asID: 215269
IP address blocks: 185.2.162.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:bd:bc:62:76:d1:15:90:c4:f9:c7:65:62:d8:7f:e2:c4:81:01:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Dec 2 16:51:59 2024 GMT
Not After : Dec 1 16:56:59 2025 GMT
Subject: CN=B11C3C102E6CFA08F2051F4B047E9C4D18C6012E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:29:fd:90:5e:b8:80:c7:2e:85:89:01:c4:
25:f0:cf:79:7d:3a:29:8c:7c:33:36:09:40:f2:e9:
81:54:5f:8c:78:7d:47:e8:1c:ac:7e:ad:90:9a:0e:
b2:90:ae:cf:7b:b0:35:79:b3:ce:bb:6c:c6:88:5e:
6f:62:8e:7e:db:40:1e:a6:64:21:dd:23:d7:ba:94:
fd:a6:cd:2d:92:21:00:98:a7:26:84:9f:e2:09:f6:
f6:0f:27:46:da:3b:ed:d0:d1:ed:83:bc:2d:aa:19:
ec:e0:1c:77:4b:ac:43:32:0e:87:fb:d9:40:ba:1f:
82:c8:d9:9a:64:be:be:c8:1c:a6:e0:27:a4:dc:bb:
6a:d1:5a:ee:6a:f4:50:91:97:7c:79:2a:a8:9d:e8:
01:64:70:66:52:14:b5:4b:12:91:84:23:79:56:0e:
71:56:be:9c:a6:14:29:49:52:e9:c1:3e:fc:06:bf:
fc:70:d1:25:14:6e:9b:c0:ee:68:94:62:fd:70:f8:
56:3d:25:50:a5:42:42:e1:9a:5a:6e:22:15:1b:37:
75:19:39:cf:72:cd:3a:e7:b0:e4:27:2f:04:17:c6:
e9:b7:e9:2a:fa:c2:13:2c:e2:82:22:0c:f5:2b:55:
3a:13:36:86:0f:fe:45:79:da:ef:e1:33:4f:9e:9b:
28:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1C:3C:10:2E:6C:FA:08:F2:05:1F:4B:04:7E:9C:4D:18:C6:01:2E
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136322e302f32332d3234203d3e20323135323639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.162.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:1b:2b:a1:06:1e:35:6f:49:13:18:9e:3a:9e:03:1d:80:4e:
ab:e2:06:9e:c7:b1:96:1c:8d:fc:44:97:aa:f5:4f:8c:e9:72:
2b:fd:f2:3b:c5:67:09:fa:71:e4:18:87:84:85:69:ce:c1:d3:
37:09:de:ff:30:4d:82:7d:ca:03:82:f2:02:72:25:38:f3:94:
a3:e0:06:f9:b4:40:09:78:c3:c0:65:4f:ea:97:7a:fb:22:f7:
80:39:76:e2:bd:d5:c1:3e:5a:7c:42:c0:85:22:aa:1c:20:f3:
f6:e5:b3:ca:89:44:93:1c:9f:b7:28:18:db:a6:89:8a:5d:4a:
fe:25:d5:56:14:0f:b9:4f:d7:46:c4:14:97:84:23:33:0e:1d:
27:8f:ca:89:e7:eb:bb:b2:93:c6:52:d7:2d:21:d8:c5:ee:af:
77:35:88:c0:96:0f:e7:c7:00:6c:29:b3:af:09:70:64:83:95:
22:29:60:b1:83:b8:fd:7e:ff:54:aa:0f:c7:54:2f:72:e1:fa:
fb:8f:47:13:b2:87:a2:bb:8e:a9:46:fa:a2:b4:7e:9c:1b:15:
c2:df:3f:ab:95:a1:0e:b8:39:55:30:86:db:d8:c4:7a:cc:44:
17:10:02:b6:3c:fe:81:ef:ec:53:cb:f9:79:a0:e5:50:b9:2c:
01:f5:7e:00
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUZb28YnbRFZDE+cdlYth/4sSBAWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3
MDgzZWQ0ZDAeFw0yNDEyMDIxNjUxNTlaFw0yNTEyMDExNjU2NTlaMDMxMTAvBgNV
BAMTKEIxMUMzQzEwMkU2Q0ZBMDhGMjA1MUY0QjA0N0U5QzREMThDNjAxMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqnCn9kF64gMcuhYkBxCXwz3l9
OimMfDM2CUDy6YFUX4x4fUfoHKx+rZCaDrKQrs97sDV5s867bMaIXm9ijn7bQB6m
ZCHdI9e6lP2mzS2SIQCYpyaEn+IJ9vYPJ0baO+3Q0e2DvC2qGezgHHdLrEMyDof7
2UC6H4LI2Zpkvr7IHKbgJ6Tcu2rRWu5q9FCRl3x5Kqid6AFkcGZSFLVLEpGEI3lW
DnFWvpymFClJUunBPvwGv/xw0SUUbpvA7miUYv1w+FY9JVClQkLhmlpuIhUbN3UZ
Oc9yzTrnsOQnLwQXxum36Sr6whMs4oIiDPUrVToTNoYP/kV52u/hM0+emyhPAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUsRw8EC5s+gjyBR9LBH6cTRjGAS4wHwYDVR0j
BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3
ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD
RDdVMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQt
NDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3ODEzLzAvMzEzODM1MmUzMjJlMzEzNjMy
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzMTM1MzIzNjM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
uQKiMA0GCSqGSIb3DQEBCwUAA4IBAQBKGyuhBh41b0kTGJ46ngMdgE6r4gaex7GW
HI38RJeq9U+M6XIr/fI7xWcJ+nHkGIeEhWnOwdM3Cd7/ME2CfcoDgvICciU485Sj
4Ab5tEAJeMPAZU/ql3r7IveAOXbivdXBPlp8QsCFIqocIPP25bPKiUSTHJ+3KBjb
pomKXUr+JdVWFA+5T9dGxBSXhCMzDh0nj8qJ5+u7spPGUtctIdjF7q93NYjAlg/n
xwBsKbOvCXBkg5UiKWCxg7j9fv9Uqg/HVC9y4fr7j0cTsoeiu46pRvqitH6cGxXC
3z+rlaEOuDlVMIbb2MR6zEQXEAK2PP6B7+xTy/l5oOVQuSwB9X4A
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:18 2025 by rpki-client