Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3234312e3233362e302f32322d3234203d3e20323037353934.roa
File: 3138352e3234312e3233362e302f32322d3234203d3e20323037353934.roa (raw, json)
Hash identifier: VBF5+bVWjqs5NdXnuS87qlWpQrBifuH+amFsqK17KJU=
Subject key identifier: 16:61:AE:B1:4B:93:70:55:67:DD:5F:CB:5B:42:34:AA:E8:37:05:6B
Certificate issuer: /CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Certificate serial: 78F52877C5BFFF18CEA6A914CD314F6B17FA0AC8
Authority key identifier: B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3234312e3233362e302f32322d3234203d3e20323037353934.roa
Signing time: Mon 26 Feb 2024 08:53:36 +0000
ROA not before: Mon 26 Feb 2024 08:48:36 +0000
ROA not after: Mon 24 Feb 2025 08:53:36 +0000
asID: 207594
IP address blocks: 185.241.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:f5:28:77:c5:bf:ff:18:ce:a6:a9:14:cd:31:4f:6b:17:fa:0a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Validity
Not Before: Feb 26 08:48:36 2024 GMT
Not After : Feb 24 08:53:36 2025 GMT
Subject: CN=1661AEB14B93705567DD5FCB5B4234AAE837056B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:47:b4:84:cb:0c:2d:8c:79:f4:d8:96:43:
1c:8d:1f:c7:15:f2:79:e6:5d:c5:7e:2f:b7:62:f7:
61:fa:2b:27:9a:cc:83:a6:e7:3a:1b:34:e5:25:f3:
a2:be:0c:cf:c9:0e:b3:aa:af:bb:9f:e4:9c:d2:ac:
1a:75:d1:ed:12:7e:3b:da:ec:fd:07:c5:ba:28:d0:
32:cb:8c:b1:0a:d3:9b:9c:78:18:5a:65:3d:c4:85:
6d:44:9b:f3:46:ea:82:07:f7:93:48:29:f9:fb:d9:
8b:97:14:6c:0d:2c:44:aa:e4:86:bb:c9:6d:a0:aa:
c2:0a:9b:18:fd:d4:8c:d6:b9:08:9e:ea:b8:c5:b1:
19:75:d5:03:19:b1:16:8b:c3:f7:5f:e5:2f:64:d5:
e0:d4:5f:b3:15:5a:f7:04:3f:7c:9d:40:9e:0b:2b:
cd:a8:50:bf:ad:01:34:20:a6:b9:5d:3b:62:3a:e4:
0f:c9:e3:5f:ed:16:94:cf:ff:4a:f8:9b:40:33:e3:
ec:86:48:6b:f9:10:1c:af:8f:37:0d:fd:5e:c0:62:
5c:fd:cc:50:7b:4f:eb:87:1f:f2:64:2b:e8:a8:e8:
93:5f:cc:b6:f6:e2:e3:f0:af:81:61:94:c9:1e:bb:
8a:eb:e0:a1:91:18:29:4d:02:91:a0:b4:28:b7:74:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:61:AE:B1:4B:93:70:55:67:DD:5F:CB:5B:42:34:AA:E8:37:05:6B
X509v3 Authority Key Identifier:
keyid:B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3234312e3233362e302f32322d3234203d3e20323037353934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.236.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:9e:02:81:14:c3:49:16:d0:eb:a7:55:b4:85:2c:ee:f8:38:
f7:b9:87:7c:14:4d:31:da:62:00:2c:f1:bc:75:ee:b1:f9:70:
e9:9a:2f:68:f6:d9:e5:6b:4b:6b:d9:a5:da:e9:3c:1f:5d:da:
f7:39:9a:86:0a:51:b6:c3:6f:08:1c:d6:c0:c7:f2:af:69:99:
3f:97:02:46:d7:db:79:95:a7:d5:bb:3c:92:e4:a7:03:37:68:
e3:72:7a:63:f7:48:b3:08:0a:ba:9f:10:f0:31:52:b3:15:d3:
b8:91:8e:74:62:7a:d2:0d:62:98:49:53:df:fc:de:44:7f:09:
85:ed:cc:88:b6:0f:24:7a:96:cb:69:bf:3e:07:4c:b6:3f:59:
93:99:fe:1d:ad:aa:28:43:49:48:e6:75:c1:33:33:57:7b:34:
89:cb:bd:5f:fb:46:0d:bc:a3:6a:94:81:eb:0f:74:3d:64:8b:
fe:ce:a7:dd:8c:86:2f:78:82:4c:52:69:4c:c7:fe:6e:7c:d1:
a7:a6:a3:a4:84:81:7b:53:c5:97:0a:11:c6:c4:5d:93:00:af:
7c:3f:0a:95:d1:83:bc:7a:65:d4:92:f1:29:93:d8:ee:52:be:
26:79:5b:eb:73:d6:0e:7c:aa:c2:0c:d1:1a:46:a4:07:0a:61:
69:a0:df:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 00:32:14 2024 by rpki-client on console-ams.rpki-client.org