Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232322e3234302e302f32332d3332203d3e203531313637.roa
File: 3138352e3232322e3234302e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: lTfpKQujgjr95/iU0qcbOfNdV7QAFeH+FU3Hlv2xLVY=
Subject key identifier: F2:8D:D7:9B:74:CA:6B:E1:06:9A:DC:56:57:B1:6D:50:1C:CC:80:D1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 354B5D1FF20874C28F3E372F4A91B17B50A9CA48
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232322e3234302e302f32332d3332203d3e203531313637.roa
Signing time: Thu 30 May 2024 20:38:51 +0000
ROA not before: Thu 30 May 2024 20:33:51 +0000
ROA not after: Thu 29 May 2025 20:38:51 +0000
asID: 51167
IP address blocks: 185.222.240.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:4b:5d:1f:f2:08:74:c2:8f:3e:37:2f:4a:91:b1:7b:50:a9:ca:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 30 20:33:51 2024 GMT
Not After : May 29 20:38:51 2025 GMT
Subject: CN=F28DD79B74CA6BE1069ADC5657B16D501CCC80D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:48:8b:b9:ed:b2:15:ab:35:2c:15:c5:af:12:
68:4d:bb:a9:8c:71:9b:5f:7c:87:5d:36:80:12:58:
bf:20:56:c2:a6:28:06:2e:54:cc:0a:a3:6e:97:bc:
bf:96:55:f7:60:77:87:c6:94:f4:62:7c:a0:db:fa:
4e:47:4d:4f:b7:fb:0a:f1:36:cf:5a:75:47:5c:58:
73:3e:e2:62:3d:01:d3:c6:a1:56:d8:30:fa:13:f8:
7f:c8:f0:18:18:3b:f3:13:9b:d1:1b:a0:90:f7:33:
93:1d:32:bb:c0:a3:50:68:94:2d:59:7b:5b:75:8d:
57:50:a5:58:eb:5e:be:4b:1a:0e:bf:e2:aa:77:66:
12:78:4c:90:95:e3:70:56:82:3d:a4:09:75:6d:56:
32:f3:0f:a3:5a:ba:40:5b:68:e3:fd:5f:27:b0:a9:
82:a2:9b:1e:92:fa:4b:8c:bf:04:f8:c9:27:66:be:
96:15:c8:30:98:df:60:54:71:c2:62:bf:8b:44:ff:
f3:a4:04:6c:73:26:d8:b7:59:5e:ae:1f:37:29:9c:
3d:b0:5b:22:26:fb:f4:42:85:70:ae:17:38:c8:1c:
e0:96:81:3d:53:ff:24:42:61:2c:3a:0d:10:a9:13:
a9:32:79:9c:e8:c9:5d:0a:00:57:d6:f6:86:04:66:
18:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8D:D7:9B:74:CA:6B:E1:06:9A:DC:56:57:B1:6D:50:1C:CC:80:D1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232322e3234302e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.240.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:94:43:10:cf:8a:95:a8:dc:49:68:0b:d9:1b:f9:58:56:80:
52:54:74:47:15:a6:e0:20:cf:41:f9:a2:d0:27:27:e8:cf:a2:
f2:b8:df:b0:4b:0e:13:6c:b0:ca:79:f7:c8:1f:62:db:e2:3a:
36:9d:d0:2f:94:40:c5:bf:63:c6:f6:24:13:47:6e:5f:75:cf:
f8:70:82:c5:e3:e3:46:ff:48:b5:7c:ed:42:44:14:11:20:2c:
96:4a:a6:90:5b:53:75:a2:39:9e:28:c9:60:db:35:35:35:87:
cb:a0:fc:45:ca:64:7d:ee:6b:4f:d0:ee:c6:ae:15:7a:42:cb:
80:8c:b9:f9:16:05:85:94:ce:de:98:a8:2d:47:77:fb:2d:a6:
82:59:6e:36:68:de:75:d9:3b:3a:e9:c1:8a:22:63:67:af:09:
45:47:3f:9a:56:47:5a:27:11:fc:bd:c2:dc:51:30:84:29:f9:
4d:98:15:ac:fc:34:c2:4f:e1:ce:e8:9d:03:ca:ce:ca:27:64:
ad:db:c7:34:6e:92:4d:f9:10:45:fe:3f:e4:8b:71:ac:88:e9:
2c:fb:dc:df:a4:96:ac:38:56:87:3c:24:be:cd:9c:a2:4b:2b:
d1:81:0c:3d:a0:ce:d1:34:5d:0e:c2:1d:c4:8a:9d:6a:e7:b9:
c2:e2:9c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:43:17 2025 by rpki-client