Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138352e38322e302f32342d3332203d3e203531313637.roa
File: 3138352e3138352e38322e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: 3EQirxxGWBoNXBJjuYk5CfzqiMZRzoG/SddJyOLgwG8=
Subject key identifier: EA:6C:B0:5D:45:58:A7:85:AB:92:AB:5E:C3:B0:AB:1A:80:27:84:B3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 15194F36E4C78029ACE5352E795575DA543DA053
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138352e38322e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Jan 2025 09:45:11 +0000
ROA not before: Mon 27 Jan 2025 09:40:11 +0000
ROA not after: Mon 26 Jan 2026 09:45:11 +0000
asID: 51167
IP address blocks: 185.185.82.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:19:4f:36:e4:c7:80:29:ac:e5:35:2e:79:55:75:da:54:3d:a0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:11 2025 GMT
Not After : Jan 26 09:45:11 2026 GMT
Subject: CN=EA6CB05D4558A785AB92AB5EC3B0AB1A802784B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:d9:87:83:62:75:2c:16:39:a3:1c:7b:e9:
78:43:56:16:14:6a:0b:90:8f:fd:a5:e7:e3:ca:47:
c0:e4:37:b6:e7:37:90:26:8a:1b:3c:0c:3c:29:9e:
9e:0b:c0:9b:0e:84:b5:c0:55:e0:eb:0d:a3:77:52:
a7:42:c9:fd:94:78:28:77:10:ab:90:8b:33:5f:c1:
d6:15:1f:0a:db:44:42:0f:be:32:d4:79:a5:d3:b4:
9f:c7:89:46:3d:42:3f:89:08:fe:91:04:2b:9e:ec:
bf:dc:7c:7c:28:59:74:23:e6:2c:8d:50:dd:75:35:
09:8b:e3:40:04:71:b4:f8:40:62:7d:d1:ff:f2:b5:
18:fb:71:2c:9f:f3:32:98:27:e7:9c:95:70:8d:33:
4c:2a:cc:5a:47:41:69:4c:f9:a6:ed:af:b2:26:45:
b9:c7:a0:43:7d:3b:9a:d7:e9:c6:01:ed:7c:79:98:
0c:5a:70:d2:3f:22:8b:04:64:0b:e0:43:7c:28:ca:
03:2b:57:ec:bf:55:f1:53:cf:3a:66:11:6b:19:4f:
d4:cc:30:25:e9:8a:73:aa:51:b6:9f:e4:63:29:e7:
39:88:5c:6a:0d:23:b5:e9:3a:5a:ff:0e:07:97:64:
f2:85:88:7e:0c:fe:44:06:04:ad:3f:c5:6d:42:f8:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6C:B0:5D:45:58:A7:85:AB:92:AB:5E:C3:B0:AB:1A:80:27:84:B3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138352e38322e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.82.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:62:91:bb:d5:d4:44:8d:75:a1:f9:17:58:6b:c7:20:0e:11:
7f:e1:f4:ef:e7:43:3b:0b:ac:b7:26:d4:23:8c:a6:6c:3d:50:
3d:fe:a1:e4:80:b8:d3:a4:a4:58:bf:22:a5:19:c0:b3:58:1a:
91:db:d3:cf:b4:84:c9:ab:12:6c:c5:cc:19:4a:de:53:30:6f:
28:29:e4:32:ce:2f:66:a0:19:66:f7:b8:49:c1:db:25:dd:ad:
65:88:d0:6d:3d:dc:a9:af:e8:e9:b3:5e:df:7a:9e:63:37:63:
e5:99:bc:92:13:a1:6d:f7:f7:7c:57:77:d1:16:55:4d:8e:04:
a1:d1:83:76:3d:a3:a0:c1:70:87:11:9f:c7:34:3a:4f:9d:d9:
09:60:80:79:93:70:5b:55:5a:1a:2c:73:cd:89:0e:20:71:27:
01:bf:e3:c0:92:99:41:00:cf:3c:35:20:f0:fe:15:45:a5:20:
1c:9e:30:62:bb:06:e3:62:12:61:a1:a4:49:88:a2:84:91:26:
3c:6b:5e:4c:ed:90:30:6c:1d:e9:7d:7c:0f:50:49:01:34:5f:
1c:ac:43:7f:67:06:26:39:1b:cf:f8:d1:3e:40:c4:ea:f1:15:
4d:ae:5c:bc:9f:06:d3:8a:41:4e:14:c5:a0:52:d7:4f:5e:05:
3f:fe:42:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:21 2025 by rpki-client