Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e352e302f32342d3332203d3e203531313637.roa
File: 38362e34382e352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: CpX5yhuyOq1eEzZqUrXa/H8+jNroeeP0CqF6In4Kj6w=
Subject key identifier: E7:3C:97:A4:42:9D:D9:9A:A7:26:27:44:E3:71:CC:98:CC:2F:88:30
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 57E2FED7A7B0084B35EE88B0990824EDED9DA260
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e352e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Jan 2025 09:45:06 +0000
ROA not before: Mon 27 Jan 2025 09:40:06 +0000
ROA not after: Mon 26 Jan 2026 09:45:06 +0000
asID: 51167
IP address blocks: 86.48.5.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:e2:fe:d7:a7:b0:08:4b:35:ee:88:b0:99:08:24:ed:ed:9d:a2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:06 2025 GMT
Not After : Jan 26 09:45:06 2026 GMT
Subject: CN=E73C97A4429DD99AA7262744E371CC98CC2F8830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:11:fa:88:7d:f9:46:7e:35:f0:9d:c9:aa:
82:33:26:8a:2b:ae:14:ff:05:35:d8:d2:ef:bb:7b:
d0:cb:24:64:75:69:bf:02:0b:d6:4f:e2:90:f7:a3:
d9:8f:6a:ed:9a:af:3a:50:aa:bb:c1:0e:4a:8d:ed:
c3:59:01:e2:be:2d:e8:cf:fc:e5:2d:c6:0f:5c:1a:
4b:58:5f:f8:f8:e9:92:82:f3:42:f9:0b:79:28:86:
c3:2d:51:c0:a1:37:78:97:fb:cd:d0:68:27:1e:2f:
a3:11:61:a2:c0:29:a4:3f:f5:0e:cb:b1:79:55:94:
b3:b3:6b:88:8c:23:c2:88:85:40:99:ef:79:0e:87:
dc:53:d2:18:7a:c1:aa:77:ce:65:fb:50:2c:3e:e5:
40:f8:d0:72:4d:7d:d1:1b:4c:2c:c7:90:03:ec:36:
0f:ee:61:29:5f:66:ec:01:26:f7:26:8a:e6:4d:bf:
ec:57:9f:94:30:43:cd:75:35:cf:de:2e:39:ec:ca:
90:a7:a5:02:90:3f:eb:42:f2:3e:da:e6:ff:51:86:
45:a9:a2:63:de:62:59:18:29:09:78:47:16:55:4e:
4a:ed:49:ae:da:8b:1d:1e:72:18:a9:57:49:81:ee:
38:00:91:16:f5:18:70:d6:be:4b:b5:44:7d:40:dc:
b3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3C:97:A4:42:9D:D9:9A:A7:26:27:44:E3:71:CC:98:CC:2F:88:30
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e352e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.48.5.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e5:0d:a3:01:fb:fa:b2:69:73:f5:69:b4:05:5a:1e:2c:38:
fc:b2:82:47:d9:10:e0:97:7e:1e:f0:c1:8b:90:35:8b:02:0d:
c9:0f:21:83:ee:28:22:e9:a3:54:57:33:06:9c:56:92:13:af:
75:2b:e2:fc:75:55:a3:64:70:17:e1:c9:f7:c0:d6:6b:ae:72:
ba:7c:38:a8:a0:d4:07:be:d5:2f:6a:48:f6:65:7d:90:b6:dc:
7e:70:a2:47:73:9a:07:01:1a:1c:99:67:03:92:b9:f2:8a:5f:
7d:c3:3b:cf:7b:fe:7c:ce:26:bd:e4:65:11:53:51:96:00:24:
e0:e4:5c:b4:88:71:51:37:48:37:f9:83:c9:bf:3f:1e:00:c0:
36:4a:5c:9b:ee:24:67:ec:8f:08:0f:40:0d:56:7e:85:ef:32:
38:58:b0:2a:23:83:3e:6a:64:81:b7:98:90:a2:e5:84:20:fa:
f6:98:fe:c9:df:07:d9:00:30:72:1b:5b:39:60:d8:cf:18:09:
b9:76:88:85:44:a2:59:90:09:52:36:52:13:52:95:22:a1:97:
88:46:75:8c:13:3d:03:9b:e5:c2:15:73:3e:e4:4c:be:56:4c:
16:5a:51:88:08:31:c6:79:68:63:aa:00:a9:a7:12:2e:64:ec:
1a:3e:23:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:15:34 2025 by rpki-client