Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e3234352e3135352e302f32342d3234203d3e20323036323833.roa
File: 3138352e3234352e3135352e302f32342d3234203d3e20323036323833.roa (raw, json)
Hash identifier: EQ0A+n+9FHOFu2VqlnoiVMoynYuaoi3+afAkJ78ThSI=
Subject key identifier: 77:77:81:23:53:C4:FF:42:BD:AF:AC:29:D7:98:27:9A:8E:4A:AC:77
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 24FBDB1229FFF8C9480D20E5160DED2E82E23353
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e3234352e3135352e302f32342d3234203d3e20323036323833.roa
Signing time: Tue 02 Apr 2024 09:29:57 +0000
ROA not before: Tue 02 Apr 2024 09:24:57 +0000
ROA not after: Tue 01 Apr 2025 09:29:57 +0000
asID: 206283
IP address blocks: 185.245.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:fb:db:12:29:ff:f8:c9:48:0d:20:e5:16:0d:ed:2e:82:e2:33:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Apr 2 09:24:57 2024 GMT
Not After : Apr 1 09:29:57 2025 GMT
Subject: CN=7777812353C4FF42BDAFAC29D798279A8E4AAC77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:2b:c8:59:7d:29:34:bc:27:80:25:39:2c:
0f:40:18:3b:24:db:87:5b:a7:8f:85:b7:dd:ce:b5:
9f:40:eb:e7:20:09:e6:b2:b7:05:79:e0:a6:44:c7:
ae:38:b9:0c:c6:1a:f8:b4:1b:e3:65:f7:d8:07:42:
67:c4:84:59:04:7b:19:7a:00:de:ba:e6:78:de:57:
59:9a:c2:32:35:70:be:d4:84:61:ad:f6:36:88:45:
77:46:d0:e2:0c:6f:3e:b5:be:50:50:65:a0:06:b0:
5e:9a:07:7a:1e:3e:7d:31:21:19:5c:05:dc:13:6f:
3f:d6:5d:41:fc:dd:e7:17:1b:1d:70:14:c7:d8:3b:
7c:4f:9a:61:11:1e:17:eb:31:68:ac:fe:46:3e:2a:
95:1e:fb:95:96:be:d4:7d:68:16:96:18:d9:dc:f8:
d1:e5:d2:77:5a:9b:61:b7:f1:29:65:0e:e4:e0:f9:
6e:4b:62:9b:83:aa:bc:14:ef:e9:82:1d:82:df:5b:
bd:22:7e:58:62:25:10:25:08:65:40:02:1f:41:67:
d7:cb:c7:a5:0b:b2:67:a2:be:91:8d:e1:79:b3:1c:
80:a7:ac:57:93:6f:94:f1:c5:f6:85:8f:fa:74:f8:
61:54:09:52:db:9d:bf:ef:70:d3:e9:ba:ab:9b:cf:
11:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:77:81:23:53:C4:FF:42:BD:AF:AC:29:D7:98:27:9A:8E:4A:AC:77
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e3234352e3135352e302f32342d3234203d3e20323036323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.155.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:5b:44:4d:ab:ec:d9:be:6e:6c:17:80:54:1c:6a:93:30:07:
2f:7a:5e:14:e4:d6:24:7b:91:29:76:63:bb:ff:af:c9:78:2f:
71:0e:35:90:a4:ec:60:67:ca:bd:13:13:b4:89:26:c3:32:09:
c4:ce:d8:54:d4:05:0c:5d:22:2b:bd:96:66:e0:77:96:6a:45:
e1:db:1b:82:2a:2f:d7:b3:ca:93:a3:c5:d7:65:d2:54:c1:e3:
21:13:10:7f:81:5b:8a:99:07:8a:82:33:64:69:63:f9:3d:11:
4f:16:9c:60:09:50:c6:3f:9b:31:27:ca:f8:32:b3:49:f0:a2:
de:22:87:2e:57:26:c7:2a:55:44:a4:4b:08:a1:23:85:32:cd:
32:7b:52:55:c6:ef:35:bb:ac:23:82:61:69:6d:aa:0a:c2:57:
9e:7c:db:9e:b4:b3:89:08:4f:fe:8e:d8:05:66:ce:18:d0:8b:
5c:ab:73:bb:0b:95:0f:23:40:6e:56:0f:1b:15:f2:ac:4d:b1:
87:b4:6f:0b:5f:71:3e:f9:ec:c1:81:87:cc:f1:52:b4:3c:47:
bb:b2:62:85:18:c7:93:d2:ed:6e:06:22:4b:17:51:ae:0e:fd:
82:63:2a:64:88:20:81:18:39:dd:48:da:f6:50:82:ff:f9:9c:
46:26:34:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 14:46:46 2024 by rpki-client on console-ams.rpki-client.org