Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3233382e302f32332d3332203d3e203531313637.roa
File: 3138352e3230322e3233382e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: eaHuDkk7qZKo1V/+mFgH8o8WctY94N1UlaXBL0LOuQg=
Subject key identifier: 0B:51:C6:62:4C:12:B6:C8:1F:AB:D3:7E:D3:2B:A8:01:B1:1F:F4:56
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 29FCFC59829F84A09E5BDCDD67AE9225B4AC853D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3233382e302f32332d3332203d3e203531313637.roa
Signing time: Fri 20 Sep 2024 14:05:02 +0000
ROA not before: Fri 20 Sep 2024 14:00:02 +0000
ROA not after: Fri 19 Sep 2025 14:05:02 +0000
asID: 51167
IP address blocks: 185.202.238.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:fc:fc:59:82:9f:84:a0:9e:5b:dc:dd:67:ae:92:25:b4:ac:85:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 14:00:02 2024 GMT
Not After : Sep 19 14:05:02 2025 GMT
Subject: CN=0B51C6624C12B6C81FABD37ED32BA801B11FF456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:2a:11:31:34:2e:18:62:0c:ce:90:14:3a:
0a:0e:d7:32:c3:31:2e:21:83:4d:ff:9c:ae:d9:c0:
1e:30:9f:d5:3c:03:a1:be:0f:82:20:8d:06:d1:35:
5a:bb:50:d2:9e:8d:c6:96:99:6f:a5:06:cf:fd:37:
b1:56:54:23:fe:92:d0:f7:a5:23:92:8d:8d:08:21:
78:d5:98:52:6c:31:2d:b4:ad:46:26:a5:69:75:bc:
1f:ec:da:00:d8:d9:ef:14:21:45:db:2f:fb:28:ee:
82:67:d0:b7:4a:10:17:56:d3:77:30:ae:c5:2c:70:
02:57:49:f1:2f:f4:79:81:02:a5:39:46:96:a1:c4:
f6:6b:c5:73:6f:4f:3c:80:0d:94:45:53:4f:0f:47:
8b:08:8d:40:3c:9e:0b:b0:2a:f3:03:5f:70:fc:c5:
a0:37:43:3b:9e:35:ef:42:cf:12:52:5d:24:d7:5f:
64:e0:a6:d7:48:a6:77:d2:6c:64:a5:c8:8e:a1:7c:
88:eb:78:9c:12:4b:e0:a7:89:ee:58:e7:8c:32:b3:
dd:35:3c:75:8f:3c:9a:4d:62:ea:bc:68:e8:eb:38:
90:51:87:c4:02:94:f3:24:62:47:ca:06:38:c9:58:
31:87:3a:1e:2a:8d:e4:c7:68:a4:03:d0:4b:28:a3:
cb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:51:C6:62:4C:12:B6:C8:1F:AB:D3:7E:D3:2B:A8:01:B1:1F:F4:56
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3233382e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.238.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:1a:32:4f:c0:d2:30:6c:a3:65:6a:7f:54:0d:af:65:77:5d:
8e:4d:18:a3:1b:bd:5b:1d:5c:13:87:03:86:5c:f2:fe:98:1e:
71:fc:a1:6b:eb:a2:b4:82:f5:49:f2:6d:98:fd:cf:73:81:be:
5f:c9:84:8d:f3:67:71:39:6b:02:7c:a7:92:58:c5:22:c6:6d:
3c:3f:f1:05:0f:7f:4d:ab:f2:9d:7a:45:db:46:6f:70:da:4c:
31:01:cd:4b:5e:83:11:bc:ac:24:4b:2b:a8:dd:8a:5e:44:5e:
a7:0e:dc:35:b1:04:4a:f5:83:86:65:c9:d6:65:b8:6e:d9:1b:
64:8d:04:d1:4c:b9:8e:38:30:36:8c:c5:34:d4:72:35:f8:17:
d1:ca:c9:9f:3b:d6:f2:c1:54:56:f9:44:dd:14:f4:70:6b:ed:
58:10:05:8c:f7:7f:0d:9f:e7:3b:a0:9a:e3:ea:0a:89:18:5a:
e4:6f:0a:34:4a:08:04:a4:bc:a2:5c:35:7f:35:59:c2:78:78:
e5:9d:5f:50:3c:93:1f:d3:a0:05:3b:9c:3c:26:e3:12:34:a0:
13:87:09:a3:2e:77:4e:95:f7:75:03:4e:18:b4:71:e6:66:2d:
ac:b3:8c:1d:35:fb:66:58:64:3b:a7:64:f1:43:5b:f9:54:e4:
c8:74:c9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:43 2025 by rpki-client