Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139392e3130312e302f32342d3234203d3e20313336373837.roa
File: 3138352e3139392e3130312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: O9vDEpCzPBiJrP6XJIDEqveoDD55ezDBsuFRHKpXT0E=
Subject key identifier: 21:8E:B4:A4:F7:4F:F2:C0:1B:3D:50:F4:5F:A1:B7:98:5B:56:56:5F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 653F51A6D77A24E1198AD3393BECC672AA36DEB3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139392e3130312e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Sep 2024 14:04:55 +0000
ROA not before: Fri 20 Sep 2024 13:59:55 +0000
ROA not after: Fri 19 Sep 2025 14:04:55 +0000
asID: 136787
IP address blocks: 185.199.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:3f:51:a6:d7:7a:24:e1:19:8a:d3:39:3b:ec:c6:72:aa:36:de:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:55 2024 GMT
Not After : Sep 19 14:04:55 2025 GMT
Subject: CN=218EB4A4F74FF2C01B3D50F45FA1B7985B56565F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d2:8b:bb:a0:43:ca:65:50:91:a4:61:c9:7a:
24:d7:dc:c5:03:b4:9f:b3:51:40:06:d2:24:fd:48:
92:df:1a:3e:bd:91:8e:91:b8:ca:bd:c5:41:9f:e3:
df:97:56:b8:dc:d2:b8:9c:ef:ed:ec:66:d3:ee:13:
ce:36:fc:9f:91:79:25:85:08:9e:38:93:e2:c5:1c:
45:ed:76:e0:c6:a6:6b:bd:17:9b:93:9b:26:72:a9:
a5:6d:65:41:f5:46:24:8e:e0:7d:3d:82:4d:df:cf:
9f:25:c1:00:59:25:3c:f3:20:8b:67:c8:f5:cb:5c:
08:eb:9d:c7:ac:97:e7:21:44:9a:93:45:4b:b0:f0:
83:24:df:fe:6e:c0:ee:68:15:8b:17:74:40:79:41:
c1:04:81:d3:19:51:c9:d6:47:4c:de:a8:b7:47:cf:
26:62:eb:d3:09:d4:97:37:80:6d:e5:af:da:bc:de:
78:1f:bc:26:6a:3d:42:3d:98:ff:7f:c4:f7:4e:3b:
a1:a9:4a:90:4b:21:b3:ff:bb:2a:f5:1f:e4:15:a6:
e2:62:af:1d:50:40:9a:52:47:08:02:77:6a:57:5b:
00:c1:16:39:5e:ea:1a:32:2b:ea:e6:bd:4b:6c:e2:
ba:fd:8f:b1:ea:72:c9:aa:8e:1c:72:ec:d0:d7:02:
19:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8E:B4:A4:F7:4F:F2:C0:1B:3D:50:F4:5F:A1:B7:98:5B:56:56:5F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139392e3130312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.101.0/24
Signature Algorithm: sha256WithRSAEncryption
33:c0:8c:c9:18:c5:1a:e1:b6:70:25:28:d3:59:a9:3c:b8:1c:
c3:14:40:5c:2f:ad:7c:5f:0b:14:0c:72:50:45:d2:43:42:62:
11:f8:12:15:d1:70:01:43:44:47:3f:49:eb:99:65:f2:f3:b9:
65:57:2d:fd:d2:b0:1d:5b:b3:aa:16:9b:16:a5:9b:3c:0f:8a:
10:8b:2a:ba:ce:b3:e8:ec:87:a7:9a:9a:c0:87:6e:d9:f6:1f:
fa:e7:4f:e7:41:6c:5c:69:01:dd:30:38:77:48:42:bb:9f:01:
e1:33:63:af:40:80:f6:12:ca:f4:59:77:27:8f:7c:83:d2:9c:
2a:4a:a3:c1:17:77:ca:35:ca:3a:69:89:84:cd:fd:04:f9:08:
34:74:2f:21:93:27:9f:8c:bd:5a:b8:8a:83:9f:ae:62:4e:73:
8d:4d:59:ba:60:e2:31:85:8b:6d:98:13:d8:a6:11:69:18:df:
e8:08:30:7b:55:02:97:4f:83:1e:67:19:99:24:53:7a:c1:88:
5c:b2:3e:05:3f:33:58:ed:50:91:32:69:50:5b:60:ba:61:1e:
bc:f7:60:8c:f2:8e:bb:f7:51:47:fc:7e:dd:e6:64:e9:05:d4:
c7:ec:67:c2:e2:6e:0f:60:2c:df:1d:da:ea:3a:79:04:de:1f:
cc:25:42:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:42:56 2024 by rpki-client on console-fra.rpki-client.org