Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3139342e302f32332d3332203d3e203531313637.roa
File: 3138352e3139372e3139342e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: LfMd2C9OIo3CV+dOaSMf4d/rfmv3YMdkkPKlfduQqj4=
Subject key identifier: 92:83:47:B5:81:44:76:6E:11:37:33:FC:D9:B9:01:45:93:37:7D:3F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0EBAD99959B1E49D037C0A7E1ADE1D85D906ED0B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3139342e302f32332d3332203d3e203531313637.roa
Signing time: Fri 20 Sep 2024 14:04:56 +0000
ROA not before: Fri 20 Sep 2024 13:59:56 +0000
ROA not after: Fri 19 Sep 2025 14:04:56 +0000
asID: 51167
IP address blocks: 185.197.194.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:ba:d9:99:59:b1:e4:9d:03:7c:0a:7e:1a:de:1d:85:d9:06:ed:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:56 2024 GMT
Not After : Sep 19 14:04:56 2025 GMT
Subject: CN=928347B58144766E113733FCD9B9014593377D3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:46:e9:5a:a2:85:e9:52:53:9e:e6:c0:d7:
2a:d2:69:b6:7c:c7:99:da:85:e1:aa:f7:da:aa:a9:
d8:3d:74:67:81:d5:55:4c:6b:e8:1d:6a:57:37:af:
bc:96:92:5c:eb:09:a9:91:e6:3a:34:3e:d9:14:e7:
04:71:42:30:7c:cc:7c:94:3a:d1:b9:22:9d:78:8d:
31:d4:11:f7:90:16:d0:1b:2b:7b:55:73:26:79:c4:
d8:58:30:6f:36:c4:ed:f4:cc:91:0c:04:51:f2:ac:
9d:f2:25:80:cd:5c:fa:53:c0:3e:26:b7:f5:fd:5e:
69:47:e4:b2:b2:07:c6:0b:e0:a6:56:b0:5b:94:39:
69:86:99:4f:9f:d5:a2:61:3c:72:37:b8:7e:48:0c:
6b:c6:0d:2b:60:68:bb:f4:ca:78:82:cf:7f:e4:b4:
b5:e4:55:3c:a6:95:50:ee:96:fe:a2:41:0a:6a:75:
f8:a3:8d:2b:96:5d:0e:10:05:da:59:9b:0f:97:ea:
ec:13:ff:a5:96:5a:ec:f4:80:56:24:96:e2:bb:a0:
0d:c9:23:85:f6:cf:b6:7c:27:20:9c:3e:e5:25:ea:
45:23:2c:38:b3:52:5f:43:d8:a8:d7:79:cb:82:2d:
a4:2a:5d:72:14:44:5b:51:46:c0:b8:a9:d0:aa:3a:
e5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:83:47:B5:81:44:76:6E:11:37:33:FC:D9:B9:01:45:93:37:7D:3F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3139342e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.194.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:bb:f2:30:2b:3f:fa:f9:fe:77:0c:0f:a5:4c:d4:e2:20:6c:
28:e3:5c:c0:08:d8:95:1b:fb:66:9e:94:73:b6:a2:b5:ae:a7:
19:67:6b:e0:ed:c8:ff:5f:fa:54:8a:71:10:32:29:19:e9:28:
42:d5:af:70:4b:18:9b:60:c0:fa:5d:33:e9:5e:71:74:2a:b1:
4f:2a:5f:99:3e:04:52:c0:0d:25:05:22:4f:3e:b9:d6:7d:4d:
e8:45:24:e2:8e:05:6d:54:a7:ca:e2:b0:86:00:ce:3d:19:5e:
a2:66:1c:a7:a7:34:55:45:bc:4f:16:09:c9:9e:e3:57:bc:3f:
a4:12:f3:4c:59:0f:5e:a9:43:91:3d:6d:1f:c3:eb:68:1a:e6:
0a:65:d0:a0:e8:f2:4b:14:c2:81:ec:35:c8:e4:7a:e5:5f:48:
86:e8:b1:e8:5b:09:11:db:d3:2a:dd:8a:a7:87:88:c7:39:e4:
49:67:73:d1:d4:3a:45:ae:34:71:d4:1a:ea:1e:fb:87:82:e8:
cd:20:90:92:09:2c:c8:00:a7:49:67:e4:f2:bb:eb:23:d0:62:
d5:82:da:73:09:23:64:c2:25:15:1e:ad:f0:9b:56:90:45:de:
9f:5b:8d:61:bf:2a:36:1d:11:0d:6f:ef:ab:cb:9e:71:83:c7:
9d:fa:3e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:42:56 2024 by rpki-client on console-fra.rpki-client.org