Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37382e302f32342d3234203d3e20313336373837.roa
File: 38322e3134392e37382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: JFkxAyuz9LfxUrLmUWh8EK2ocK7QgSBNSlgTxx/LP0o=
Subject key identifier: E5:7C:73:7B:E3:E8:FC:6C:24:3D:37:2B:5A:D7:27:C1:9C:DE:8D:0E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5B9B12EDA5281B9A82CA9281722836DC30669ADE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37382e302f32342d3234203d3e20313336373837.roa
Signing time: Tue 31 Dec 2024 19:44:42 +0000
ROA not before: Tue 31 Dec 2024 19:39:42 +0000
ROA not after: Tue 30 Dec 2025 19:44:42 +0000
asID: 136787
IP address blocks: 82.149.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:9b:12:ed:a5:28:1b:9a:82:ca:92:81:72:28:36:dc:30:66:9a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 31 19:39:42 2024 GMT
Not After : Dec 30 19:44:42 2025 GMT
Subject: CN=E57C737BE3E8FC6C243D372B5AD727C19CDE8D0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:34:d8:fa:e1:5b:2d:fc:10:91:7b:66:43:45:
c2:00:65:c1:a9:c5:60:50:82:ed:8b:b6:9e:fe:2f:
18:2c:b3:a4:0c:c1:aa:03:c2:f1:32:83:34:6a:2c:
c1:e9:25:70:01:ff:c9:19:a5:a0:10:5b:29:60:3d:
5d:79:61:0b:52:59:4f:5e:27:71:2a:a9:b4:30:a7:
2f:f4:9c:1a:39:54:17:b3:c5:d9:a7:d8:b5:4a:16:
43:b4:a4:b5:a7:4a:ae:98:db:1a:e2:ad:f7:9d:8e:
87:4e:83:af:7f:8d:ef:8e:5d:0f:a5:53:d8:6a:7d:
6e:24:2c:aa:7b:d0:45:46:64:ed:16:be:49:0a:0a:
1a:ee:92:49:e0:18:c7:fa:a3:1e:06:14:01:10:a9:
97:ea:7b:6c:dd:45:7c:a1:2a:ca:e2:2f:22:37:72:
fe:39:c0:69:96:55:25:bb:71:ef:2c:c3:83:15:89:
78:a3:3e:72:aa:53:29:cf:06:56:61:4a:99:b6:e0:
fe:0a:45:90:32:d1:07:7f:8c:44:9f:0e:81:15:7d:
03:b2:8e:26:ce:42:92:93:a1:ab:94:d1:69:2a:70:
0c:56:a9:15:8b:d5:d5:bf:2b:56:ae:f0:45:a0:4f:
ea:df:11:60:2f:ec:73:b3:5a:86:ac:11:9c:09:7f:
66:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7C:73:7B:E3:E8:FC:6C:24:3D:37:2B:5A:D7:27:C1:9C:DE:8D:0E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.149.78.0/24
Signature Algorithm: sha256WithRSAEncryption
39:c6:cd:3e:cf:d0:77:65:bb:5d:14:a6:a8:76:b3:c9:b5:fd:
e5:42:af:93:aa:40:0c:e7:ce:f9:5f:22:cb:ef:cf:bf:fe:2b:
56:78:9f:11:cc:be:7a:da:0b:c3:14:9e:9f:99:34:1d:0b:be:
69:7d:bf:7a:40:5e:89:05:7f:13:72:83:f6:99:7f:70:55:84:
a2:a0:30:54:8b:c5:30:8d:5b:14:23:0c:a2:bf:65:12:8f:92:
97:8b:18:f6:99:96:03:1a:aa:34:ad:7b:b5:e7:97:85:eb:13:
d1:e7:bb:c9:da:81:82:36:b6:c1:9d:4f:9f:3d:87:5c:e2:d2:
c3:d9:2e:1e:80:58:be:a7:46:69:ae:8f:e3:6c:e5:c4:86:70:
5a:f9:b8:86:f6:f5:a9:c4:3e:94:84:85:4c:a5:64:0d:e3:c8:
3a:c1:2b:e0:e1:d5:a7:b2:a2:6d:08:0d:39:ef:55:ac:50:19:
cf:ac:f1:f2:ed:9e:69:8b:85:a1:11:9a:3d:88:8b:60:9f:18:
10:d1:73:d5:81:32:8c:ab:ea:0a:69:e0:e3:0a:d1:4f:d4:55:
91:a1:dd:a8:46:b0:0b:a3:55:07:be:b1:21:4f:b9:a5:2c:62:
8e:7b:0c:7e:62:89:09:2d:1e:e2:06:d3:53:f8:45:d9:72:a4:
ea:a3:04:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:59 2025 by rpki-client