Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3134382e302f32342d3234203d3e203239303134.roa
File: 3138352e3234312e3134382e302f32342d3234203d3e203239303134.roa (raw, json)
Hash identifier: bakzBXyj1ZM2ma1uJQn+imGr4NtlEveFyut5C7XnRHk=
Subject key identifier: 3F:5C:4D:BE:A9:4C:8A:03:59:F4:AF:58:0B:C9:62:D4:FD:F9:55:C4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7B447CC4DBD2CEA89A2B442839662CC3AC13B38E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3134382e302f32342d3234203d3e203239303134.roa
Signing time: Mon 24 Mar 2025 13:59:16 +0000
ROA not before: Mon 24 Mar 2025 13:54:16 +0000
ROA not after: Mon 23 Mar 2026 13:59:16 +0000
asID: 29014
IP address blocks: 185.241.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:44:7c:c4:db:d2:ce:a8:9a:2b:44:28:39:66:2c:c3:ac:13:b3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 24 13:54:16 2025 GMT
Not After : Mar 23 13:59:16 2026 GMT
Subject: CN=3F5C4DBEA94C8A0359F4AF580BC962D4FDF955C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:22:73:2f:54:1c:ba:4c:4a:89:2a:94:9d:ab:
e7:f8:08:1b:9b:ea:e9:79:32:60:00:1a:d8:77:f2:
92:26:d9:a0:66:7c:64:a0:98:85:73:ec:08:7f:ab:
1c:2a:62:30:3d:2c:36:d1:1b:9b:fd:bf:6e:64:f7:
dc:de:04:ea:1d:ae:dd:f4:94:98:25:c3:cc:0e:6f:
22:34:8c:6e:5e:e1:31:88:6f:4a:91:55:30:b9:86:
dd:09:22:66:27:b6:52:d0:f3:c9:ab:7f:f6:ac:75:
e4:4c:da:38:e6:fe:84:58:e8:8e:d3:17:d7:90:d4:
34:64:76:7f:09:bc:41:41:16:67:c2:e9:d8:e3:be:
9b:8b:2d:3f:de:07:81:42:f8:71:3c:cd:7c:b4:5f:
60:d8:8d:1b:bb:2f:f4:b1:76:31:31:fb:3c:b3:a1:
6c:63:c6:59:4e:31:fa:0c:d5:1d:ed:cd:d5:fc:52:
76:e4:1d:51:46:aa:e0:29:ac:2d:23:1d:99:64:b5:
d1:37:ae:8a:83:c9:c2:fb:42:01:d5:3b:0c:f0:16:
f6:b3:3e:2a:64:48:2d:f9:93:2c:f7:98:91:19:85:
1c:fd:2b:fe:87:8e:12:4b:73:2d:55:b5:14:16:fc:
c0:27:fd:c3:43:c6:20:b4:97:5f:24:7e:f1:d0:65:
ec:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5C:4D:BE:A9:4C:8A:03:59:F4:AF:58:0B:C9:62:D4:FD:F9:55:C4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3134382e302f32342d3234203d3e203239303134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.148.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e1:db:e1:67:05:03:da:e0:dd:87:56:c2:72:2a:3c:fa:00:
ed:e1:cb:c9:03:6c:fe:b1:d7:3c:b8:2f:75:f5:b2:a0:50:6e:
c4:f5:b7:f8:5c:aa:76:fc:d3:6c:d8:de:fa:af:83:e0:8b:e2:
55:cc:df:03:1f:c7:b5:e1:2f:29:b4:d8:79:f9:24:d1:9b:c4:
aa:82:8a:01:7a:91:9e:0b:49:44:b8:89:bd:b4:5a:f3:e6:36:
bc:bd:a4:2b:0e:81:01:db:58:55:3b:72:45:76:b8:07:d2:ff:
42:a1:b8:8d:7a:ec:7e:68:1b:ae:d5:47:3d:5e:d6:48:73:8f:
b1:04:37:b2:39:78:5b:3e:13:1f:1b:37:50:98:8d:27:6e:22:
f0:04:b1:91:21:ae:16:0c:cf:3a:cc:53:21:91:b8:ad:23:6e:
28:47:5c:74:27:8b:d7:95:a1:88:8b:af:52:1f:dd:b4:40:25:
94:a6:1f:b6:9e:61:f6:7c:5e:4f:3f:b2:e8:2e:0d:25:1c:4a:
8b:ed:f6:5c:00:74:79:98:b0:65:8e:c8:29:e9:09:10:5d:ba:
87:cf:42:4c:8d:32:b3:46:6f:62:7d:c6:f3:20:2e:82:75:7a:
13:3c:c7:c3:cd:97:5b:b4:25:3c:86:f8:9d:5a:3b:13:28:b9:
e9:8c:2e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:57:40 2025 by rpki-client