Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139342e3231362e302f32332d3332203d3e203531313637.roa
File: 3138352e3139342e3231362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: 0ylmLAZIHfApbo10cD92mzwh3j0jdwrl+b9OudqKvDU=
Subject key identifier: 73:49:D5:4B:9D:A3:E3:9E:80:30:14:BC:79:B0:7F:89:42:82:AB:C4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 257BD6456D82294CD35F5D40DC0B584EAA7DEB5F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139342e3231362e302f32332d3332203d3e203531313637.roa
Signing time: Fri 20 Sep 2024 14:04:57 +0000
ROA not before: Fri 20 Sep 2024 13:59:57 +0000
ROA not after: Fri 19 Sep 2025 14:04:57 +0000
asID: 51167
IP address blocks: 185.194.216.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:7b:d6:45:6d:82:29:4c:d3:5f:5d:40:dc:0b:58:4e:aa:7d:eb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:57 2024 GMT
Not After : Sep 19 14:04:57 2025 GMT
Subject: CN=7349D54B9DA3E39E803014BC79B07F894282ABC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:21:3c:48:d0:c3:bf:91:29:5f:94:81:18:
ba:61:3d:56:89:a7:a8:c1:ec:c7:69:e6:72:a8:ac:
f4:8e:13:44:51:2b:97:fd:c2:c5:5f:b1:e3:36:a3:
9f:f7:af:43:7e:7d:4b:30:7b:f6:56:aa:fe:d9:2f:
18:3e:6f:35:74:66:98:19:df:c1:73:c9:29:ee:ba:
67:6c:8b:7a:d8:e6:7b:6f:85:4e:74:c8:93:a4:85:
6b:52:0c:ff:9d:1d:32:c3:aa:be:ca:3c:2e:3a:94:
0b:33:bf:ce:1e:d6:64:cf:35:12:bf:4e:34:d5:3b:
fd:ce:a6:ae:3b:c3:47:b2:f4:6a:15:11:ba:76:bd:
15:e1:ed:9a:51:b0:0c:10:df:7d:43:48:3e:fa:78:
63:84:0e:6a:d8:e8:2b:73:9b:ea:6e:20:26:d5:f7:
7c:11:56:dc:f9:21:2e:7e:ba:7d:71:82:f1:0b:54:
1a:16:15:2e:12:ef:d9:3b:67:f2:8a:56:88:18:af:
7c:81:50:78:8b:6d:9c:86:7c:bf:0f:da:c5:1b:d2:
33:f7:75:eb:4a:ce:55:7c:9f:56:e2:4e:d8:56:38:
50:ad:a3:53:71:b4:3e:43:62:6e:98:49:a5:f2:92:
d6:6b:89:77:4f:0b:b2:bd:5a:2f:97:88:48:ea:0d:
c7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:49:D5:4B:9D:A3:E3:9E:80:30:14:BC:79:B0:7F:89:42:82:AB:C4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139342e3231362e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.216.0/23
Signature Algorithm: sha256WithRSAEncryption
50:ea:5c:a0:5d:25:31:98:cc:64:b1:80:1e:ec:aa:3b:25:66:
40:0b:2b:72:b7:3c:88:de:a7:e0:76:2a:6f:a9:29:a8:28:aa:
d3:ad:10:e9:68:99:21:d3:b8:63:d0:12:dc:39:19:a2:2e:89:
d2:69:62:e5:e1:3f:ce:c9:9e:b9:02:73:cb:2a:4b:e4:13:c0:
4e:d5:95:1b:db:87:a9:7f:98:20:77:34:4f:09:54:32:5f:f9:
d2:ae:b3:89:d5:d3:f5:d6:58:31:56:d9:54:12:6a:9f:ce:77:
9b:47:25:fe:0f:27:b1:13:68:4a:48:37:60:61:b8:ff:29:8c:
55:7a:b2:31:2d:cc:6d:9c:e8:c6:82:aa:85:13:87:50:33:72:
7a:cb:9d:43:3b:bc:94:7c:00:26:53:0d:e7:14:05:66:b2:9b:
47:52:f3:c4:55:33:0e:09:5a:14:48:4f:dd:b5:d6:50:d4:49:
ca:94:b0:57:bf:97:4f:cf:72:69:0d:7e:fa:89:ac:76:7c:87:
a3:02:87:91:60:c3:a1:6b:cb:63:fd:3d:25:ca:40:d9:52:7a:
12:ed:4a:b9:1b:16:ad:c7:35:7b:f8:cf:a3:02:77:c3:5a:0b:
c4:6d:12:bd:c2:bb:35:50:95:c6:0e:91:8c:06:d6:11:81:69:
54:12:6d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:35 2025 by rpki-client