Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231332e38322e302f32342d3234203d3e20313437303439.roa
File: 3138352e3231332e38322e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: yn9QlpMCJWRrrGZgUF1iP6RfFCnuFZrNIxqad0QgrnA=
Subject key identifier: 56:83:19:15:CA:B1:88:28:07:5E:AE:4C:C4:AA:31:0D:15:73:CE:AF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2FC8B4965E7F4129100E6501E4DC7FB21667BEA6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231332e38322e302f32342d3234203d3e20313437303439.roa
Signing time: Fri 20 Sep 2024 14:04:53 +0000
ROA not before: Fri 20 Sep 2024 13:59:53 +0000
ROA not after: Fri 19 Sep 2025 14:04:53 +0000
asID: 147049
IP address blocks: 185.213.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:c8:b4:96:5e:7f:41:29:10:0e:65:01:e4:dc:7f:b2:16:67:be:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:53 2024 GMT
Not After : Sep 19 14:04:53 2025 GMT
Subject: CN=56831915CAB18828075EAE4CC4AA310D1573CEAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:bb:be:c0:15:d0:a7:c6:b5:de:5d:7e:ff:
4f:1b:e7:b9:8b:f5:b1:d4:d0:8b:f6:8e:c4:1a:84:
65:a4:f2:02:cb:1d:4a:23:27:53:64:07:03:39:6c:
44:9b:60:78:75:cd:ae:9e:0a:cd:53:69:5f:08:ea:
ff:35:37:3c:51:7d:83:79:a6:69:64:f8:52:df:ff:
80:d2:7b:3f:94:d2:ba:41:8e:e7:47:5b:8c:8f:de:
9e:85:9e:72:a6:a7:04:ac:d6:34:03:dd:a9:de:d6:
02:74:0e:5e:4f:7b:88:0a:9b:c5:3d:a6:21:ce:ef:
cb:f5:d5:9f:cf:d8:31:86:58:49:e3:02:e6:96:63:
57:0e:6e:10:a3:f6:f9:88:13:69:5a:e9:70:07:29:
ad:41:04:8a:5b:3c:11:fc:30:0b:6c:48:b4:5e:7e:
20:bd:e8:99:92:97:61:e1:58:17:1e:00:28:51:a8:
64:fd:7e:ae:23:11:6a:e0:bb:ce:32:11:3c:64:c1:
7a:7a:9b:24:85:1e:08:77:40:88:a7:7d:1b:cc:77:
09:c0:19:d9:48:5c:b1:f3:6c:dd:35:6f:5f:be:74:
c7:87:7c:09:f3:a1:59:d9:4e:1a:4d:ef:63:d6:25:
4d:ea:e0:9e:6b:1f:a6:6c:40:3b:d6:91:a4:ed:f8:
cf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:83:19:15:CA:B1:88:28:07:5E:AE:4C:C4:AA:31:0D:15:73:CE:AF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231332e38322e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.82.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e5:85:6b:f6:ba:ad:3c:ff:01:7f:a0:e9:a4:69:e4:c2:ae:
67:01:7a:7b:c1:4c:2b:5d:5b:28:1c:cc:f7:c3:82:4c:e0:b4:
2d:a9:30:9b:69:2c:79:ae:72:e2:d4:1e:2c:c0:6d:26:e0:08:
a9:b7:22:63:e7:74:76:2f:68:d6:2a:79:67:18:65:1c:ca:ee:
49:b7:04:6e:86:ff:aa:e3:96:ca:f4:6c:ff:98:31:df:05:c6:
22:20:1e:43:44:43:2d:b2:13:2f:bd:ce:94:86:17:b4:70:c6:
87:d7:5d:b4:16:06:87:25:f6:79:ce:6b:91:dd:e5:63:98:8d:
62:79:44:21:79:32:12:6a:b0:87:fc:dd:89:57:3d:79:8b:52:
68:13:3d:45:d7:01:90:c6:51:92:7a:e6:bf:0c:eb:f6:07:cb:
dc:42:a4:9a:35:d9:eb:5b:69:7c:21:a9:b6:dc:1d:23:1a:c4:
d4:e6:63:df:f6:de:ff:37:3a:5c:34:9e:c4:6b:1e:ec:29:0d:
e9:51:5f:1d:04:89:e1:cf:8e:47:5b:25:57:c3:ad:e8:bb:e4:
be:07:a8:c8:be:ca:4c:97:e2:97:1b:6e:33:a3:2b:85:c4:31:
e7:c0:d8:4f:c5:77:11:4b:8a:48:7e:53:0b:a4:4d:1b:aa:62:
5f:4b:0e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:45 2024 by rpki-client on console-ams.rpki-client.org