Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132362e302f32342d3234203d3e2030.roa
File: 3138352e38312e3132362e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: zl/ME7IoLM7JxP+DS0r591HRgbHwGWazi+jUwGSYg1Y=
Subject key identifier: 42:40:CF:7B:4F:AC:51:3D:23:C4:7B:58:3A:0D:0E:DC:6B:EE:53:1D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 708F231F7C830DD059B47F7D459EA561357C6F7E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132362e302f32342d3234203d3e2030.roa
Signing time: Sun 20 Oct 2024 14:10:53 +0000
ROA not before: Sun 20 Oct 2024 14:05:53 +0000
ROA not after: Sun 19 Oct 2025 14:10:53 +0000
asID: 0
IP address blocks: 185.81.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:8f:23:1f:7c:83:0d:d0:59:b4:7f:7d:45:9e:a5:61:35:7c:6f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 14:05:53 2024 GMT
Not After : Oct 19 14:10:53 2025 GMT
Subject: CN=4240CF7B4FAC513D23C47B583A0D0EDC6BEE531D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6d:c8:cd:23:ae:f5:1b:a1:2b:5c:21:6e:82:
80:3a:85:7a:4a:04:45:98:a1:1b:0b:5e:17:ea:a0:
d0:ee:b4:71:45:a8:aa:4e:d7:26:a6:0f:b3:bd:40:
a5:63:12:ed:f2:9c:7d:82:9f:77:64:73:e9:32:b6:
b0:72:98:09:a6:bf:dc:b1:47:c3:af:47:c6:22:28:
87:f1:e0:8f:2e:13:ea:e7:e4:5e:e2:a7:59:b5:0d:
68:c7:79:ab:f5:fe:8a:ef:02:bf:c1:0f:9f:bf:31:
be:22:57:e1:a5:c6:23:af:60:a7:bb:af:81:f4:c6:
63:4b:6c:a9:73:79:f7:54:2b:c6:93:04:0f:4c:8c:
de:2b:57:a5:26:13:6f:76:4a:96:0c:dd:5f:6f:f2:
75:67:e9:20:a1:67:a9:78:7b:6f:03:2f:e1:87:24:
55:9b:10:b0:bb:97:b4:2b:5a:19:2e:7e:6b:f0:09:
7e:60:19:be:e6:37:4d:d6:82:10:ce:96:ee:a6:2a:
6a:f9:66:ca:73:74:9c:8b:2c:98:f3:7a:17:f4:07:
89:1f:84:58:94:3e:3f:7e:6c:e5:94:b1:e9:19:2b:
0d:08:bd:70:e5:b3:b1:5a:d4:56:6c:83:87:f0:3a:
56:b9:0d:bc:a7:37:87:5c:53:e4:f2:5d:28:3f:9f:
2a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:40:CF:7B:4F:AC:51:3D:23:C4:7B:58:3A:0D:0E:DC:6B:EE:53:1D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132362e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.126.0/24
Signature Algorithm: sha256WithRSAEncryption
54:33:33:16:fc:cf:a1:72:f5:23:ba:c0:a1:02:29:20:3c:f3:
54:fe:f8:c2:5d:b5:0b:28:67:2f:b6:08:46:c9:7a:6f:d8:38:
d7:71:54:54:cd:de:5c:35:a9:95:24:23:0c:65:3f:e7:f0:d4:
5a:4f:d5:8a:26:03:6c:3c:b7:10:1b:2b:06:df:d4:cb:24:0d:
a1:98:06:82:ab:29:eb:9b:41:e3:73:60:ff:65:8e:39:64:92:
96:03:53:7f:9c:e0:af:6e:ac:77:98:2b:3a:8e:4e:ce:38:fd:
c8:13:fc:f4:17:06:b1:ca:b9:66:47:6c:83:16:8b:cb:af:09:
d4:9d:b4:48:ae:e9:e0:6f:f7:17:96:c8:3a:65:31:7a:b2:ec:
8a:ac:37:c1:eb:cb:fb:48:a5:a5:69:fa:41:38:b1:9a:6e:b3:
26:92:8c:69:26:28:c7:e7:95:73:3c:a9:8b:ec:73:09:60:c5:
d3:42:52:1f:08:bf:3a:f4:b1:b4:f2:44:46:69:c7:a0:b3:6a:
c8:3b:75:17:33:ae:ec:b0:4d:dc:fc:d6:a4:99:4c:4e:c1:6c:
11:e3:a4:2a:09:a3:40:81:6d:63:e5:15:3b:9d:cd:3b:71:5b:
d3:dd:6f:b0:d4:8a:c5:08:8c:e8:9d:6b:62:a0:b3:71:34:c6:
be:20:e7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:22:13 2024 by rpki-client on console-fra.rpki-client.org