Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e3231382e3230302e302f32342d3234203d3e203539323533.roa
File: 38382e3231382e3230302e302f32342d3234203d3e203539323533.roa (raw, json)
Hash identifier: BbguvFIbsNGU7h6b4DcD7uGxFS0yCmO6v0Di/Skmm5k=
Subject key identifier: 36:7B:C7:11:D8:1A:48:B2:81:DB:16:D0:CD:B5:58:10:F4:7B:7B:94
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 54760E84EE8002DECF15726C843A64DFD4D4BF56
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e3231382e3230302e302f32342d3234203d3e203539323533.roa
Signing time: Wed 25 Sep 2024 21:05:05 +0000
ROA not before: Wed 25 Sep 2024 21:00:05 +0000
ROA not after: Wed 24 Sep 2025 21:05:05 +0000
asID: 59253
IP address blocks: 88.218.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:76:0e:84:ee:80:02:de:cf:15:72:6c:84:3a:64:df:d4:d4:bf:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 25 21:00:05 2024 GMT
Not After : Sep 24 21:05:05 2025 GMT
Subject: CN=367BC711D81A48B281DB16D0CDB55810F47B7B94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:d4:b4:22:12:94:3a:44:48:39:c2:06:a7:
a8:c1:5f:2b:21:5d:43:3f:13:f3:25:c4:50:5c:5e:
f7:c3:30:96:2c:88:1e:b5:47:e4:c7:4f:5b:a5:34:
bb:74:eb:23:d2:b0:d2:24:d6:37:cf:ee:89:1c:f2:
f0:5b:05:14:e2:b0:df:b4:f3:5b:af:ab:f9:cf:ec:
d3:57:4a:71:cb:ea:ec:2b:61:93:f9:35:8e:b2:ba:
ca:50:eb:56:f6:61:ca:f9:37:23:eb:2e:74:5d:b0:
ca:eb:d9:61:81:3d:83:2b:0b:e0:12:09:5c:ad:4f:
9a:37:9c:c6:90:97:ab:9a:38:97:d1:64:35:ce:f2:
9b:0b:60:5e:8b:89:04:04:c7:e3:08:66:30:d2:27:
f4:2b:2d:a4:af:5e:70:e8:68:21:79:e5:a4:17:10:
c4:6b:63:da:9e:85:8d:40:5c:d3:11:ae:3a:6e:6c:
56:3b:7c:b5:22:78:62:87:d8:5b:d4:29:64:6d:91:
1f:67:73:8b:bc:14:c5:c5:c7:81:33:2a:f5:15:62:
79:b7:b8:71:a3:84:5d:95:1c:d0:fa:4b:76:a0:c6:
4b:c7:64:5f:90:47:f8:2e:63:57:28:e1:45:32:db:
51:76:48:28:93:9b:e8:a8:80:ce:34:43:9f:ba:d5:
1f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7B:C7:11:D8:1A:48:B2:81:DB:16:D0:CD:B5:58:10:F4:7B:7B:94
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e3231382e3230302e302f32342d3234203d3e203539323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.200.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:55:5a:73:67:c0:99:29:a1:6a:ee:bf:cd:f2:58:bd:ab:cf:
5f:c4:2c:d1:a3:65:82:74:6d:9d:1f:b3:3c:57:56:9c:e8:d9:
65:9e:e2:b6:c0:63:56:80:d3:5b:08:16:95:b3:06:36:42:f3:
1f:a9:dc:b6:40:3c:18:34:78:fc:70:5e:6d:52:20:94:2e:be:
82:51:19:c9:35:d2:74:3c:16:49:db:bd:cd:3b:87:fd:45:d8:
5e:e9:ea:3e:11:90:4b:b0:ab:91:4c:4b:df:87:2c:08:c9:72:
0d:1b:45:9b:2c:68:b1:8d:cf:c1:88:d0:11:96:d4:da:b4:45:
2a:b7:99:fe:18:78:33:44:ee:9c:3a:26:14:dd:56:6c:c2:25:
93:89:a7:83:9a:91:6d:73:67:2d:0c:16:64:69:5d:41:3d:8b:
86:3b:dd:00:f1:f1:79:49:9c:39:20:a5:51:22:6c:60:7c:87:
0d:f6:73:32:1a:58:09:60:1f:99:11:25:13:04:6c:7f:ae:84:
48:25:d6:b4:e0:1f:8c:79:2f:69:ef:e0:c9:ed:1b:9a:d0:ad:
57:85:20:e6:27:30:32:d6:12:5a:0b:a4:64:ea:c6:75:4c:23:
5f:ad:e5:21:6b:92:c8:74:73:c1:c2:12:89:ee:50:09:ca:18:
08:6a:95:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:51 2025 by rpki-client