Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130382e302f32342d3234203d3e20313336373837.roa
File: 3137382e3133322e3130382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: hjPG9ZQYHJed/dM3HwBFuX7jrIlYsZhYzVxuSK7WZG8=
Subject key identifier: ED:FA:43:D9:C7:DE:DE:D4:05:14:E5:6F:D3:8D:27:7D:C0:3A:FE:C9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 39CBFABE6B59EA4AFBE1BC550149DDB12402C1F3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130382e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 20 May 2024 17:03:45 +0000
ROA not before: Mon 20 May 2024 16:58:45 +0000
ROA not after: Mon 19 May 2025 17:03:45 +0000
asID: 136787
IP address blocks: 178.132.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:cb:fa:be:6b:59:ea:4a:fb:e1:bc:55:01:49:dd:b1:24:02:c1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 20 16:58:45 2024 GMT
Not After : May 19 17:03:45 2025 GMT
Subject: CN=EDFA43D9C7DEDED40514E56FD38D277DC03AFEC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:11:dc:4b:3c:84:8f:d7:ca:b3:3a:6f:fd:a5:
1e:77:b3:81:1f:3e:e6:3f:05:d6:31:11:dd:ad:4f:
70:14:d9:dc:fc:40:55:08:1b:d8:16:55:28:bb:a8:
e3:e5:f2:9d:1c:c9:cc:19:0f:79:b1:98:1b:b0:1f:
65:04:d7:bb:c8:73:fd:1b:ce:6e:73:9b:1a:b7:3d:
73:7f:7c:60:4a:95:bf:fc:fe:b7:fb:1d:5c:08:35:
9b:05:0c:12:c3:84:eb:eb:3e:64:78:a9:ba:67:7c:
c8:58:f5:c2:7c:95:bf:b2:28:a4:51:ca:a0:21:84:
2f:88:1f:9e:18:ad:f4:5b:7e:99:8a:26:c2:1d:50:
b0:87:b1:83:01:4b:12:d7:fe:46:fc:e6:e3:26:21:
68:c8:31:e1:35:4b:9e:1b:d1:f0:c3:2f:ea:59:f4:
18:59:b5:9e:81:41:71:f7:11:60:26:7f:0b:ca:51:
e6:69:53:9c:46:ea:95:64:b7:10:fd:8e:7a:5c:b4:
7d:d6:11:27:d7:07:33:08:f6:02:b8:76:a8:bf:9b:
03:19:52:96:45:6d:68:09:63:fa:b6:02:09:37:67:
e0:24:b6:ec:35:22:3c:6c:e4:57:f4:56:71:0e:d1:
92:74:cf:41:9f:55:ad:4c:1f:15:e9:e3:00:9e:73:
8e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FA:43:D9:C7:DE:DE:D4:05:14:E5:6F:D3:8D:27:7D:C0:3A:FE:C9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.108.0/24
Signature Algorithm: sha256WithRSAEncryption
26:46:35:ed:20:9b:76:5d:a6:48:39:e7:cd:12:98:02:16:00:
4a:d1:95:45:24:e4:fe:7f:f3:eb:97:ef:51:73:37:19:b6:97:
a3:5c:a5:7f:05:a8:a2:9c:92:5c:62:ef:e0:9a:c0:86:9d:5e:
ef:16:73:1e:ff:64:75:80:d6:3a:b6:26:b4:eb:42:cc:2d:df:
ff:51:f7:de:5b:25:66:33:e6:27:6b:9b:15:50:7f:c4:28:8d:
65:b1:3b:04:a8:cc:79:eb:d8:9b:fa:f3:b3:d4:d2:f7:31:9a:
3d:98:8c:30:2f:6c:94:9c:5e:23:7a:51:5a:6f:b6:c2:0a:ff:
74:aa:3e:64:3d:22:68:1d:b3:ed:69:3c:41:03:11:cf:a6:56:
d9:22:55:46:a2:53:08:03:dd:7f:36:aa:7f:f7:1d:36:6a:00:
38:b9:21:89:ea:d3:b4:ad:47:6d:7a:cc:62:d0:b6:70:bd:df:
b7:ff:a0:f0:01:04:72:2e:4e:f0:27:fb:cf:a0:33:01:24:b7:
c9:9d:11:cf:36:4b:1f:5e:e0:22:0a:5b:4f:b4:9d:ba:22:8a:
79:8c:24:fe:ad:e2:e5:bc:68:e2:aa:50:8d:56:36:04:7c:8a:
60:ff:a1:bd:54:4c:cf:e8:10:11:87:d5:94:4f:16:3c:e3:e0:
d2:38:a4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:55 2025 by rpki-client