Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3234342e302f32342d3332203d3e203531313637.roa
File: 3138352e3230352e3234342e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: WDWik+0d/sgHg3qT1+lF61scoznlU9tYx39o1fi85SE=
Subject key identifier: BE:18:94:B6:F8:3F:5A:30:2A:2D:C8:D5:F2:A2:7F:27:23:0F:33:C8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6CCE9C7778D52BFC761518DF012E01D95589EF6B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3234342e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Jan 2025 09:45:27 +0000
ROA not before: Mon 27 Jan 2025 09:40:27 +0000
ROA not after: Mon 26 Jan 2026 09:45:27 +0000
asID: 51167
IP address blocks: 185.205.244.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:ce:9c:77:78:d5:2b:fc:76:15:18:df:01:2e:01:d9:55:89:ef:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:27 2025 GMT
Not After : Jan 26 09:45:27 2026 GMT
Subject: CN=BE1894B6F83F5A302A2DC8D5F2A27F27230F33C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a7:ad:25:b4:a4:d6:8f:97:9f:c5:1c:8e:5b:
85:c9:60:d6:11:19:c5:2e:7d:b2:2b:2a:02:ed:3b:
c9:c2:79:db:97:63:fe:96:5d:98:0a:c6:1e:23:3a:
da:09:b3:d8:7a:77:ef:4b:d2:37:7f:77:57:1a:75:
6f:72:8f:14:b6:69:50:00:32:74:9c:a9:8c:af:4d:
85:a9:d7:b4:e6:2e:52:95:46:53:bb:ea:be:a4:93:
08:fa:31:96:91:ec:94:4f:33:23:61:de:d2:69:bd:
74:82:35:9d:9a:65:e9:1a:ac:56:99:19:9a:de:d0:
0f:44:4c:56:79:18:d5:8a:18:cc:23:c0:2d:af:3f:
69:46:e5:72:32:36:8d:94:8e:5c:8b:20:ac:53:da:
cb:93:42:37:21:fd:82:09:3d:d1:be:6b:4d:64:3b:
0e:48:1c:f2:d1:82:61:25:4f:87:39:f5:31:96:b1:
2c:97:05:cf:7d:5f:29:db:7f:ac:ed:11:d5:b6:c7:
1d:9b:96:57:fd:b5:85:04:34:f5:f0:ec:e4:f0:27:
df:48:ad:8e:ba:9f:07:a8:2c:9a:46:2f:34:ee:e0:
e2:64:2a:0c:48:f9:94:29:7e:b8:66:38:ef:ef:fc:
f0:ab:9f:6e:d8:69:3a:6c:3c:67:1f:05:d3:c4:84:
56:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:18:94:B6:F8:3F:5A:30:2A:2D:C8:D5:F2:A2:7F:27:23:0F:33:C8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3234342e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.244.0/24
Signature Algorithm: sha256WithRSAEncryption
49:2f:6a:ce:5b:3f:f1:1b:51:f1:7f:b0:8f:ff:3b:8a:1c:34:
4d:87:99:ed:fd:7d:f8:84:da:b1:ba:e6:35:c0:e9:00:90:be:
2b:3e:b9:b2:91:51:3f:f8:f7:6f:cf:f2:81:5f:4b:b1:2f:19:
70:5f:4a:b1:91:46:d0:95:39:11:b1:ab:2f:e2:42:f2:d9:a9:
6e:3c:13:83:f8:b1:b0:90:43:04:aa:d9:2e:2f:aa:3b:10:ae:
c1:f9:ac:3d:e0:ee:dd:78:b8:88:b7:70:3d:85:b7:68:3c:c1:
b9:a2:ae:5e:24:1e:1d:84:7f:f4:32:63:03:47:e4:f6:d2:d6:
24:28:a2:7f:93:84:28:8e:3e:78:bc:17:94:a0:65:06:86:70:
a7:29:2b:53:95:88:96:1d:48:1e:a2:55:af:a9:80:32:0d:e0:
8c:27:c6:02:a6:d9:cc:60:aa:54:28:35:1d:cb:c1:b8:af:f0:
ea:6d:d3:05:c7:8a:6b:e7:09:5a:2c:d5:ab:9a:ae:92:a4:7f:
7f:61:38:c1:b4:53:d1:a0:6e:5c:44:22:eb:e7:e6:83:ff:21:
2d:2f:c7:73:e3:27:1e:0d:16:a8:53:68:c1:33:c2:65:2f:f0:
f3:1b:ec:a3:9d:26:26:6e:c7:c7:37:7a:e7:b0:d0:5b:95:f5:
3d:fa:b9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:37 2025 by rpki-client