Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139322e39362e302f32332d3332203d3e203531313637.roa
File: 3138352e3139322e39362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: /a4/WHhdIsdgklbBMhXvEt339bqXBDKHU+FjalbdZtw=
Subject key identifier: 06:B0:9A:5D:57:82:4B:0C:EE:E6:72:95:89:80:A1:BB:23:BC:AD:4E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 261C8F65D15831AA4252FE7EED9E4EACAD27EAB1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139322e39362e302f32332d3332203d3e203531313637.roa
Signing time: Mon 27 Jan 2025 09:45:20 +0000
ROA not before: Mon 27 Jan 2025 09:40:20 +0000
ROA not after: Mon 26 Jan 2026 09:45:20 +0000
asID: 51167
IP address blocks: 185.192.96.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 15:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:1c:8f:65:d1:58:31:aa:42:52:fe:7e:ed:9e:4e:ac:ad:27:ea:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:20 2025 GMT
Not After : Jan 26 09:45:20 2026 GMT
Subject: CN=06B09A5D57824B0CEEE672958980A1BB23BCAD4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c2:11:ed:01:22:c0:d3:3b:58:55:66:38:2b:
6c:f2:0c:de:5d:c2:4c:a3:30:94:03:89:0c:ee:79:
8f:1b:f1:e6:ca:1f:85:ff:45:05:7b:82:b8:75:3a:
40:2c:14:ce:b7:93:3f:28:66:10:28:48:48:e1:c1:
76:b9:db:dc:a4:03:72:6d:06:94:75:9a:55:25:58:
9e:0d:d0:09:d9:b0:b0:cf:be:30:f0:a0:54:fb:07:
22:f6:96:01:06:21:6f:07:c8:8c:9d:2e:53:e8:32:
cd:99:18:ce:0a:1f:5d:34:9e:95:5a:2b:85:77:26:
72:97:87:eb:44:3f:5e:a0:af:dc:2d:7b:13:7b:36:
94:8c:94:0c:67:0a:aa:a2:bd:00:ac:60:11:59:2e:
c9:32:46:b6:b1:5d:30:3e:fe:14:f3:64:58:dc:ff:
75:de:8a:ae:db:c5:6d:84:82:ae:15:e9:74:db:11:
9e:eb:c4:e2:f5:0b:6c:90:dc:1d:5b:de:a5:b0:5e:
8f:f2:9a:4f:4b:27:a9:59:30:40:7a:ac:8d:7b:9a:
d3:cb:ed:6a:16:68:2d:4c:51:ce:4b:35:7f:34:9f:
23:9e:95:b9:42:0b:ca:ac:67:2d:d4:22:42:56:51:
14:06:a0:bc:4c:7f:22:19:3a:54:82:6e:d4:75:bf:
c4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B0:9A:5D:57:82:4B:0C:EE:E6:72:95:89:80:A1:BB:23:BC:AD:4E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139322e39362e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.96.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:fe:3f:02:fc:16:a0:1f:93:71:a1:48:67:be:e8:99:e9:a1:
8f:32:b9:c6:a9:97:17:83:5a:30:7d:21:42:ca:70:95:c8:9b:
a2:4d:fb:e6:1a:ad:e3:50:86:0f:6e:e8:2d:84:30:f0:c2:e5:
46:5e:2e:7d:b3:90:b6:9e:46:e3:29:7f:a1:1a:50:fa:a9:86:
e6:84:a4:8b:2b:f0:2e:d2:6f:26:41:a4:d7:e9:9f:05:7d:c2:
24:fd:df:63:0e:f1:b6:93:62:3c:5c:bb:c2:c4:92:fc:cc:08:
c0:41:2a:56:53:39:c4:b4:53:cc:7c:9b:31:82:ee:6a:ec:d9:
a9:ed:1f:81:25:4c:2b:ef:c2:35:52:ed:0d:fe:dd:d2:6e:af:
31:13:8e:a3:a4:13:cd:63:1b:25:2b:14:de:7e:99:6d:71:66:
6c:82:3e:41:d9:81:87:27:32:70:9f:12:df:d1:c1:ee:62:95:
13:bf:8b:1d:16:bb:be:9f:d1:cd:fd:f8:5b:7f:9c:bf:b6:58:
03:dd:bc:30:71:08:4b:f1:2e:5c:ef:0e:0d:29:77:38:e9:22:
99:be:07:42:59:c9:60:0f:af:86:db:9d:58:2e:3b:8e:36:de:
f9:a3:de:90:d4:e8:11:50:c1:74:f3:05:5e:49:1d:65:8a:54:
e7:e4:ad:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:11:32 2025 by rpki-client