Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132352e302f32342d3234203d3e20313336373837.roa
File: 3138352e38312e3132352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: u1r3Fc4i7QJZqeFtW27evhWfMzhQr69hs96bHuXceTY=
Subject key identifier: 77:17:E0:64:6B:F8:F8:1A:4F:64:DD:84:F2:C4:B6:DB:37:B1:5E:6B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 55CF1539D79BE17FFAE5349B9238CF67A9D369AF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132352e302f32342d3234203d3e20313336373837.roa
Signing time: Tue 15 Oct 2024 08:07:48 +0000
ROA not before: Tue 15 Oct 2024 08:02:48 +0000
ROA not after: Tue 14 Oct 2025 08:07:48 +0000
asID: 136787
IP address blocks: 185.81.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:cf:15:39:d7:9b:e1:7f:fa:e5:34:9b:92:38:cf:67:a9:d3:69:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 15 08:02:48 2024 GMT
Not After : Oct 14 08:07:48 2025 GMT
Subject: CN=7717E0646BF8F81A4F64DD84F2C4B6DB37B15E6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b9:13:5f:25:29:ce:a8:95:02:47:0a:1e:d6:
fd:f4:60:ea:02:7a:47:45:78:df:79:2e:1d:d3:8e:
51:90:54:10:a6:3c:d1:80:63:39:17:12:1d:83:53:
0f:3f:08:74:fe:fa:68:8d:c1:42:b0:27:56:38:aa:
3b:fd:96:6d:fd:e2:b8:87:2e:ea:9e:8e:b6:84:f6:
e7:fd:bb:4b:3c:2d:4e:3a:54:f5:47:2a:f5:2d:36:
b0:3c:7f:f3:a5:9e:82:cd:b1:2a:3d:ae:79:fd:2a:
4e:5c:22:1b:2c:59:45:b2:4e:6d:eb:23:bf:5e:cd:
21:eb:45:97:d0:5b:1e:0d:f1:49:53:f2:ac:d7:83:
40:3d:fc:41:52:1e:94:a5:6c:2e:9c:72:4d:09:a2:
57:67:ef:5d:a8:76:cc:fb:a5:93:68:a4:e6:57:54:
f2:a9:26:eb:a4:8e:fb:74:4e:55:8a:6f:4c:9c:16:
0e:cf:7c:a8:89:64:64:61:73:bd:b2:e7:73:2c:ab:
9e:5e:64:c3:b8:ec:0a:e8:35:7c:88:7e:3c:1d:5e:
e9:d4:3c:38:5a:ae:b2:0e:f9:ba:ae:e7:2a:ac:a4:
f3:5e:ab:bf:a9:d6:a4:89:82:4e:cb:5c:0a:c1:8a:
56:d5:b1:0a:8b:81:f9:f4:89:91:98:61:a9:3b:b4:
1f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:17:E0:64:6B:F8:F8:1A:4F:64:DD:84:F2:C4:B6:DB:37:B1:5E:6B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.125.0/24
Signature Algorithm: sha256WithRSAEncryption
54:8f:5b:b2:3a:bf:84:6d:4c:9a:52:e1:b0:c0:ab:88:06:94:
fd:12:55:7c:38:64:e2:76:5b:b9:18:37:20:61:aa:03:bb:34:
ca:4e:de:4e:8a:22:e8:8e:4c:83:49:6d:67:4a:aa:a9:9a:08:
6b:65:0b:df:e6:c2:e7:3e:bb:25:48:d2:d8:9b:74:62:86:0d:
c3:30:b2:a1:70:88:47:e2:92:02:c1:d5:0a:a4:6a:b1:e1:33:
b7:0e:97:4c:96:b1:89:ad:1e:69:d1:68:2b:dc:82:b8:c0:07:
06:e7:29:49:f5:06:20:eb:6c:d6:e2:ee:95:38:40:cf:03:a3:
20:89:9b:49:9b:04:52:86:e8:95:6e:79:51:52:16:c0:9f:a7:
a3:2a:c9:ba:fc:06:44:81:3f:44:5d:f5:48:46:38:5e:73:8f:
8b:3e:7c:30:2e:8b:64:50:42:cc:39:41:39:ca:c9:e0:52:36:
0c:8a:a9:8f:6d:a6:79:a3:3e:db:f8:43:87:5e:15:af:38:73:
25:6c:6f:12:9b:fa:d0:ae:e7:3c:8c:08:75:49:d6:c0:96:c2:
a6:35:80:f9:6e:5b:e0:33:97:c4:58:6f:cb:31:8d:10:1f:21:
f7:8a:ed:09:23:c8:83:b1:7e:4e:ad:9c:e3:49:93:7e:72:54:
9f:a7:61:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:03 2024 by rpki-client on console-fra.rpki-client.org