Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e38352e302f32342d3332203d3e2039303039.roa
File: 3138352e3138332e38352e302f32342d3332203d3e2039303039.roa (raw, json)
Hash identifier: 7IzbD0r0/pk4vRNoWD5G0jxxD00chvKFHkpqfV/uChk=
Subject key identifier: EA:3B:EB:B0:6D:8E:FC:F8:5C:7E:59:A6:1D:FA:97:65:0D:4F:E2:2B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 288CB30CBC7B34D1CE5D3E4BF4C957219BA6425A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e38352e302f32342d3332203d3e2039303039.roa
Signing time: Mon 27 Jan 2025 09:44:59 +0000
ROA not before: Mon 27 Jan 2025 09:39:59 +0000
ROA not after: Mon 26 Jan 2026 09:44:59 +0000
asID: 9009
IP address blocks: 185.183.85.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:8c:b3:0c:bc:7b:34:d1:ce:5d:3e:4b:f4:c9:57:21:9b:a6:42:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:39:59 2025 GMT
Not After : Jan 26 09:44:59 2026 GMT
Subject: CN=EA3BEBB06D8EFCF85C7E59A61DFA97650D4FE22B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:69:b9:11:85:72:54:11:91:0e:64:8c:06:a9:
c6:d1:b1:27:53:9d:0c:df:5b:9c:05:11:83:e9:e3:
54:17:73:5c:00:17:05:cd:8b:97:d7:49:34:4a:b6:
2f:58:77:a7:d5:41:96:1d:3c:71:df:e9:52:68:37:
7a:64:7b:14:32:c4:a9:cd:cb:af:ab:19:75:e3:c0:
57:58:10:e2:ae:38:bb:39:d2:54:4a:b4:73:6b:87:
6d:50:c6:ba:76:6f:b7:79:01:f5:89:b5:02:cc:f1:
a4:8b:27:db:6b:5d:0b:e4:98:9a:8c:bf:0e:c4:4d:
fa:4c:20:20:24:fd:95:e4:c4:a2:12:22:2f:b6:f5:
c2:8c:ba:5f:86:ed:1a:09:9a:19:4f:d5:a0:b3:0c:
29:87:12:31:84:04:71:07:c0:df:a1:19:37:0a:6d:
90:c7:59:1b:55:3b:54:2e:3c:12:6e:11:76:f9:15:
f2:96:b1:8e:d6:cf:bc:cd:35:bc:08:32:58:d3:e2:
33:64:cc:4e:e8:80:bc:55:46:50:13:89:25:12:31:
da:25:fb:13:44:4b:f9:7b:bf:40:88:5a:86:63:5f:
5c:a8:af:fd:22:69:c2:d9:c2:74:fe:71:d5:c8:a7:
db:de:29:7c:91:e9:b3:2f:6f:2c:cc:10:e0:8f:ae:
bc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3B:EB:B0:6D:8E:FC:F8:5C:7E:59:A6:1D:FA:97:65:0D:4F:E2:2B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e38352e302f32342d3332203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.85.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:cd:54:b3:e3:dc:5e:b8:3a:7a:ed:9c:2f:d3:5c:6e:fe:7b:
05:b7:1b:d8:a9:44:81:a0:c0:f4:07:ab:40:03:4f:a4:b3:40:
5b:0a:cc:29:47:3b:94:a7:32:91:67:35:4a:7a:af:ff:5d:12:
b0:9d:73:1e:02:4c:98:a5:2e:98:6c:9b:00:7e:9d:19:cb:fa:
27:b4:55:09:34:52:6d:11:79:86:ee:42:2b:dd:84:55:75:d8:
1f:cf:05:3f:6a:44:21:7b:0f:d5:79:d1:58:e0:05:bf:3b:e2:
06:4f:af:22:e3:37:d1:2c:80:e9:ed:29:82:b5:13:43:91:5e:
f0:17:64:35:b0:b9:c1:7c:2e:82:00:73:2d:bc:48:d4:f3:ff:
00:27:18:8b:89:50:06:44:9c:6e:46:2b:e5:2b:33:38:4f:c7:
90:c8:ca:fe:e9:c4:a1:c3:ce:b8:38:df:4a:fd:7c:4d:1f:96:
78:46:1d:a4:76:20:f0:4b:53:eb:04:e8:f9:27:22:7a:b7:d1:
49:07:36:c1:06:b2:1a:44:70:7c:e8:f5:64:93:b2:f7:e2:a9:
11:cf:e2:8c:70:c7:a3:aa:d3:97:ef:df:45:e1:a7:b2:62:78:
ae:18:f6:04:b7:33:94:32:88:d3:9c:29:92:40:30:a6:54:8c:
26:e3:54:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:38 2025 by rpki-client