Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230312e382e302f32332d3234203d3e203437353833.roa
File: 3138352e3230312e382e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: ipkOVhGn3P01HQr4UoAKpnxY9P9HXNjRPK8LkK0AAoQ=
Subject key identifier: 04:0D:9C:FF:4D:0C:B9:A8:CD:21:CE:D2:4F:DB:0E:17:B6:7B:FA:8C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 48D379701AF61168432CA910B95E131DF2925341
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230312e382e302f32332d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:45:09 +0000
ROA not before: Mon 27 Jan 2025 09:40:09 +0000
ROA not after: Mon 26 Jan 2026 09:45:09 +0000
asID: 47583
IP address blocks: 185.201.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:d3:79:70:1a:f6:11:68:43:2c:a9:10:b9:5e:13:1d:f2:92:53:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:09 2025 GMT
Not After : Jan 26 09:45:09 2026 GMT
Subject: CN=040D9CFF4D0CB9A8CD21CED24FDB0E17B67BFA8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4e:a6:7a:9d:11:25:e7:8b:05:38:c8:ce:dd:
53:a6:4e:0e:07:f3:b2:b3:d1:b6:7c:ce:14:36:31:
30:00:97:1b:35:11:e6:e8:42:ba:75:17:75:cb:70:
46:c8:5e:06:99:bb:16:a8:f9:b1:6e:4f:a1:65:65:
63:9b:4d:6e:24:4c:53:c0:ed:99:59:d1:44:30:9e:
5c:d9:e1:81:c4:ab:72:31:b1:b3:f7:64:11:2c:33:
b8:f2:2b:f9:83:e3:ce:97:13:92:c6:3d:4c:22:28:
d7:ff:13:7c:d2:31:57:3c:5b:dd:86:6c:84:3e:e8:
68:6b:6e:4d:36:b6:7d:24:d0:71:1f:9c:2b:d5:cf:
91:a7:df:4e:b4:1b:ea:ea:5a:9c:01:c7:f5:39:ee:
4f:59:37:e3:1d:77:24:6f:13:dc:2c:d6:22:94:60:
18:70:7e:3e:b0:ce:0d:6d:75:67:26:2a:f7:1d:3d:
e8:18:20:26:06:a6:bf:a8:66:d3:3a:72:40:1c:91:
66:7e:1c:8f:94:12:0e:80:29:8b:c6:52:fb:6e:81:
3c:09:cd:c2:e4:c2:a7:70:53:f9:cb:13:3b:17:ed:
b0:69:77:a5:a8:b7:05:39:34:e2:aa:57:4e:2b:87:
86:6e:89:dc:bb:c5:2b:65:49:d0:46:1f:e5:d0:9d:
e3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0D:9C:FF:4D:0C:B9:A8:CD:21:CE:D2:4F:DB:0E:17:B6:7B:FA:8C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230312e382e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.8.0/23
Signature Algorithm: sha256WithRSAEncryption
55:1e:a2:a6:3c:94:b5:93:aa:66:a3:0c:60:64:be:dc:6b:c6:
9a:9a:9e:b1:f0:ce:74:f3:d5:9a:51:11:1f:f8:80:e8:2a:91:
51:d9:ee:4b:6d:9f:14:9e:53:b4:92:cf:b9:26:17:f6:5a:c8:
8b:d1:8d:4a:d8:7f:77:42:8e:6c:c7:76:ab:cb:f7:54:e1:1e:
33:8a:8d:54:e1:8e:07:6a:1a:f4:de:ea:bc:a2:66:ef:fa:de:
fc:72:00:e9:2d:a2:64:54:6a:14:f8:6c:34:a9:7c:da:70:8f:
84:7a:bd:33:14:5a:04:69:a5:20:3c:a6:d4:89:33:29:be:70:
20:c1:22:29:bc:99:5c:fe:b8:5e:cd:38:93:fd:6f:6b:ad:3b:
50:fa:77:ca:94:c8:e4:71:22:8d:87:a1:3a:b1:e9:9b:84:d2:
aa:ad:16:76:09:b2:13:42:11:35:f7:bc:44:e4:97:8d:b5:47:
b9:86:2a:73:f8:5e:b6:11:6b:83:22:3a:b4:32:12:8d:a9:fc:
ad:e8:26:5b:8d:6c:ba:93:2d:3a:2b:e6:35:56:99:25:ee:d5:
cd:14:de:ce:35:44:fe:9c:a4:61:66:fa:69:07:e2:88:98:fe:
64:ad:02:2e:fa:96:2d:1c:a4:9b:00:1a:b5:d8:d2:4e:2e:9b:
06:7d:7b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:06:58 2025 by rpki-client