Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232312e3133322e302f32342d3234203d3e20323036383034.roa
File: 3138352e3232312e3133322e302f32342d3234203d3e20323036383034.roa (raw, json)
Hash identifier: tOlvygS+QxAv/gQYu/JdHRzm8zEiT79k3x0bM9mVim4=
Subject key identifier: 56:AE:EC:4D:8F:48:15:8F:CD:14:65:F4:95:E8:BB:08:24:CE:DC:D4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 361C0EB973BB739F5849B96A33910D097934E663
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232312e3133322e302f32342d3234203d3e20323036383034.roa
Signing time: Fri 20 Sep 2024 14:04:50 +0000
ROA not before: Fri 20 Sep 2024 13:59:50 +0000
ROA not after: Fri 19 Sep 2025 14:04:50 +0000
asID: 206804
IP address blocks: 185.221.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:1c:0e:b9:73:bb:73:9f:58:49:b9:6a:33:91:0d:09:79:34:e6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:50 2024 GMT
Not After : Sep 19 14:04:50 2025 GMT
Subject: CN=56AEEC4D8F48158FCD1465F495E8BB0824CEDCD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:41:a7:43:7b:a8:25:1e:ad:74:b9:85:5c:
9a:a7:0c:9c:dc:f1:75:ea:9d:38:2a:fb:43:9e:0a:
c3:56:b2:68:30:0a:c3:73:a6:9a:8c:7f:75:01:6a:
e0:5d:5f:e7:fe:71:61:5d:e3:5f:2f:85:8a:b0:18:
3a:fd:b2:0c:87:e5:b8:49:1a:79:04:d6:f5:ad:ad:
b8:39:c9:d7:5f:45:a7:e9:81:82:ef:e1:a7:79:09:
e0:b8:84:46:d6:9e:4e:39:46:90:cf:72:ed:58:61:
56:b5:48:3a:38:bd:bc:a7:2c:02:8e:26:62:74:e2:
ea:e4:da:e7:cb:5a:2f:65:21:07:7a:ef:a8:06:bd:
2c:8c:ad:28:89:e2:96:c2:ed:10:a0:e7:59:d8:50:
71:7f:85:e6:6d:fb:8e:f3:92:65:6e:e8:95:17:2f:
32:46:77:9a:29:9b:b9:27:f8:2b:01:14:cf:2f:9e:
53:39:f5:de:36:cb:fc:02:15:c8:6b:e8:ba:d0:b0:
31:4f:6d:97:9f:cc:99:f2:33:5f:69:d9:1c:30:10:
53:e6:ab:ac:30:fc:e4:43:a8:f3:2b:16:c7:70:ed:
bf:c2:ee:22:3a:2b:39:aa:bc:81:e4:63:bf:93:84:
f7:93:39:ee:31:f1:6b:10:e9:17:5f:d6:ea:5d:28:
c6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AE:EC:4D:8F:48:15:8F:CD:14:65:F4:95:E8:BB:08:24:CE:DC:D4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232312e3133322e302f32342d3234203d3e20323036383034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.132.0/24
Signature Algorithm: sha256WithRSAEncryption
19:48:78:0a:dd:f5:98:7a:60:3e:a6:b2:ab:97:cc:25:49:68:
75:ba:01:72:39:bc:c1:a3:a8:f3:3b:79:99:50:b3:d5:7f:40:
38:1b:5d:62:93:19:fb:d8:60:29:a9:49:d2:8f:40:88:7b:dd:
e2:10:b2:ad:e8:6a:b0:e2:80:11:e7:77:8d:c9:17:a3:28:9e:
b6:ec:85:d4:91:30:6c:67:4a:7a:30:34:ff:20:6c:d5:2f:9c:
6b:48:7b:e4:2f:94:e8:ff:95:9d:e9:98:01:9e:e2:3f:63:5b:
a3:f4:2c:4d:19:53:22:58:79:9d:fe:46:2c:9f:b5:ab:25:6a:
43:45:f5:ac:21:ab:96:55:97:76:da:48:8c:98:50:ae:db:5d:
bf:73:61:90:50:43:66:3e:3c:d3:3e:8f:e6:bd:cb:4c:c4:42:
24:4d:5e:28:9e:6a:64:55:08:2a:85:4d:b6:a2:3c:85:e2:82:
dd:c5:d8:5a:ee:a2:01:59:b5:73:03:2f:e3:0c:84:a3:3f:a2:
51:af:4e:38:12:45:9d:0a:db:1b:64:29:88:06:a5:22:30:50:
c2:53:3b:14:76:c9:c2:98:b1:4d:eb:f2:f6:5f:48:c6:77:fc:
83:64:71:81:22:0e:12:0c:76:c6:73:78:80:82:74:f4:66:f9:
e4:e3:9e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:28 2025 by rpki-client