Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138302e302f32342d3234203d3e203437353833.roa
File: 3138352e3234352e3138302e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: AmGqqw8yOzsay13QtNJEHjlC3ra68VghVO6rMNDoUdc=
Subject key identifier: 54:24:60:26:BA:35:F6:29:DF:29:23:C1:17:E2:35:63:D1:18:4E:38
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 573AC92CBB44056B3FC23407318396C1322F3457
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138302e302f32342d3234203d3e203437353833.roa
Signing time: Fri 20 Sep 2024 14:04:52 +0000
ROA not before: Fri 20 Sep 2024 13:59:52 +0000
ROA not after: Fri 19 Sep 2025 14:04:52 +0000
asID: 47583
IP address blocks: 185.245.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:3a:c9:2c:bb:44:05:6b:3f:c2:34:07:31:83:96:c1:32:2f:34:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:52 2024 GMT
Not After : Sep 19 14:04:52 2025 GMT
Subject: CN=54246026BA35F629DF2923C117E23563D1184E38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:de:55:bd:39:01:37:d1:c6:3e:68:81:ad:
92:5f:b4:d5:3c:11:53:19:54:3c:23:9e:56:93:ab:
24:77:28:ff:17:02:43:a4:d1:5e:12:56:8e:39:ad:
ff:63:27:63:21:d5:d9:5c:e1:bc:40:61:f1:ee:5b:
de:df:b0:81:a2:b8:2c:81:01:da:6c:64:17:22:93:
7e:a6:9d:a9:18:49:27:32:55:a4:53:84:70:42:cb:
53:fb:07:24:07:f5:fb:43:9f:7d:73:c2:02:6d:b1:
ee:89:03:3a:ae:20:57:2a:b2:cd:a8:1a:24:f6:e2:
96:e2:ed:94:1d:c2:44:6d:80:28:48:ef:5c:12:8e:
18:56:c2:6c:f7:57:f0:e1:8a:aa:82:04:04:8a:c5:
a9:5d:7b:60:c1:c8:72:39:29:e7:4c:46:7c:ee:74:
37:a1:d2:cb:a8:fb:95:c1:3b:f1:9a:e8:1f:ba:2f:
96:29:12:8e:53:70:c6:24:32:01:60:7e:ce:af:30:
1a:2b:a7:13:4d:b1:7c:e0:6e:b3:8b:e2:97:44:c3:
91:ee:0a:c0:b5:ba:a6:aa:33:1a:34:15:70:29:92:
1a:8a:ed:a1:a2:01:61:4b:93:93:d0:6d:f0:80:33:
70:b6:97:e7:64:d5:4d:2f:fe:72:62:1f:f9:27:59:
b3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:24:60:26:BA:35:F6:29:DF:29:23:C1:17:E2:35:63:D1:18:4E:38
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138302e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.180.0/24
Signature Algorithm: sha256WithRSAEncryption
46:b3:28:77:f7:c1:f5:06:2c:4f:60:d3:74:0c:95:4b:eb:3e:
a8:d7:94:f6:48:50:db:0a:64:fb:69:bb:5c:a6:e6:ce:fb:f9:
ca:a4:d2:c9:d4:f0:91:98:4a:c4:3e:b6:13:0b:01:de:eb:ee:
68:d0:79:b8:0f:d4:2e:7f:65:4f:51:9c:f5:45:ab:13:c0:5f:
0a:93:28:3d:58:12:dc:9a:8d:c5:9d:51:e4:76:7f:fc:2d:4f:
5d:7e:91:f1:6a:70:c4:fe:3a:21:ea:43:6d:8a:fa:27:79:f6:
f6:e6:d1:bf:e7:4a:94:3f:1e:4a:34:63:2a:97:9a:99:d3:8d:
b9:94:be:4c:94:af:1d:3b:7b:30:de:7b:69:b1:3d:d2:3c:c5:
bf:7f:0b:eb:68:bf:6d:3d:07:73:6c:28:f4:92:a5:3b:49:66:
3a:03:27:55:8d:b1:d2:3c:ce:4a:f1:29:3a:f4:20:23:5e:7f:
4e:6e:f9:e5:ea:82:67:78:5c:05:cb:70:f4:9d:53:11:bd:c4:
8f:16:1d:9a:04:e1:78:0c:f8:42:84:21:23:4b:b5:a0:d4:7c:
1c:79:7a:ac:69:6b:f1:4b:e0:e7:73:a2:75:d8:69:9c:2e:a4:
f5:d0:02:7f:25:60:8d:de:8d:2c:91:99:e0:dd:e2:f2:a5:b0:
95:4e:af:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:06:15 2024 by rpki-client on console-fra.rpki-client.org