Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3139332e302f32342d3234203d3e20323039383534.roa
File: 3138352e3139372e3139332e302f32342d3234203d3e20323039383534.roa (raw, json)
Hash identifier: vvdjRjAaAxpOANwwDjVhc7/xpCgqbC/sZjxs7gcYW6Y=
Subject key identifier: 85:73:41:65:7F:1D:29:B8:20:4C:1B:EC:92:92:4A:22:A6:09:D9:B6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0E5F0B9009889865BBE1D7FFC21EC9819EDBC496
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3139332e302f32342d3234203d3e20323039383534.roa
Signing time: Mon 03 Feb 2025 09:45:38 +0000
ROA not before: Mon 03 Feb 2025 09:40:38 +0000
ROA not after: Mon 02 Feb 2026 09:45:38 +0000
asID: 209854
IP address blocks: 185.197.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:5f:0b:90:09:88:98:65:bb:e1:d7:ff:c2:1e:c9:81:9e:db:c4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 3 09:40:38 2025 GMT
Not After : Feb 2 09:45:38 2026 GMT
Subject: CN=857341657F1D29B8204C1BEC92924A22A609D9B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4a:1f:4b:4d:af:6b:9c:7a:7c:5b:82:16:6e:
7c:ea:ef:db:c3:bf:65:b4:a5:10:5c:d4:13:e8:8b:
6a:f9:84:62:e5:3d:c3:cf:b0:b6:e8:98:33:6b:52:
6c:01:04:90:dd:29:3a:2d:d5:cb:0d:ab:d1:5e:a9:
91:88:09:3d:8a:93:5b:6d:72:65:27:c2:12:ac:a7:
b5:7f:3f:78:08:f9:92:e0:4e:5e:df:04:80:23:72:
24:25:4c:4d:1a:ea:f7:a3:a7:49:65:a5:0e:a7:63:
3a:8d:88:81:07:ac:5a:6a:39:1d:80:9e:43:3f:fe:
a5:3a:e9:f9:7c:9b:e3:03:0c:7e:54:77:c8:fe:85:
73:f3:ef:64:b6:e4:a9:9f:5c:9f:b5:5b:22:be:69:
9d:ce:c4:0d:72:35:39:73:a5:cd:0c:ca:0d:16:51:
d7:d5:c4:bc:27:17:8c:7a:9f:58:eb:aa:e0:42:68:
45:cc:a4:f6:85:04:95:f7:f3:a1:6f:a7:c5:b8:33:
9b:50:33:ac:7d:7a:42:c1:e9:c6:f1:3f:e9:42:24:
43:38:95:da:ac:a9:49:58:96:1a:71:d7:84:db:aa:
2d:bc:ca:6f:83:0f:da:c1:ed:bf:57:93:28:d2:cb:
fc:c5:f3:e2:e5:e1:c0:29:9c:ca:23:e0:35:bd:4a:
c5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:73:41:65:7F:1D:29:B8:20:4C:1B:EC:92:92:4A:22:A6:09:D9:B6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3139332e302f32342d3234203d3e20323039383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.193.0/24
Signature Algorithm: sha256WithRSAEncryption
70:5b:e1:58:95:73:81:4b:41:1b:30:0e:46:11:44:2f:b8:bc:
3d:1f:35:f9:52:79:7e:6c:bc:e8:48:e6:b9:b4:26:0c:d6:06:
bf:d1:d0:be:60:01:fb:80:77:c2:c1:0a:0f:08:ff:ef:5d:e3:
9d:28:4c:3f:dd:0e:cb:c4:01:c3:ca:09:88:1a:eb:5d:ef:fc:
de:8f:2b:96:0a:2a:0b:e0:c8:c0:03:ac:de:68:65:49:35:f7:
af:c6:9e:31:e4:5d:13:30:30:42:78:10:36:c6:aa:4e:3a:c2:
79:f0:fa:f5:c7:c6:64:ba:58:2d:8e:1b:e9:ac:de:24:fc:22:
22:17:58:09:5f:8e:0d:3e:c5:8b:91:7f:b8:9f:2a:81:7f:35:
92:f6:16:da:7f:99:9a:38:e7:34:58:e7:77:42:0b:0d:3c:7e:
34:41:c0:5a:fd:47:05:59:1c:12:0c:4f:21:55:1f:02:2a:8e:
6b:09:2a:28:48:9a:c3:37:89:d4:be:61:4f:3f:44:69:7b:5a:
eb:e7:17:e3:87:42:8b:19:0a:c5:82:4b:cc:2f:be:cd:3c:c0:
6e:62:f5:de:61:b8:78:41:17:6b:7e:5e:9b:d2:bb:23:e9:0d:
fa:2d:74:5d:8e:08:0c:03:e5:80:13:76:42:62:fd:3c:2c:3a:
ba:bd:0a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:23 2025 by rpki-client