Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232362e3134352e302f32342d3234203d3e20313336373837.roa
File: 3138352e3232362e3134352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: s8fXZtje/+yMSAPOqDr55+i0VM9ksZB5PtLGGHYdJwE=
Subject key identifier: 51:25:B7:B2:B2:4E:57:FC:D6:C0:1A:B4:B6:C4:C1:5D:BC:FD:C0:55
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 62A09C9E7E7EFDF8945C05F0A0FCE1435C79B413
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232362e3134352e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 27 Jan 2025 09:45:07 +0000
ROA not before: Mon 27 Jan 2025 09:40:07 +0000
ROA not after: Mon 26 Jan 2026 09:45:07 +0000
asID: 136787
IP address blocks: 185.226.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:a0:9c:9e:7e:7e:fd:f8:94:5c:05:f0:a0:fc:e1:43:5c:79:b4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:07 2025 GMT
Not After : Jan 26 09:45:07 2026 GMT
Subject: CN=5125B7B2B24E57FCD6C01AB4B6C4C15DBCFDC055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:e3:d6:80:b3:24:ed:52:b1:57:7e:a5:fd:
4e:7e:26:73:5f:17:e0:03:03:77:3d:f2:43:58:c7:
c9:4b:4b:6d:f5:3d:d0:c1:f3:a6:cc:5b:a5:f8:25:
4c:67:44:8f:44:e6:23:66:06:bf:18:38:80:32:33:
3b:40:c6:1f:e3:e1:94:a5:68:ce:fe:78:94:91:e3:
fe:ff:82:6a:6d:03:9f:2a:6a:65:11:76:0d:08:fd:
19:24:48:b8:c3:9b:27:4f:31:3c:9c:96:2e:56:2b:
50:6d:5b:bd:27:c7:e4:f0:19:35:1a:ca:ea:8e:e6:
ff:54:cb:4f:08:a3:15:fd:66:1b:9a:de:ad:2f:7c:
02:f5:f3:63:7e:ca:5f:e0:9e:87:cf:c1:e5:d1:c0:
67:57:4d:30:fc:e8:1b:8d:5f:79:48:14:20:60:df:
11:da:20:9a:1e:3a:62:dc:db:59:d1:83:2c:da:d5:
b5:1c:4e:08:03:97:e2:5c:4f:01:0b:0f:89:b7:8c:
ad:f0:9f:ae:d4:2d:00:2d:aa:67:d6:a4:7e:cc:a5:
c6:1a:06:66:35:f8:31:ec:db:e4:69:11:dd:e4:5f:
01:fe:dc:71:96:84:6a:15:4e:79:ac:3d:ab:3b:7b:
fb:66:05:d7:ac:4f:83:2c:a3:85:1c:e7:9c:82:98:
2e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:25:B7:B2:B2:4E:57:FC:D6:C0:1A:B4:B6:C4:C1:5D:BC:FD:C0:55
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232362e3134352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.145.0/24
Signature Algorithm: sha256WithRSAEncryption
78:4f:81:3e:86:65:01:57:7a:9a:76:75:f3:0d:2b:83:9e:9e:
c5:5b:f7:01:52:9b:07:91:e3:7c:51:db:61:20:06:d8:3a:4a:
f9:aa:45:94:e5:e6:85:84:e1:52:ad:c0:b7:e6:7a:dc:02:53:
dc:f4:99:e7:80:d2:58:dc:e8:b0:9a:f1:53:d0:e8:a3:66:e6:
5f:c1:02:20:e0:44:8b:4a:d9:20:3d:0b:b6:c4:ba:91:70:83:
95:26:e0:bc:b2:23:4d:a1:02:1a:4d:28:81:2e:d7:27:2b:ee:
cf:96:89:9a:fc:0a:50:c1:41:ae:ce:23:b3:97:11:a4:e9:53:
0e:f1:21:7e:ef:c7:99:09:fa:08:c9:ff:06:cb:20:30:78:30:
b9:64:eb:53:99:54:c3:f9:ef:18:ec:96:9b:2a:d2:51:eb:15:
20:01:9b:87:29:be:7b:ec:bc:1e:da:32:4d:5f:31:ad:0d:56:
f3:c7:42:7d:41:4c:92:4a:79:04:16:df:f4:96:d4:7c:e6:98:
c3:f9:de:49:47:8c:9c:1a:9b:dc:7d:e2:c6:28:cd:ab:c3:2e:
15:9c:7f:24:13:6c:44:54:6b:66:73:94:57:f6:59:04:8b:78:
2c:65:81:e8:dd:7e:72:a7:16:92:33:79:9c:b7:4a:8f:fc:6d:
c9:6d:38:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:28:36 2025 by rpki-client