Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233392e3230382e302f32332d3332203d3e203531313637.roa
File: 3138352e3233392e3230382e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: 8719grQQTYihB9HidvXYpoEB7JKs1Vv/7gQWpqwiBBo=
Subject key identifier: EF:F3:F0:28:83:26:DD:3B:9D:40:C6:0E:C1:0D:2C:6F:92:BC:2F:87
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5D0AF7F7580EE71231D2A667BB5A70CFFDBDAF13
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233392e3230382e302f32332d3332203d3e203531313637.roa
Signing time: Fri 20 Sep 2024 14:04:50 +0000
ROA not before: Fri 20 Sep 2024 13:59:50 +0000
ROA not after: Fri 19 Sep 2025 14:04:50 +0000
asID: 51167
IP address blocks: 185.239.208.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:0a:f7:f7:58:0e:e7:12:31:d2:a6:67:bb:5a:70:cf:fd:bd:af:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:50 2024 GMT
Not After : Sep 19 14:04:50 2025 GMT
Subject: CN=EFF3F0288326DD3B9D40C60EC10D2C6F92BC2F87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:73:7e:4c:6e:33:fe:0f:7e:45:98:30:19:92:
d4:1a:bf:e4:31:5b:3e:cc:b3:f9:88:f6:eb:78:7a:
e8:e8:19:0e:bc:3f:c7:4d:ce:26:0a:d3:16:12:5c:
b0:89:06:36:ef:f9:70:83:a5:53:4b:83:3e:47:59:
a2:93:48:29:f3:5d:18:7e:c8:de:7a:65:81:fe:13:
a7:02:fe:de:26:5f:c7:aa:cd:9c:f5:2b:07:68:22:
6f:ba:a6:53:c6:22:77:fa:a6:7e:ba:7e:da:da:0d:
11:5c:5f:fa:35:6b:9e:ac:94:6d:87:31:ef:8a:56:
ff:89:f0:68:25:12:3c:31:39:d0:95:9e:e8:08:fe:
01:2a:f4:8c:bc:ca:7b:9e:25:40:4b:9b:9c:0b:a4:
e7:38:79:70:19:7e:e2:60:30:f5:f5:69:fb:85:c4:
0a:1c:01:58:20:34:42:09:c5:60:ff:04:18:10:df:
94:0c:fe:33:c6:5a:bc:e9:bf:4e:48:d4:46:c2:14:
10:3a:b4:e2:38:9f:5e:59:e2:0a:d5:6f:fa:37:e2:
23:7e:d2:70:98:60:c4:75:cb:48:9d:1f:da:6a:97:
f8:77:a0:91:df:9b:08:31:87:1c:ae:53:be:67:f7:
a1:5f:02:db:85:1f:0f:fa:73:cf:fc:22:b5:88:79:
95:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F3:F0:28:83:26:DD:3B:9D:40:C6:0E:C1:0D:2C:6F:92:BC:2F:87
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233392e3230382e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.208.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:7c:e0:47:a0:78:9a:93:d1:cb:da:07:dd:f7:f1:fe:2e:50:
79:37:ae:2c:c9:de:79:d3:76:bf:b1:98:e2:b5:8e:c4:6c:8e:
93:3e:2b:db:27:8c:9c:d8:3d:46:a2:fc:fc:f5:fc:79:1c:28:
b9:e6:97:98:eb:84:82:35:24:b6:ef:59:17:d4:93:80:5a:0e:
dc:3e:82:cd:a0:c4:3d:85:f4:22:48:47:f2:b7:32:05:81:5d:
91:c9:a9:79:50:27:65:48:8f:45:0e:69:ad:cb:ef:7d:2a:3b:
fe:b0:ce:72:51:ba:fe:ae:6a:f1:b4:63:28:d9:89:dc:5e:e8:
86:c7:f6:a2:05:c9:f1:b3:3b:16:88:a3:74:55:4e:a5:1b:e4:
02:e9:6a:b4:e6:e3:61:c2:9f:59:a6:3a:e5:f0:c1:55:1c:59:
06:95:d9:32:8d:ad:24:db:2b:f3:55:36:92:ac:b0:67:41:3f:
14:68:a7:7b:79:a5:4e:65:fc:b3:97:ad:0e:ce:0d:45:48:f8:
d2:42:b6:3c:e6:dc:89:a0:c8:ec:f4:69:11:16:f4:f6:64:c9:
d8:fb:58:c4:52:4e:34:c2:0e:a5:05:f2:ab:de:1d:ed:f0:e7:
9b:d7:4e:7b:a2:9b:7e:4e:02:b9:d4:b9:e8:f5:7f:e9:b2:af:
95:44:88:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:44 2025 by rpki-client