Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3131312e3135382e302f32342d3234203d3e2038303834.roa
File: 3138352e3131312e3135382e302f32342d3234203d3e2038303834.roa (raw, json)
Hash identifier: bRh5kySda+a5+j6VrcOYzVANZVNXaB6CRuchZp5brB8=
Subject key identifier: EB:3F:39:33:56:28:0A:C1:34:B4:A0:B6:D8:2B:77:A3:4F:3A:97:B1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5D1C80B730A29F495A646A1EF9962670623BC4D2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3131312e3135382e302f32342d3234203d3e2038303834.roa
Signing time: Mon 27 Jan 2025 09:45:30 +0000
ROA not before: Mon 27 Jan 2025 09:40:30 +0000
ROA not after: Mon 26 Jan 2026 09:45:30 +0000
asID: 8084
IP address blocks: 185.111.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:1c:80:b7:30:a2:9f:49:5a:64:6a:1e:f9:96:26:70:62:3b:c4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:30 2025 GMT
Not After : Jan 26 09:45:30 2026 GMT
Subject: CN=EB3F393356280AC134B4A0B6D82B77A34F3A97B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:1c:b5:68:9d:0f:a6:88:0d:0e:8e:5a:84:a7:
90:dd:fd:3a:88:f7:57:35:df:30:c6:e8:69:85:b5:
bb:8f:e8:6a:b8:9b:c4:6b:30:21:b2:23:e0:57:c0:
94:65:6c:30:c1:02:a5:88:1c:da:c4:1d:40:7d:56:
ee:12:bd:1c:21:eb:31:b9:c7:b4:57:3f:5a:fc:5e:
e5:58:1c:d1:b3:fc:ed:5a:ff:e2:42:ad:d1:28:03:
05:4b:52:be:63:a0:69:b2:3d:79:4d:c1:7c:01:a5:
9b:db:14:b5:50:29:5f:87:8f:5d:44:e9:1a:4f:a2:
4b:37:7e:67:77:38:c5:cd:f0:1b:cf:b7:8b:6f:a8:
65:9f:f8:18:ff:95:83:b5:34:b2:52:72:c3:89:34:
10:3f:c6:e5:d2:c4:13:78:d3:5c:05:63:35:dd:18:
93:70:e0:c8:c6:98:43:a7:6d:4f:2f:70:c3:75:22:
a6:f8:3f:e1:cf:a2:14:a4:93:a3:11:c0:c7:eb:e3:
4c:65:96:de:15:b0:ce:9b:59:6e:d3:33:70:25:50:
db:e7:35:20:a2:89:4c:d9:29:c2:b1:1b:11:53:51:
54:8e:fe:c6:84:6d:9b:e2:11:22:d8:7e:61:61:d6:
64:c5:52:87:19:ce:fc:77:42:bd:f1:bf:5f:dc:d2:
ef:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3F:39:33:56:28:0A:C1:34:B4:A0:B6:D8:2B:77:A3:4F:3A:97:B1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3131312e3135382e302f32342d3234203d3e2038303834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.158.0/24
Signature Algorithm: sha256WithRSAEncryption
22:9c:b6:70:99:6d:f0:82:77:48:7d:77:a8:25:ae:58:8c:64:
5e:0d:ae:75:5f:f6:54:09:47:85:8f:00:0f:d9:e1:97:13:26:
ba:73:11:98:35:37:a0:bc:a7:1f:c7:a4:46:87:13:90:cf:46:
5a:f1:6d:e0:09:de:e1:88:50:2d:ce:34:17:63:08:f1:80:6d:
7e:81:c7:f6:a3:2a:bf:e1:10:74:7b:bc:62:b5:3a:46:ce:9a:
3c:5e:58:38:21:3a:92:f5:63:cd:ff:74:01:ef:64:20:f7:ed:
e1:67:ce:07:35:4c:30:b9:9e:b4:7b:5b:a3:48:48:fb:90:b0:
b7:36:b2:8e:ae:bb:db:d0:e4:da:e0:d4:cc:4c:e0:09:0c:f9:
18:65:59:08:83:01:6e:ff:89:3f:0a:15:4f:98:16:69:b8:0c:
8a:1b:c4:72:37:bd:36:3c:82:e0:69:78:8d:d9:ad:02:a6:79:
72:b4:ec:b1:fd:da:6a:8d:c6:49:cc:cd:90:f3:fe:aa:f7:1d:
58:14:2b:a0:c5:db:5b:7b:8d:b6:91:e9:6a:35:67:80:88:f7:
fa:39:cb:64:5a:33:90:ab:f0:45:52:8b:09:4d:b9:54:a5:dd:
20:55:f3:31:40:8c:96:63:74:e3:ca:0c:f9:15:cd:b8:12:3a:
d4:27:08:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:59:13 2025 by rpki-client