Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e31312e302f32342d3234203d3e20313336373837.roa
File: 3138352e3138322e31312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: svilC7zMa9FBcxBaN7YfcuIsNNETiQWr+U1aJEbfsdA=
Subject key identifier: 81:FE:22:1F:5B:46:65:58:CC:12:68:72:62:F7:CE:72:5F:9D:BC:10
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6F55F9EA8E88245BDA6ED603FEA08E0FD04DA0D3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e31312e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 27 Oct 2024 20:05:20 +0000
ROA not before: Sun 27 Oct 2024 20:00:20 +0000
ROA not after: Sun 26 Oct 2025 20:05:20 +0000
asID: 136787
IP address blocks: 185.182.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:55:f9:ea:8e:88:24:5b:da:6e:d6:03:fe:a0:8e:0f:d0:4d:a0:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 27 20:00:20 2024 GMT
Not After : Oct 26 20:05:20 2025 GMT
Subject: CN=81FE221F5B466558CC12687262F7CE725F9DBC10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:06:56:ec:c5:b9:94:e4:a8:a1:9e:24:55:
46:f9:6f:b0:ee:6b:45:c9:29:9f:6f:e4:f9:05:5e:
46:23:d4:71:c3:08:0c:45:e9:30:06:d7:35:9b:7a:
b8:d6:8c:de:a2:8b:e8:f6:9e:60:7a:25:63:b2:1d:
a4:e5:6d:64:ea:59:75:34:3b:bd:be:e2:2f:66:be:
c1:19:5e:7b:d8:b1:9f:f8:cf:59:d5:df:7d:be:18:
ac:6a:ef:08:5e:ec:2b:e6:75:c6:5c:dd:13:60:7d:
e7:bc:13:92:0e:1d:fa:f2:b8:d5:9a:b6:8e:9e:79:
80:1b:2a:95:ef:7c:fb:75:65:6d:4c:60:c5:16:8a:
35:37:2a:9f:ad:3b:34:e3:4b:15:05:3f:6d:3a:73:
42:a6:09:8c:37:96:fe:b0:18:25:06:c6:a5:15:f8:
ff:20:f9:9a:e0:14:84:9a:55:d2:60:8a:5a:3d:87:
1b:47:e1:77:bd:18:d3:34:86:aa:df:5c:c1:85:f8:
98:44:5a:ad:ca:c2:e6:5d:3f:ac:3b:8e:5d:a6:31:
c2:a9:cf:c2:d7:aa:3e:9f:14:a0:07:d8:83:03:00:
75:39:fa:71:c3:71:6d:2f:9a:0f:cc:a4:de:84:91:
ca:f9:b3:e2:84:48:fb:89:6f:f2:d5:25:0c:0b:99:
cc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FE:22:1F:5B:46:65:58:CC:12:68:72:62:F7:CE:72:5F:9D:BC:10
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e31312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:8d:95:ec:f7:08:2d:43:45:d4:12:ca:35:8f:96:02:21:76:
d7:70:18:40:ae:49:73:54:ba:b8:85:a2:c1:0d:b6:78:79:e2:
f6:c7:5d:01:43:d6:d1:eb:58:fc:72:8c:3a:da:b5:ef:c1:62:
af:08:4b:75:e3:11:57:2b:25:d5:aa:d5:2b:82:6e:67:98:7d:
c4:af:b9:eb:0e:d1:ed:d9:6c:05:e1:a0:e9:88:b9:aa:52:1d:
e5:a8:a3:81:7a:a3:a3:16:93:d9:e3:d4:20:87:45:5f:c0:d0:
eb:99:aa:b9:e7:40:2c:5a:5b:3d:10:60:96:2d:b7:55:bd:33:
e0:d3:72:c4:a8:49:9b:f7:c0:33:d6:db:8a:7d:8f:ed:c7:a2:
97:63:4b:33:b9:ee:82:29:60:30:dc:e6:df:22:e3:0d:a4:8b:
5a:da:68:fb:9b:8f:5c:a0:8b:54:da:01:32:fa:78:d7:57:f7:
c3:5b:2d:96:77:45:ca:6f:b4:de:f4:93:90:27:5e:a6:48:27:
89:f4:47:09:13:a0:d3:ca:8f:d1:41:c1:76:1c:e9:0d:f3:49:
48:53:77:78:fc:03:23:62:f8:63:79:95:ef:6d:5c:67:f4:d6:
e4:b0:d7:07:84:11:30:6a:21:30:79:40:62:45:e9:66:76:73:
ed:25:9c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:50 2025 by rpki-client