Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3135302e302f32342d3234203d3e203631333137.roa
File: 3138352e3234312e3135302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: tMSHHVCwX+WnLNZyHN9kfUt5qtqgkUbgf0Et5cfy/s0=
Subject key identifier: 68:AE:96:63:9F:CA:0F:2A:8E:79:F4:38:EA:FA:BA:F7:DB:18:BC:D6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 45A5B59A65A7B7AA3C7670C4FEC819F66B415062
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3135302e302f32342d3234203d3e203631333137.roa
Signing time: Fri 20 Sep 2024 14:04:49 +0000
ROA not before: Fri 20 Sep 2024 13:59:49 +0000
ROA not after: Fri 19 Sep 2025 14:04:49 +0000
asID: 61317
IP address blocks: 185.241.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 05:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:a5:b5:9a:65:a7:b7:aa:3c:76:70:c4:fe:c8:19:f6:6b:41:50:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:49 2024 GMT
Not After : Sep 19 14:04:49 2025 GMT
Subject: CN=68AE96639FCA0F2A8E79F438EAFABAF7DB18BCD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ab:96:f5:ee:fa:66:9c:09:0f:f8:d7:91:35:
e7:27:39:fa:45:b0:c7:df:1f:15:2c:32:8a:0f:f6:
c7:4a:dd:e3:57:e0:32:14:98:75:31:4e:e0:99:b6:
88:32:4a:75:23:4c:93:91:10:66:4f:4c:f8:c5:83:
35:16:4a:c9:78:b9:0c:12:e4:73:6b:8f:29:22:e4:
1d:a2:ea:7e:2c:97:ec:bb:83:98:c9:a4:72:93:98:
3c:7e:45:c9:5a:20:eb:0b:2b:3c:3b:a1:99:a6:fb:
b3:b6:0e:4b:ec:9a:62:02:5a:e2:e8:11:77:d4:32:
f5:59:be:b0:1e:fc:03:ff:af:98:db:86:ed:c7:c3:
0a:ae:90:a7:35:be:ff:60:21:9e:96:04:7e:16:08:
92:89:70:d3:9f:40:4f:e4:a8:26:63:12:d1:02:19:
5d:76:ce:bb:56:37:23:c5:76:d6:70:76:20:1a:98:
a9:77:84:cc:e4:51:f2:07:5c:88:be:7c:bd:79:35:
7d:0b:46:d1:bb:8b:7f:0a:86:57:f6:5f:a6:34:23:
55:f6:ae:e8:39:aa:0c:60:ea:82:35:13:0f:49:61:
37:c4:19:2b:d8:32:ad:86:94:b7:6d:1c:5e:0e:48:
0a:f9:33:57:9c:58:48:71:22:1b:20:7a:3e:80:d1:
ce:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AE:96:63:9F:CA:0F:2A:8E:79:F4:38:EA:FA:BA:F7:DB:18:BC:D6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3135302e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.150.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:fc:bc:cb:f8:e8:15:35:7a:e7:28:57:d9:97:01:ca:bc:66:
24:89:6f:72:37:a6:25:90:ae:7d:5c:75:c9:39:79:d4:1d:f4:
28:98:e3:ee:f0:ea:ff:cd:81:4c:0e:c5:b5:a9:9d:3d:ed:cc:
53:0e:96:97:c9:00:50:a3:c5:51:b0:b2:47:57:e5:6f:5b:f8:
5a:7b:0f:62:cd:ac:76:ed:56:fa:76:aa:48:7a:1b:c9:23:e7:
8d:01:0c:60:0a:7c:5e:67:a0:63:08:60:7b:85:f8:9f:0d:90:
5d:bd:0f:4e:6c:f2:c7:46:41:85:e4:86:c1:1f:ce:9f:6e:f0:
4a:ee:e6:67:26:b7:bf:39:c3:53:85:ea:74:dc:51:46:73:ee:
45:73:5e:ae:4e:30:17:d8:1a:d5:52:a6:6a:2f:fb:ce:77:9a:
af:94:45:d5:66:e4:54:99:da:4d:b1:1b:df:f0:cd:3c:90:d6:
93:77:25:ea:c0:9f:f9:ed:3f:f4:95:94:d1:2a:69:5c:ea:cc:
bb:ad:05:62:59:bf:1b:72:44:66:0e:91:79:ac:e2:ee:24:1b:
4d:04:4f:b7:00:53:f6:79:d9:19:7d:39:04:15:89:79:b0:c6:
a6:d3:21:be:d0:3c:85:e4:9a:cb:7e:97:c7:6c:c6:04:00:5b:
80:95:91:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:58 2025 by rpki-client