Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3234352e302f32342d3234203d3e20313336373837.roa
File: 3138352e3230352e3234352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: HSUytaVj2V7GT5eXZtR0oFIDQPlkbktu5B/CHJ5Wbxo=
Subject key identifier: F2:FA:7A:7B:E1:96:2D:91:9C:BB:9C:DE:5C:72:AF:5E:9B:E3:10:CE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 44B69581601F339E2CFF6EB1013FE1FCB112B52B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3234352e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 12 May 2024 11:03:39 +0000
ROA not before: Sun 12 May 2024 10:58:39 +0000
ROA not after: Sun 11 May 2025 11:03:39 +0000
asID: 136787
IP address blocks: 185.205.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:b6:95:81:60:1f:33:9e:2c:ff:6e:b1:01:3f:e1:fc:b1:12:b5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 12 10:58:39 2024 GMT
Not After : May 11 11:03:39 2025 GMT
Subject: CN=F2FA7A7BE1962D919CBB9CDE5C72AF5E9BE310CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:92:7d:8f:3b:14:53:9b:39:2b:06:9c:bb:3c:
2a:dc:af:f4:8d:6b:15:40:1e:fb:a6:d0:24:3f:ce:
31:b1:b4:6b:6d:52:80:0e:a1:10:83:1e:e6:2f:d1:
58:ab:32:ce:60:f8:79:7b:e9:25:de:49:c2:47:ab:
99:e3:11:87:c2:4d:2e:54:37:b3:34:60:6a:b2:2b:
49:d2:b9:8d:8b:e0:90:c6:11:0e:dd:4a:5e:1d:6c:
53:24:aa:40:39:9d:46:1d:6b:10:0f:15:bb:a5:1b:
fb:ae:34:2b:3c:76:8d:5b:92:b7:2e:29:fe:ac:82:
38:f6:22:b2:0e:a6:53:35:3a:5c:b1:c2:d8:6e:0f:
4b:b8:4a:49:5a:e4:7c:b3:a8:9e:c5:ae:7e:c0:b3:
29:24:4a:b9:ac:be:2c:06:74:8b:ad:60:a6:4d:46:
89:84:35:89:7b:af:74:59:27:3f:4a:f2:cd:3f:f9:
ea:38:41:3b:fc:fe:25:69:7a:49:03:13:e2:a9:5c:
7e:05:f6:dc:f7:7b:7b:22:80:98:8b:76:61:0c:da:
e3:d3:ca:3b:38:47:48:da:17:f1:05:83:4b:85:6e:
aa:d0:eb:ea:40:88:99:34:d4:2e:47:74:5f:4c:d9:
aa:3a:d8:ee:4e:8c:98:47:31:fb:62:22:28:b5:36:
48:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FA:7A:7B:E1:96:2D:91:9C:BB:9C:DE:5C:72:AF:5E:9B:E3:10:CE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3234352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.245.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ac:b8:24:84:f0:4e:cb:b8:ae:a5:e1:56:31:d2:76:f7:e7:
d2:2e:ff:be:d5:5c:f2:d5:b9:1d:03:38:90:c3:6b:de:09:93:
35:6c:2d:a3:a8:43:ed:8d:e6:96:e7:03:ae:ac:ac:38:5a:6a:
b0:b3:48:8b:e6:5d:3a:da:df:b1:31:db:62:02:0e:1c:1b:4d:
f4:8e:53:60:30:f7:69:6e:67:cb:b0:fa:f5:b1:7d:ca:b0:8b:
62:74:0a:9d:c5:59:04:00:92:80:2b:f9:59:8a:e2:e1:e7:98:
bf:78:c4:d0:92:70:37:c2:03:3a:0e:03:46:c4:eb:1a:6f:dc:
63:ed:ff:60:14:62:25:de:fe:ac:c4:df:50:6a:79:78:53:1d:
df:7a:03:d7:2d:25:37:91:ab:44:1d:85:3b:96:88:a8:c1:64:
76:16:ca:80:18:63:dd:84:8e:91:41:17:5b:0a:8e:ef:0a:07:
cc:36:48:ba:dd:ab:26:df:e8:0d:f8:b1:c6:6f:de:9e:f2:69:
4a:43:50:3e:de:ef:22:e6:4d:6b:36:a6:0b:a6:e5:f4:4d:b5:
72:6f:2f:f1:4d:4f:17:b5:09:d8:23:59:ae:53:56:9f:41:a2:
39:86:b2:41:bd:b9:64:9f:7f:55:34:3f:18:e9:b8:8a:20:bb:
1b:d3:11:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:45 2024 by rpki-client on console-ams.rpki-client.org