Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e3235352e3133302e302f32342d3234203d3e20313437303439.roa
File: 3138352e3235352e3133302e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: MgMD76ou7sdfyygAjv2nTKX25LZNXyDxkHVlmtMdtVM=
Subject key identifier: 3D:CD:9C:F8:89:62:96:5E:4F:8F:8F:6F:2B:88:00:39:1A:79:35:17
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 76348C8D69075AD2B305686C56E0103A3C7C8D74
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e3235352e3133302e302f32342d3234203d3e20313437303439.roa
Signing time: Mon 26 Feb 2024 08:52:49 +0000
ROA not before: Mon 26 Feb 2024 08:47:49 +0000
ROA not after: Mon 24 Feb 2025 08:52:49 +0000
asID: 147049
IP address blocks: 185.255.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:34:8c:8d:69:07:5a:d2:b3:05:68:6c:56:e0:10:3a:3c:7c:8d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Feb 26 08:47:49 2024 GMT
Not After : Feb 24 08:52:49 2025 GMT
Subject: CN=3DCD9CF88962965E4F8F8F6F2B8800391A793517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:25:c9:c4:35:10:d6:57:bb:5b:b3:91:e9:1c:
d2:b8:8c:3c:0c:2a:d4:b8:ae:34:b0:8c:66:35:8b:
f6:88:c1:73:f3:b2:68:62:f6:25:6e:77:a2:95:51:
6d:e7:98:56:00:d4:65:c0:1a:79:c5:df:fe:57:82:
94:3a:5f:44:b3:3e:4e:16:7d:71:0d:0b:d3:3f:5c:
4c:c3:4f:bb:f9:51:0b:15:7b:bd:f8:01:ea:a5:89:
31:9a:ca:55:0c:54:a6:48:9e:7d:3f:1c:52:e8:a9:
1c:5f:38:c0:16:1a:fe:23:50:9b:d5:4e:36:3f:7c:
4a:2b:a1:0b:9d:6f:8c:97:f0:ac:66:22:0e:93:73:
a8:c0:0e:d7:9f:eb:9d:d7:aa:2c:ab:3f:fb:c3:02:
2e:3d:cc:b1:3c:3a:13:9b:21:5e:16:04:cc:30:ca:
83:d6:2d:44:04:41:1f:5f:88:4b:73:32:3b:f5:5b:
d5:f6:8f:e4:3d:36:ea:e0:8a:6e:f2:28:a1:f5:55:
50:f3:8c:31:80:fd:ce:7a:79:e1:e9:db:68:29:88:
ff:fe:38:0c:a6:cc:d8:1a:11:a8:f3:9f:52:ce:5a:
84:6d:64:5e:56:a9:e4:5b:18:ac:39:b8:94:09:28:
e9:72:43:a5:8d:8b:d6:3a:e8:d9:02:df:1b:64:b1:
75:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CD:9C:F8:89:62:96:5E:4F:8F:8F:6F:2B:88:00:39:1A:79:35:17
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e3235352e3133302e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.130.0/24
Signature Algorithm: sha256WithRSAEncryption
24:20:f0:20:4c:e6:2a:25:bc:ca:a4:cd:ba:08:db:74:cc:65:
15:dd:4b:b6:76:55:3a:0f:f5:95:85:9c:db:3a:e4:37:ae:af:
3b:dd:f9:b2:1f:d2:70:c7:99:eb:52:ac:79:1c:97:18:73:42:
da:8d:1c:d4:29:62:f2:ef:e7:15:86:4e:9a:32:bd:fd:37:27:
a9:0d:5c:b9:ea:f7:fe:5a:a6:b6:17:50:20:e9:2b:6b:e3:2d:
2e:9b:66:71:37:af:f3:58:56:36:10:7c:88:0f:62:3f:59:ef:
5d:87:72:b8:b9:a1:16:9f:2a:38:35:de:14:37:16:2e:2f:c2:
b9:79:b8:91:77:d1:de:45:ba:16:81:73:70:a3:35:3a:74:47:
4f:ef:03:06:6e:3f:2b:88:a2:6a:7c:66:2f:11:68:26:b9:b0:
5c:37:08:3a:3d:90:a9:52:e9:65:e4:e7:ee:89:20:de:57:e2:
27:55:b0:12:a6:3c:82:df:65:54:ca:c8:94:1b:95:41:ae:79:
63:8f:75:44:93:f6:58:89:2b:df:27:a8:2e:5e:72:1b:da:8b:
91:8e:70:8b:68:f9:71:60:ea:ff:48:78:41:b4:a1:16:eb:26:
5b:be:1e:6c:be:56:6c:2d:4a:c3:d3:ed:04:37:ce:71:47:f3:
c8:ff:c7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:44:10 2024 by rpki-client on console-fra.rpki-client.org