Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3234352e3235342e302f32342d3234203d3e20323034313730.roa
File: 3138352e3234352e3235342e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: 8DQwDCxgt6m7CRAm7e5FR3Y7q+emJDgF3LR1bm9s0lA=
Subject key identifier: B4:75:D8:FB:E7:CE:FA:03:43:4C:09:AC:BF:BE:2E:BD:7E:A4:C4:97
Certificate issuer: /CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Certificate serial: 1AA733C80266D9ED96C3E4AC34A9EE1115AAA863
Authority key identifier: B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3234352e3235342e302f32342d3234203d3e20323034313730.roa
Signing time: Tue 25 Jun 2024 21:47:24 +0000
ROA not before: Tue 25 Jun 2024 21:42:24 +0000
ROA not after: Tue 24 Jun 2025 21:47:24 +0000
asID: 204170
IP address blocks: 185.245.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:a7:33:c8:02:66:d9:ed:96:c3:e4:ac:34:a9:ee:11:15:aa:a8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Validity
Not Before: Jun 25 21:42:24 2024 GMT
Not After : Jun 24 21:47:24 2025 GMT
Subject: CN=B475D8FBE7CEFA03434C09ACBFBE2EBD7EA4C497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:56:ab:f9:87:3a:db:f7:5f:5a:95:3a:d1:11:
bd:47:39:ce:07:7f:60:fb:3a:87:c2:52:38:a5:5d:
6c:c7:53:83:66:cd:f0:47:38:be:b2:13:19:74:48:
83:a4:cd:51:ca:22:66:23:ec:5d:a5:99:57:ea:70:
c7:6d:c5:90:84:16:27:75:37:0d:20:c1:21:0f:dd:
1c:d1:9f:97:f9:52:b7:8a:be:0f:62:3e:d2:33:c1:
0d:07:94:c9:28:82:88:cc:0b:e2:26:8f:ad:8f:17:
81:ae:c0:8d:29:75:2d:11:41:2d:f8:5d:5d:01:f8:
b1:86:45:6b:42:13:fb:da:97:d0:5d:b1:71:db:fd:
8d:ad:2e:52:60:e1:35:3f:64:e8:3e:83:9d:63:10:
4d:61:d9:a5:cc:c9:60:0e:13:63:94:18:69:e5:fd:
5b:bd:91:54:0c:02:04:b2:fb:3c:90:c7:f4:0c:62:
44:1d:30:e6:55:bb:0f:3e:25:6c:a5:fa:b6:79:b0:
a1:c9:52:5a:90:3d:8c:f1:0b:f6:7e:bd:10:1f:a1:
1e:99:41:92:e4:0c:d8:50:cf:d2:39:df:f9:0a:80:
f9:75:31:92:59:be:6c:ce:1f:f6:a6:c9:f4:e8:6f:
f8:90:34:cf:6b:c7:32:92:50:3d:14:db:9e:b1:50:
aa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:75:D8:FB:E7:CE:FA:03:43:4C:09:AC:BF:BE:2E:BD:7E:A4:C4:97
X509v3 Authority Key Identifier:
keyid:B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3234352e3235342e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.254.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:2f:2a:68:c6:8b:9a:d7:12:ac:2e:cc:54:fe:7d:6a:ee:c8:
e2:2b:16:3b:35:f6:6c:9a:be:cb:f7:a5:ef:cd:ff:5f:86:2f:
ef:43:f3:c0:1b:df:f7:c5:b4:a5:25:12:00:b9:7b:b4:d2:cf:
8e:c8:32:68:ac:5d:0a:79:de:85:1f:05:7d:db:da:2c:ef:10:
da:9f:41:b8:96:88:56:13:fa:fd:99:95:74:a2:05:6b:64:44:
58:1e:f1:31:b9:5b:76:48:46:5e:35:d4:27:f1:f9:92:d6:8f:
36:33:cd:08:90:a3:b5:cd:f6:bb:a0:6c:81:2e:61:52:a4:80:
a0:e8:e8:28:f2:fc:b9:37:50:eb:52:6c:25:b8:5e:07:61:a1:
9d:8e:3e:9f:67:11:23:d5:a2:df:70:6d:e3:38:2c:d8:1f:87:
02:0b:b0:bc:1c:24:f3:4a:91:e1:30:66:34:11:6e:1c:38:21:
59:06:ab:11:c1:35:c3:d6:b0:ab:92:3d:ec:e2:16:e2:15:44:
90:a5:94:ef:25:30:a4:d8:a6:22:e5:7e:7d:34:25:40:72:27:
8d:c5:02:2b:2d:d5:57:76:74:7e:96:ca:26:ff:70:6a:4b:e1:
64:7f:a1:2f:ae:ff:0c:0d:5b:ed:8d:7d:9e:4a:75:5c:15:3c:
58:1b:05:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:46:59 2024 by rpki-client on console-fra.rpki-client.org