Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e35382e302f32342d3234203d3e203439343533.roa
File: 3138352e3232392e35382e302f32342d3234203d3e203439343533.roa (raw, json)
Hash identifier: zUKMCzLsTKWlSeUojoTqgfW26XeZBg2mdR1kpZsDszo=
Subject key identifier: CE:AE:23:3C:88:64:DE:17:A5:DF:E5:B5:86:C2:2E:FD:21:B0:7D:73
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: D95537B2884E56FBD2EB9375D453974A5C66E4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e35382e302f32342d3234203d3e203439343533.roa
Signing time: Mon 27 Jan 2025 09:44:57 +0000
ROA not before: Mon 27 Jan 2025 09:39:57 +0000
ROA not after: Mon 26 Jan 2026 09:44:57 +0000
asID: 49453
IP address blocks: 185.229.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d9:55:37:b2:88:4e:56:fb:d2:eb:93:75:d4:53:97:4a:5c:66:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:39:57 2025 GMT
Not After : Jan 26 09:44:57 2026 GMT
Subject: CN=CEAE233C8864DE17A5DFE5B586C22EFD21B07D73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2b:2c:98:0c:90:75:d4:d0:0c:2f:2c:5b:8c:
3c:a5:36:0a:bb:59:bb:3e:20:40:86:6d:a7:a6:00:
82:33:70:b7:b9:3b:df:e7:6e:8c:f2:50:53:00:94:
fe:03:28:a7:2e:9d:ff:c7:99:b2:61:ed:0f:40:7f:
9d:59:63:67:90:6f:77:c1:6b:f8:52:0f:72:6f:aa:
5d:50:94:fb:b8:a2:1e:0b:19:90:c2:63:83:1e:03:
db:af:05:65:4c:b2:3a:54:a3:14:e9:59:c5:ad:cf:
fa:1f:71:8b:b2:60:62:34:26:e4:50:aa:d7:e9:bc:
c1:86:73:b4:0a:be:7f:70:b6:11:f9:5d:42:c5:63:
b0:d0:2f:5f:d5:91:c8:0e:3e:ab:58:1e:fc:ce:74:
fd:95:91:d1:5b:45:f1:61:43:24:46:35:3b:29:0e:
28:1a:9b:e9:15:be:c2:bb:d3:77:76:0f:f2:40:64:
43:a0:3a:84:1c:0d:54:7c:30:10:85:0f:36:cf:64:
73:1e:df:54:1d:c5:02:fc:9c:ac:c4:d0:64:97:63:
bf:5d:38:20:89:d7:7b:23:ac:9c:21:62:9b:1d:88:
38:9e:e3:a0:68:a2:30:48:d6:b2:64:c9:0b:a5:ed:
81:c0:be:d1:75:8b:57:a7:82:8a:cb:ab:6c:29:64:
fd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AE:23:3C:88:64:DE:17:A5:DF:E5:B5:86:C2:2E:FD:21:B0:7D:73
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e35382e302f32342d3234203d3e203439343533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.58.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:df:7b:0e:4f:a3:a3:70:89:fa:36:04:89:e4:25:2f:25:83:
dd:0b:c7:c8:6e:9e:18:2d:01:cb:55:07:64:d9:56:83:61:6b:
0c:9d:14:aa:a0:07:bf:22:30:94:3a:b6:a9:4b:f8:b4:9f:3f:
cb:22:f1:a8:fd:3d:c6:36:bd:7f:49:6f:92:ba:0c:29:c2:d3:
c1:95:64:c9:04:d6:fd:63:8e:87:02:3f:9c:b8:ce:8b:2f:c6:
6a:77:87:6d:e2:0f:24:7b:e4:ae:e5:db:04:2a:b1:5b:1d:19:
22:67:0c:32:0e:ff:4f:28:0b:7b:62:08:3e:6c:97:b0:2f:22:
fc:86:ba:02:f9:87:b9:fe:bb:52:9e:49:7c:3f:a2:df:02:56:
ce:9f:83:17:c4:96:99:8f:1c:ae:8e:43:29:9c:43:4c:14:61:
71:af:c5:d2:0a:15:32:f4:ad:63:b7:12:89:60:65:e2:00:c7:
75:2f:3b:9b:7b:2b:f6:3c:9a:46:bb:1d:e5:d8:22:93:39:48:
bb:0f:46:fc:78:e2:98:70:41:7a:45:8e:8b:21:92:c4:7d:32:
82:53:5b:0b:51:aa:09:f3:b9:43:6a:eb:be:cb:17:76:26:28:
92:d7:52:25:c4:f3:44:2e:1b:41:83:07:50:20:00:3b:f3:23:
82:95:29:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:12:32 2025 by rpki-client