Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231352e3136362e302f32342d3332203d3e203531313637.roa
File: 3138352e3231352e3136362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: bSqZtidXIIVRQBm7eMt690oU9tMvs7utV0IsrC6XYp0=
Subject key identifier: 4B:DD:59:44:14:22:AA:4D:2F:FE:5D:8A:A9:AF:80:A9:C6:BE:19:13
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0CB985F55956E521735A47CE3A0E28DD3D277195
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231352e3136362e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Jan 2025 09:45:14 +0000
ROA not before: Mon 27 Jan 2025 09:40:14 +0000
ROA not after: Mon 26 Jan 2026 09:45:14 +0000
asID: 51167
IP address blocks: 185.215.166.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:b9:85:f5:59:56:e5:21:73:5a:47:ce:3a:0e:28:dd:3d:27:71:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:14 2025 GMT
Not After : Jan 26 09:45:14 2026 GMT
Subject: CN=4BDD59441422AA4D2FFE5D8AA9AF80A9C6BE1913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:21:9b:2d:1f:9d:c2:f0:46:e8:ff:6b:9e:16:
6c:67:7c:45:e0:31:0f:fa:de:4a:35:aa:bd:27:a5:
68:a6:14:01:fc:dc:16:ab:cf:40:e2:0b:f0:8f:d8:
4c:1e:4c:34:5b:67:3d:64:44:a8:30:38:8a:fb:cf:
8c:21:e7:3d:11:19:bc:d6:bc:21:21:51:33:86:7f:
42:a3:f8:61:03:94:a8:fc:7b:aa:2b:83:7e:de:88:
51:66:fd:68:f4:c0:81:e6:9a:13:5d:94:66:ec:e4:
33:27:bc:62:43:3f:ec:6e:7d:45:62:cf:d0:de:ec:
ce:91:f4:e7:4b:38:0f:10:89:fe:d5:20:82:35:db:
0d:25:03:7d:38:93:a5:0a:30:bb:10:d5:a8:e1:09:
6d:1c:8e:37:d7:be:b5:bd:16:5c:5c:3e:e1:55:36:
67:32:7e:90:d7:14:ff:61:39:6c:dc:41:03:d3:6a:
ba:7d:03:75:e6:7f:1f:8c:8c:9f:91:c0:65:e6:92:
a7:82:9c:f0:17:18:7c:d6:65:54:f3:cc:7b:ca:bd:
4e:84:7e:a4:7b:76:dd:7d:36:93:5d:51:8e:60:10:
7e:0c:c4:08:42:e4:df:69:28:4c:db:85:72:14:7e:
a6:b0:e9:40:f1:e0:c2:6b:4c:58:39:3b:e0:31:05:
f3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DD:59:44:14:22:AA:4D:2F:FE:5D:8A:A9:AF:80:A9:C6:BE:19:13
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231352e3136362e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.166.0/24
Signature Algorithm: sha256WithRSAEncryption
68:63:1c:4e:e4:0c:23:34:56:f9:67:50:82:9d:dc:2c:1f:1c:
99:8b:f9:47:53:4d:c5:d5:3f:26:f0:43:59:ce:df:56:67:56:
3e:e4:de:4a:71:c5:3f:b6:d4:4b:36:cb:a2:6d:f7:d2:1c:02:
ec:c3:9e:7c:cf:ed:6b:90:c1:43:db:c1:19:26:35:70:a5:5f:
f2:f2:20:ee:f2:2c:49:2e:fb:b3:be:54:59:8a:5c:f0:36:e2:
fa:26:cb:72:0a:48:58:8c:8c:a4:a9:5b:22:9e:54:08:b7:7a:
ea:e5:e7:8d:6c:51:14:c6:83:48:8c:f7:76:45:54:25:19:56:
4d:a1:f1:8d:d8:ec:34:29:d0:3c:44:a3:eb:3e:d6:c7:9e:75:
8b:3a:67:be:a4:ad:4d:de:e9:24:1f:b3:67:3e:e3:6c:8e:4c:
a8:d0:12:2b:66:48:b9:ca:65:f3:da:0e:fe:fd:09:59:fc:4c:
9a:d5:1c:cb:bb:a9:87:65:f5:3c:d3:2c:5c:b4:09:2a:c1:59:
0f:da:e3:d6:2c:4a:be:0b:bb:3a:6c:3a:7d:14:6d:bf:fa:a9:
bb:98:c0:2a:ff:f6:50:30:61:29:81:ce:81:3d:fb:fa:1e:32:
d3:94:d1:ca:a8:b3:26:2a:86:de:95:11:bb:a9:18:d5:11:a0:
56:39:21:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:14 2025 by rpki-client