Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232352e3133362e302f32342d3234203d3e20313336373837.roa
File: 3138352e3232352e3133362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: /0wkwc50mh5qc9AufMAbQfSxEWexuQc6w9T9q7qjkU4=
Subject key identifier: 28:56:75:DB:46:89:0B:59:EB:15:6D:7B:02:4E:59:0E:CE:F1:5B:16
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1DC54634734B6B259388E37850416573E3A5D052
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232352e3133362e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 27 Jan 2025 09:45:25 +0000
ROA not before: Mon 27 Jan 2025 09:40:25 +0000
ROA not after: Mon 26 Jan 2026 09:45:25 +0000
asID: 136787
IP address blocks: 185.225.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:c5:46:34:73:4b:6b:25:93:88:e3:78:50:41:65:73:e3:a5:d0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:25 2025 GMT
Not After : Jan 26 09:45:25 2026 GMT
Subject: CN=285675DB46890B59EB156D7B024E590ECEF15B16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2f:8c:55:0b:dc:fb:b3:3d:7c:f9:83:2b:3d:
4e:ec:5a:a9:c3:7f:e5:b0:5c:c5:eb:4c:be:db:a8:
ab:53:95:57:c1:df:66:f8:68:a1:b1:f8:e9:a4:bd:
f2:d0:8d:24:42:f7:cb:d0:7f:84:8f:4b:7c:de:5e:
b5:fc:7a:16:dd:3d:b1:e2:c3:f9:b5:46:6e:35:6f:
88:e1:e8:e5:07:e7:26:c5:17:d6:2f:c4:eb:53:e7:
dc:3c:4a:b9:c2:50:27:51:f3:40:98:6c:71:50:fa:
08:56:48:da:68:9c:30:b3:7e:06:ce:3f:22:27:93:
06:86:ca:0e:9d:e8:5c:af:20:6c:4b:9f:aa:dd:df:
2d:4a:ca:2e:90:5f:7e:ab:18:e5:b6:e9:41:36:f9:
3a:98:b3:9f:a9:01:7d:4f:ce:01:8c:bc:68:97:ee:
c3:f9:19:d4:a6:24:cf:cb:cf:b4:d2:4d:9d:e3:f7:
ca:55:34:73:44:9d:b6:1b:9a:c1:30:84:d0:29:1d:
72:be:ef:f9:ff:31:a1:da:25:11:8c:3b:0f:16:27:
6c:33:91:54:e7:b9:6d:55:84:0b:3a:d2:98:b8:2f:
68:18:78:25:7d:78:63:75:4b:3f:34:5b:55:d9:74:
a6:4f:9d:3e:a1:6a:05:55:13:b0:17:5a:36:1c:d2:
da:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:56:75:DB:46:89:0B:59:EB:15:6D:7B:02:4E:59:0E:CE:F1:5B:16
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232352e3133362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.136.0/24
Signature Algorithm: sha256WithRSAEncryption
50:fa:ce:f7:7c:05:ab:de:82:3f:94:62:9e:5f:11:07:82:43:
c5:fa:ac:7a:f8:90:cf:d8:c9:60:00:f1:35:07:01:4e:25:9f:
6f:83:a5:e2:da:46:37:e4:97:30:1e:be:16:67:66:7f:4b:d2:
22:d9:6d:82:eb:00:c7:59:c1:68:65:d2:ba:ee:8a:ab:c2:48:
de:e6:43:71:86:a9:9e:42:f4:ab:31:a1:db:ec:a4:b0:67:ef:
d9:4f:78:56:a9:ac:d2:28:34:e3:5d:ab:19:e5:90:af:d2:f6:
74:f0:e6:9b:9c:c0:d9:88:48:a3:a0:43:5b:52:47:33:5f:0f:
77:7e:a6:3a:a7:f3:e7:e8:51:d1:f7:42:f8:36:dc:15:58:7f:
7a:a7:01:d0:72:4a:92:6e:5a:85:07:03:79:3d:4d:99:a2:f1:
15:92:0c:9c:ba:96:96:12:7c:b7:11:1a:37:dc:79:d5:14:54:
8c:86:d2:f6:9a:6b:7e:c6:3f:08:fd:7f:56:d9:74:65:15:4c:
18:82:f0:ef:1a:f7:fe:dd:5b:ae:cf:e8:f0:ba:10:22:9c:4e:
fa:d8:67:9a:79:e1:8e:2e:4b:9f:0e:6d:4b:45:98:10:0b:37:
a3:5d:0d:15:a2:2f:bb:4b:1e:b9:67:62:78:90:93:ae:72:1b:
63:be:ea:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:15:21 2025 by rpki-client