Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230332e3132322e302f32342d3234203d3e20313336373837.roa
File: 3138352e3230332e3132322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Q4sXiNJz5hdW41hLkLuBK+ANivOP4hUwEh7HuLUmenI=
Subject key identifier: 30:B6:AB:64:15:D3:3F:5B:8C:F3:BB:64:51:D2:E6:8C:BF:8E:91:C6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4F962830F67A9C341002D34BB356BA4ACEDB6C98
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230332e3132322e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 27 Jan 2025 09:45:22 +0000
ROA not before: Mon 27 Jan 2025 09:40:22 +0000
ROA not after: Mon 26 Jan 2026 09:45:22 +0000
asID: 136787
IP address blocks: 185.203.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:96:28:30:f6:7a:9c:34:10:02:d3:4b:b3:56:ba:4a:ce:db:6c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:22 2025 GMT
Not After : Jan 26 09:45:22 2026 GMT
Subject: CN=30B6AB6415D33F5B8CF3BB6451D2E68CBF8E91C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:9d:c5:6e:12:8e:35:33:42:ed:ea:0c:5c:48:
a9:cb:1b:1e:ae:5c:53:a6:b7:e2:9b:1c:46:0d:f7:
47:10:7c:3f:3d:12:44:be:38:bc:8b:5f:3c:a7:1d:
b0:65:01:1d:de:b9:ca:49:28:33:03:62:6e:6b:eb:
a3:28:af:4f:47:c7:3e:aa:73:48:23:b4:52:1b:8d:
e7:ca:8b:69:72:22:b5:46:90:51:e6:08:38:7b:13:
f8:6c:75:a2:e0:c8:74:ad:35:59:0e:91:27:fb:16:
14:4e:0d:2a:cb:5c:df:7a:9a:65:3c:7d:54:b5:58:
16:eb:54:a8:75:e8:67:ea:51:f2:17:c1:b1:a9:a2:
a3:5d:b8:36:9b:5b:24:4f:b1:7d:2f:8b:1c:97:0c:
82:2c:c1:0e:36:f0:91:bd:53:fb:cb:66:1e:fe:45:
6f:07:e6:33:a0:23:f5:72:00:9d:7d:e3:2b:2d:92:
2e:ab:c9:c8:5b:0c:96:4c:72:11:37:98:b3:6d:1b:
77:78:5e:ea:ac:f8:42:c9:f2:67:2e:dd:ad:46:d7:
26:1e:aa:2c:9e:0f:48:70:53:41:a2:32:e6:10:86:
da:08:dc:2e:2e:74:28:72:ea:e1:a5:f0:38:6d:2e:
07:06:6c:b5:af:ac:d4:83:d2:d2:99:85:e5:aa:8d:
9d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B6:AB:64:15:D3:3F:5B:8C:F3:BB:64:51:D2:E6:8C:BF:8E:91:C6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230332e3132322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.122.0/24
Signature Algorithm: sha256WithRSAEncryption
69:44:e7:08:fa:c7:df:b9:28:58:12:92:13:69:aa:89:bc:27:
9a:42:58:61:e9:14:15:ea:c3:32:b7:11:28:14:66:f8:42:49:
0e:c0:d7:f5:c8:39:50:32:a2:5b:4c:8f:94:97:93:ed:dc:00:
18:4d:40:d4:e1:e8:75:f0:c4:02:76:4c:1d:4e:ef:bf:49:5d:
08:7b:8b:0d:26:94:53:1c:63:84:7a:84:88:1f:a9:1a:d1:96:
9e:87:3d:fc:a3:a0:9a:89:72:26:15:0f:fd:f0:6f:c9:32:bc:
8e:02:1f:56:60:d4:66:0e:98:ab:ff:01:42:85:ba:72:a5:53:
f3:22:07:05:7b:42:1c:62:9d:ca:9a:7d:ef:48:fe:99:db:10:
11:ee:8c:fc:89:38:66:b7:73:dc:ae:e7:e6:c8:28:87:78:57:
be:a8:28:8f:26:52:dc:70:b8:b4:90:61:82:84:95:03:40:87:
20:51:ae:3a:d8:0c:99:1e:12:b6:9b:42:25:b9:57:dd:8d:0b:
73:b7:de:cc:da:f9:58:92:d0:c9:bd:31:7a:e0:e5:be:2d:90:
c5:fd:91:e9:eb:05:ea:6f:d8:a8:e8:72:2f:02:f3:4f:bc:f9:
8e:df:20:67:9c:5c:4f:d0:29:59:2c:54:2a:46:4f:6f:6e:bb:
48:93:9c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:26 2025 by rpki-client