Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233342e37302e302f32332d3332203d3e203531313637.roa
File: 3138352e3233342e37302e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: 6KbRXX7PjYT7HZJYrbT+2SeNWuKeSWUcQ89EPoDLtg0=
Subject key identifier: BF:95:A8:26:BF:41:47:CA:CD:79:C2:F1:B9:0F:8C:A9:35:4C:D1:82
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 756F28E1EAF6309497A407AD173F49C60D363EFC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233342e37302e302f32332d3332203d3e203531313637.roa
Signing time: Thu 30 May 2024 20:38:52 +0000
ROA not before: Thu 30 May 2024 20:33:52 +0000
ROA not after: Thu 29 May 2025 20:38:52 +0000
asID: 51167
IP address blocks: 185.234.70.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:6f:28:e1:ea:f6:30:94:97:a4:07:ad:17:3f:49:c6:0d:36:3e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 30 20:33:52 2024 GMT
Not After : May 29 20:38:52 2025 GMT
Subject: CN=BF95A826BF4147CACD79C2F1B90F8CA9354CD182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:76:b2:10:70:d5:ab:21:e8:38:c8:69:9c:20:
ed:48:43:bc:a9:96:01:56:b0:11:0a:d3:68:1c:f5:
93:02:74:21:1a:24:f7:a5:02:68:73:87:da:06:2c:
8a:0f:68:51:a5:56:7a:d2:8f:ed:e9:b2:0f:23:f5:
36:aa:32:1f:96:1a:8f:de:57:43:eb:0d:3c:a3:79:
51:15:6e:4e:33:99:c0:81:69:e9:21:02:54:8a:91:
f2:5a:11:bf:3a:a2:0d:7b:c3:be:93:89:48:94:ea:
4e:99:2c:ae:ef:45:7e:8c:e2:f1:56:5b:67:e5:09:
31:6b:73:2f:d3:40:b9:2d:8c:d1:0b:f9:25:08:ff:
4b:0c:ef:88:1b:60:6c:df:28:6d:3f:08:c2:17:83:
67:27:d3:75:70:2c:cc:62:d5:53:27:7a:a5:77:46:
03:74:9b:31:fe:b9:4d:c9:b7:ad:29:18:eb:9d:59:
eb:aa:24:2e:d6:1e:ac:47:7a:41:08:64:84:cf:cd:
90:56:60:b0:60:76:6b:9f:d5:c3:26:4e:33:5e:71:
74:3b:39:06:b0:2e:58:45:a4:fe:ef:71:85:f2:3d:
6d:17:98:2f:fe:75:78:a4:ad:39:06:ac:b3:4a:9c:
0b:0f:fa:fa:33:ac:53:17:47:39:5d:89:ac:bc:50:
ab:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:95:A8:26:BF:41:47:CA:CD:79:C2:F1:B9:0F:8C:A9:35:4C:D1:82
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233342e37302e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.70.0/23
Signature Algorithm: sha256WithRSAEncryption
37:2d:28:34:28:42:14:62:02:42:ac:32:38:40:a8:92:04:13:
1b:4b:ad:6d:14:1b:bc:b5:45:8e:1d:bf:5d:6f:8a:04:af:4d:
01:ea:00:f6:0c:ef:d7:15:04:96:4e:ad:6b:8c:da:d3:19:13:
b2:cd:7f:fc:67:8f:c1:d5:73:fe:de:ad:4e:23:e4:f1:01:69:
59:1d:73:2f:e1:7c:47:cc:8b:67:5a:76:be:f4:a5:c6:93:19:
11:7d:78:58:3b:41:70:fa:b5:3a:13:7d:5e:de:b4:99:3b:b6:
1f:0a:1f:4b:6c:51:8b:09:21:10:d4:16:8b:fb:2c:27:ed:ed:
fd:07:c2:e7:51:93:c6:b4:7c:58:ab:71:fd:0e:b3:6d:76:c4:
ed:a0:e5:97:68:9e:9c:5e:05:bd:be:15:88:5b:9c:1e:0b:0e:
96:42:ea:ec:42:3b:b6:ac:77:4e:35:d0:75:10:15:d1:e6:a4:
7e:05:20:c8:52:db:c1:f3:87:f8:1b:9a:e9:07:36:3d:22:ea:
f6:28:cc:d8:7a:a8:16:71:a4:67:ba:72:13:a7:7b:5c:6d:a6:
21:af:0f:cd:81:ff:33:18:98:ca:6b:ba:48:b5:76:97:df:09:
91:8a:0b:46:c0:ad:56:3a:37:2b:b6:4e:5d:fa:2b:d9:70:a9:
f2:5a:0e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:41 2025 by rpki-client