Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137352e35362e302f32342d3234203d3e203633343733.roa
File: 3138352e3137352e35362e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: fBVvH+/iE1VJ2q80lzyjy4Op/utBbOK/9F0wmtUmhFY=
Subject key identifier: 5C:DC:C0:34:5C:48:FD:A9:D3:22:B0:FA:A7:C2:2F:30:03:D3:C8:0F
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 3E3A44FF267D380CAEFC487F0EBC454B1984A481
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137352e35362e302f32342d3234203d3e203633343733.roa
Signing time: Mon 30 Dec 2024 15:41:20 +0000
ROA not before: Mon 30 Dec 2024 15:36:20 +0000
ROA not after: Mon 29 Dec 2025 15:41:20 +0000
asID: 63473
IP address blocks: 185.175.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:3a:44:ff:26:7d:38:0c:ae:fc:48:7f:0e:bc:45:4b:19:84:a4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:20 2024 GMT
Not After : Dec 29 15:41:20 2025 GMT
Subject: CN=5CDCC0345C48FDA9D322B0FAA7C22F3003D3C80F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b0:50:8f:ee:ac:c8:53:73:a8:6c:d8:be:1c:
38:29:76:92:82:1a:47:58:07:03:c9:d4:e3:3e:f7:
ac:03:db:95:a6:d5:91:14:49:4c:e6:5d:92:b3:3d:
0d:92:11:8b:ef:86:11:71:55:c6:dc:66:e6:6a:98:
12:e7:f8:6a:f0:e3:2a:66:cd:c0:fb:87:8d:54:15:
dc:7c:4e:e0:1c:70:e0:bb:db:2d:38:db:bb:13:51:
e3:91:77:60:5b:c9:f2:9a:99:6f:fb:3b:44:da:a8:
37:1d:1c:3d:cd:d0:4f:31:be:de:b4:3a:e1:08:85:
1f:fd:21:c1:0d:06:36:6f:48:0c:b5:7f:dd:5b:00:
f9:91:7a:59:c4:c7:a5:af:4f:a1:6b:6f:af:e7:8a:
f2:f0:c7:3f:01:a4:47:ea:30:86:a8:a0:98:81:82:
21:dd:b0:7e:0a:b4:40:e5:f5:bd:30:62:fd:d0:a6:
c2:76:ad:48:45:0a:ac:16:04:28:c0:ac:c6:93:3c:
75:89:49:e9:59:18:0c:55:b7:ac:0a:f8:b4:f8:83:
57:43:a5:36:78:1d:c9:91:1c:3a:18:8e:09:25:03:
90:2f:ba:60:05:cf:d0:58:2b:a0:6c:7a:ef:f1:6c:
cd:3b:b2:a5:85:07:46:5c:86:58:35:bb:0f:c3:ca:
15:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DC:C0:34:5C:48:FD:A9:D3:22:B0:FA:A7:C2:2F:30:03:D3:C8:0F
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137352e35362e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.56.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:da:49:ef:44:18:99:b9:ab:2b:a0:aa:2e:95:2d:54:e3:99:
28:4e:ea:a6:18:56:aa:41:99:19:3c:89:74:d1:74:9e:b0:fd:
41:a4:6f:85:3c:66:80:2d:00:3d:bd:17:f1:9e:94:f3:fa:00:
d5:1e:a7:85:98:74:b8:59:17:45:9f:e1:d3:08:67:f5:40:6f:
26:57:44:23:7a:02:26:57:17:68:fa:be:2e:8e:40:f0:6e:27:
83:34:31:f8:29:21:89:1c:83:bd:45:76:5b:79:cf:8b:38:4d:
f1:16:46:a3:fe:be:d1:df:15:99:dd:10:28:ad:1d:27:43:86:
c9:3d:1b:e2:46:c7:71:18:5c:d4:f3:a9:db:ab:3e:7a:7c:fc:
5e:cb:dd:4e:47:a8:09:f7:d6:7a:c0:92:68:f0:fe:dc:21:61:
06:eb:ec:79:82:76:c8:bc:1d:87:ba:bc:51:35:da:8d:4e:56:
33:a3:94:4b:9d:75:23:f3:ea:12:43:a5:0e:a7:ac:63:e6:67:
92:41:9f:04:d5:6e:62:ba:32:d3:c3:0e:ee:e0:69:bb:13:68:
01:29:70:68:3f:d5:db:21:34:87:16:6d:fd:29:39:cd:ed:06:
f4:08:7b:60:df:e8:03:81:53:6f:de:df:05:46:bd:68:8f:c0:
06:f1:46:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:59 2025 by rpki-client