Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37362e302f32342d3234203d3e20313336373837.roa
File: 38322e3139372e37362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: LC9tGG3uAGnuQ/sBpULPqURjKVbVHY5UNAGkZOsAvsI=
Subject key identifier: B6:38:F2:5F:74:DB:BA:B0:EC:DB:ED:E3:7E:5B:C4:60:81:74:F2:CB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 33B7156DBE6254C017DFF7E5F4E2370BD4443E98
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 19:44:41 +0000
ROA not before: Fri 27 Dec 2024 19:39:41 +0000
ROA not after: Fri 26 Dec 2025 19:44:41 +0000
asID: 136787
IP address blocks: 82.197.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:b7:15:6d:be:62:54:c0:17:df:f7:e5:f4:e2:37:0b:d4:44:3e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 27 19:39:41 2024 GMT
Not After : Dec 26 19:44:41 2025 GMT
Subject: CN=B638F25F74DBBAB0ECDBEDE37E5BC4608174F2CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:34:2c:2d:25:2a:f5:0f:a1:4a:10:2b:5e:
b7:2c:25:9a:9c:96:53:3e:71:a1:23:80:e2:8d:9b:
c3:ad:11:dc:62:a6:99:1d:e3:33:5b:2f:be:ec:77:
1a:aa:d9:22:9b:1a:f7:81:cf:da:8b:45:b1:b5:ed:
e6:e5:68:7c:02:15:cd:8c:e5:f1:47:90:18:ad:f8:
ff:05:aa:9a:60:44:b2:c2:b2:84:0c:ba:f5:7f:73:
bc:03:34:02:c4:01:37:62:16:ab:28:e0:a8:6a:6d:
b6:c3:c0:43:b1:5c:67:0e:0b:e1:08:e6:3d:30:63:
cd:63:4e:07:62:bd:d6:28:f5:b7:6c:0a:3d:f0:14:
2f:d3:1d:f7:85:86:9f:ed:b3:9f:12:b5:e2:6d:d0:
7a:74:2d:c2:d7:91:cb:10:3b:73:c1:8e:12:95:4d:
76:a1:89:e0:bd:bb:4f:f1:86:b4:36:70:84:f0:ff:
39:7d:57:e0:22:7a:b1:08:7a:f1:54:5a:4f:0e:ff:
4c:96:f6:27:b8:5d:df:f4:ce:93:07:8e:d2:ae:6e:
a0:6d:b9:04:8d:ff:cb:18:a5:b1:36:8f:12:c9:27:
c8:e8:79:27:f3:3f:dd:4f:ec:93:09:e0:4d:88:af:
84:6b:27:37:f1:d1:69:8e:57:d7:cd:3d:81:0b:c1:
44:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:38:F2:5F:74:DB:BA:B0:EC:DB:ED:E3:7E:5B:C4:60:81:74:F2:CB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.76.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:7d:b9:b6:22:83:78:15:cb:a6:27:b1:be:b6:a0:69:0e:1a:
17:57:ed:e9:8f:93:c5:51:e8:2a:a7:9d:f0:b8:f6:8d:d1:0d:
93:16:11:b2:02:f1:00:80:b9:6f:a3:fd:84:e5:ca:87:5e:69:
68:1f:d2:18:9f:2f:d5:54:3a:5f:31:75:64:75:7f:4f:7a:ab:
aa:0b:d5:07:25:d6:f3:bb:2b:57:2c:99:14:8e:05:f5:dd:fd:
76:2a:be:9b:72:55:3d:4e:54:07:58:4d:a6:5b:03:cd:8c:f1:
b9:70:8d:ca:4b:45:d4:87:e7:1c:0b:8b:d7:d4:10:80:70:f1:
ed:84:81:c5:da:42:c2:54:e7:0c:5e:43:6b:89:5a:72:f6:5b:
88:6e:1e:79:80:45:ee:0f:67:80:74:96:c8:b6:f3:c8:6d:d9:
72:6a:94:b2:f2:4c:c1:33:61:f1:0c:7c:05:eb:74:7d:e1:6b:
43:e2:16:7b:d9:65:62:20:f3:24:db:d2:16:00:4a:aa:29:56:
ff:b2:5c:90:74:d8:71:a8:91:08:58:14:03:5b:15:d8:db:cd:
3d:5e:35:26:3a:d6:8a:4c:03:98:08:b0:bc:64:14:d3:60:e5:
84:4b:9b:7e:46:97:8f:e3:5b:a6:63:09:64:03:7e:fd:41:d8:
63:7a:3b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:33 2025 by rpki-client