Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231392e3134332e302f32342d3332203d3e203531313637.roa
File: 3138352e3231392e3134332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: 5p4e7nevTh/EMXA23XiHQD8HiNkHihyINBcav4+eliw=
Subject key identifier: 4C:11:98:E2:36:9A:0D:95:00:43:2E:85:0F:AA:6F:A9:81:ED:F2:CF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3F5159226F5337264E53CE951ED7B05580C1C2AA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231392e3134332e302f32342d3332203d3e203531313637.roa
Signing time: Thu 30 May 2024 20:38:57 +0000
ROA not before: Thu 30 May 2024 20:33:57 +0000
ROA not after: Thu 29 May 2025 20:38:57 +0000
asID: 51167
IP address blocks: 185.219.143.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:51:59:22:6f:53:37:26:4e:53:ce:95:1e:d7:b0:55:80:c1:c2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 30 20:33:57 2024 GMT
Not After : May 29 20:38:57 2025 GMT
Subject: CN=4C1198E2369A0D9500432E850FAA6FA981EDF2CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:c3:24:ce:bd:79:3d:ec:44:a3:32:9c:cb:
55:29:87:f4:b4:89:a9:6a:ed:b5:d9:0e:6c:5a:f2:
6c:aa:ab:d4:ee:20:b0:8a:25:26:89:5b:39:d2:84:
de:10:95:dd:64:cb:5f:48:15:35:a2:5a:fc:c1:17:
bc:15:2f:f0:84:cb:ab:f2:54:ec:36:05:42:c3:3d:
85:f5:52:bf:64:ab:48:36:d5:b3:c8:d2:28:9d:d6:
a8:88:ee:42:a5:3a:ac:e5:dd:c7:09:9e:f9:22:5f:
1d:aa:21:3a:ea:61:28:df:6b:a8:f3:94:8c:b3:0e:
27:18:28:4b:69:0c:53:d6:08:c2:06:9e:3d:bd:d6:
4d:48:82:fc:3c:6d:06:ed:2b:6a:30:9c:dc:86:b1:
76:ff:e1:b2:3e:a6:b6:7c:3e:47:cc:d5:ae:f8:6f:
67:18:cb:0d:0e:c0:ea:54:fd:39:8e:69:73:04:98:
68:6d:22:de:fd:60:ca:fb:8e:65:a3:67:18:4c:f2:
76:15:4c:5a:9e:fc:f3:d4:a4:8a:9c:2b:99:e4:f7:
94:7c:e8:3c:f2:0f:4e:34:c1:13:56:eb:c5:77:87:
02:43:26:31:81:04:cf:fa:64:30:f1:5c:dc:eb:be:
f5:af:2d:99:01:e6:11:21:77:da:3e:53:67:3b:81:
cd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:11:98:E2:36:9A:0D:95:00:43:2E:85:0F:AA:6F:A9:81:ED:F2:CF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231392e3134332e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.143.0/24
Signature Algorithm: sha256WithRSAEncryption
17:cb:6b:90:98:7c:34:54:17:06:c3:01:ca:43:6d:06:3a:85:
b6:07:cf:44:18:2f:ab:de:b6:c3:59:5c:35:99:0e:07:af:03:
b8:df:a9:94:15:6a:c1:c9:df:4c:4d:4b:8f:ce:a5:6f:40:b5:
13:dc:a4:03:25:3b:da:b2:0e:92:ba:2b:a5:b3:98:48:70:97:
e1:6f:f6:11:bd:5b:ec:3c:7d:56:7b:08:52:25:96:be:5c:ac:
78:5a:15:85:af:19:d2:d7:c8:9e:74:3a:00:f3:40:3d:64:ed:
03:34:8a:78:64:62:07:97:49:28:a3:3f:9c:6c:00:7d:74:a1:
12:46:a8:bb:15:b3:3f:0c:f3:4c:ed:de:3f:0a:29:a1:fa:0d:
58:a5:0c:b1:76:94:a9:1f:fb:51:64:a8:cc:91:47:11:a3:0e:
77:49:4b:77:a0:9f:2b:b5:04:6a:a0:69:0f:84:62:6f:fc:09:
c0:1c:31:f1:7d:f1:cc:f3:23:de:ca:e8:c9:0b:94:1f:c5:6c:
84:fc:43:8c:27:ae:50:df:62:0e:76:67:86:68:b1:b6:2a:cf:
2a:67:a1:46:1c:c6:c4:65:a8:92:e7:ff:4b:6a:22:45:1a:8f:
5f:ab:78:bc:88:b1:64:f8:dc:bd:cd:7a:b3:59:62:21:7c:1e:
ef:d6:d4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:37 2025 by rpki-client