Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133362e302f32342d3234203d3e20313336373837.roa
File: 3138352e3133352e3133362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: r2KttLToebhgMjDrMO/sAaDNwqYUlq4fIJ87q9oZ6II=
Subject key identifier: 65:DB:32:A0:64:8C:39:27:38:11:78:EA:43:27:C2:06:E9:63:75:5C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 37987E45ACAAC17DA21675BE4781E6A7BE9F06CE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133362e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 27 Oct 2024 20:05:16 +0000
ROA not before: Sun 27 Oct 2024 20:00:16 +0000
ROA not after: Sun 26 Oct 2025 20:05:16 +0000
asID: 136787
IP address blocks: 185.135.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:98:7e:45:ac:aa:c1:7d:a2:16:75:be:47:81:e6:a7:be:9f:06:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 27 20:00:16 2024 GMT
Not After : Oct 26 20:05:16 2025 GMT
Subject: CN=65DB32A0648C3927381178EA4327C206E963755C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b2:d5:8a:23:fe:b6:3d:d5:22:ea:83:5c:76:
ee:92:1d:68:3b:2d:b8:f2:17:ed:2f:2e:9e:8a:3e:
7e:bd:87:8a:83:7d:15:bb:59:60:81:23:ef:67:3e:
41:3e:cb:c6:9e:f3:06:81:8b:1c:8b:47:b1:5b:98:
e8:94:17:fa:94:d6:de:24:70:05:19:dc:69:dc:3d:
d9:75:10:36:ee:a8:03:7b:ea:ac:49:44:5b:bf:5b:
ee:1c:0e:0a:18:b1:fc:2e:3d:8a:73:2d:ae:58:56:
5e:6e:7d:a0:1b:e6:0d:15:ca:2a:0e:2a:ad:db:43:
80:05:f3:d8:eb:3d:61:66:16:91:f1:57:93:2b:0a:
ff:5e:d3:fd:be:19:95:fd:e4:cd:b8:f9:45:c0:05:
43:ba:77:48:27:2d:00:d0:78:ce:31:0b:d4:4b:9d:
13:33:3a:a5:57:25:97:54:48:df:60:a9:b2:77:0d:
db:89:80:7d:07:2b:a4:36:cb:d3:6e:e8:75:c1:40:
2f:b4:1e:c6:52:49:3b:1e:e9:03:5a:67:9a:02:64:
54:6d:34:40:b6:c6:2b:a6:1b:b2:d7:b8:e7:95:50:
3f:dd:74:7a:da:2a:68:06:88:30:ea:51:af:77:b5:
f2:82:60:ff:d4:01:3e:35:ae:7e:09:d3:c5:dd:76:
5e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DB:32:A0:64:8C:39:27:38:11:78:EA:43:27:C2:06:E9:63:75:5C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.136.0/24
Signature Algorithm: sha256WithRSAEncryption
19:ca:55:f7:49:fd:54:b7:7a:fe:47:47:4b:26:be:11:bc:bf:
54:f1:ea:e3:9a:8f:23:ef:ed:7c:b4:25:b6:73:3e:33:73:0f:
9d:fc:16:b3:b6:1b:71:7a:14:4d:d2:67:7a:c7:9b:66:12:40:
08:b1:99:f3:cc:14:b3:96:8d:34:a4:95:6d:37:cc:69:99:b9:
3f:46:4b:49:c6:72:04:db:90:05:76:5f:90:26:59:a4:67:a0:
4a:52:ee:88:72:0f:b5:c5:49:2f:53:dc:8a:90:f2:0f:db:c7:
4b:f3:72:5b:5b:cb:6b:b3:a3:f4:87:bb:2e:10:be:fc:97:c7:
38:eb:83:41:29:c7:05:0e:27:07:bb:cf:c9:4f:7c:29:36:f6:
c4:62:20:03:48:f8:f7:fd:56:b0:b0:9a:bc:09:0b:4d:fa:63:
d5:5d:e0:6c:a6:d2:3f:b5:68:f8:5e:c2:fe:79:76:ea:a5:cc:
8d:3f:e5:35:a0:e6:ef:b8:3e:82:51:a3:84:d5:31:ad:b3:c8:
69:fe:88:eb:99:8c:f2:1b:fa:8d:b7:38:3d:4b:6c:55:d6:61:
3a:8c:99:84:cb:b9:63:99:44:93:4a:6e:40:74:1f:7d:b0:2a:
94:df:a6:81:f0:12:c1:46:da:f8:70:49:c8:f5:db:7b:13:e8:
a9:0c:41:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:12 2025 by rpki-client