Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138332e3138322e302f32342d3234203d3e203333313832.roa
File: 3138352e3138332e3138322e302f32342d3234203d3e203333313832.roa (raw, json)
Hash identifier: mDFmFlxNc3u4sTTiIoGGkrQtThFNtnr5MibD8tLUiyU=
Subject key identifier: 8A:CF:E4:7E:AB:E3:95:9A:3C:2D:AB:D1:A1:19:D0:7C:0C:03:99:F3
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 220D3D631D78B71B6A1FBD7DCC1184798B4F1F32
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138332e3138322e302f32342d3234203d3e203333313832.roa
Signing time: Mon 30 Dec 2024 15:41:22 +0000
ROA not before: Mon 30 Dec 2024 15:36:22 +0000
ROA not after: Mon 29 Dec 2025 15:41:22 +0000
asID: 33182
IP address blocks: 185.183.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 09:18:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:0d:3d:63:1d:78:b7:1b:6a:1f:bd:7d:cc:11:84:79:8b:4f:1f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:22 2024 GMT
Not After : Dec 29 15:41:22 2025 GMT
Subject: CN=8ACFE47EABE3959A3C2DABD1A119D07C0C0399F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:f6:62:90:43:89:41:e6:40:81:2e:02:97:
2d:36:fb:7d:d6:c3:01:0c:3f:1c:d5:6d:05:2c:f5:
f4:f4:87:bd:23:52:af:dd:49:cd:3b:47:61:d9:e0:
0f:68:8d:6a:62:81:a4:62:a4:c0:ad:6c:36:0e:46:
c3:06:e2:90:75:f5:6a:6d:26:65:dc:5e:cb:83:04:
2c:c0:c7:4b:5c:27:eb:15:17:2b:d4:7f:e4:bb:66:
a6:b0:d6:f9:20:8a:f2:6a:4b:54:13:30:27:39:ab:
59:c0:97:ae:96:d5:e9:c3:c6:f3:6b:23:70:f9:bd:
68:1f:10:3b:b3:52:f0:5b:66:b0:fa:55:8c:48:95:
f1:b3:ad:2c:33:60:70:cf:f6:4e:c9:74:cb:49:18:
55:e6:c5:7b:8e:d7:d6:88:1d:e2:90:d5:90:7f:d8:
76:08:f9:4a:ee:ad:73:52:37:7b:5a:a0:eb:d6:f0:
13:de:a9:79:b5:ad:8f:d0:cf:0b:6c:da:75:d0:a8:
d6:d9:a3:54:e4:98:f3:95:2e:d6:6e:98:4d:c7:6a:
5f:80:37:27:e1:d3:2d:97:8c:fd:cb:0b:a4:60:5e:
ec:bb:2b:0e:9e:9f:95:a1:0a:cf:c1:b0:10:07:0c:
12:0d:a6:8f:63:bd:48:74:20:28:7b:d6:4c:fc:1c:
98:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CF:E4:7E:AB:E3:95:9A:3C:2D:AB:D1:A1:19:D0:7C:0C:03:99:F3
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138332e3138322e302f32342d3234203d3e203333313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.182.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:df:8d:40:7f:47:8f:e4:65:2a:38:e3:50:14:9f:a3:65:6d:
2d:4e:5e:3c:c1:c9:ce:db:ff:5e:88:0f:83:da:40:0e:ec:e0:
38:a6:34:1d:06:47:cc:df:42:bd:c7:fb:0c:a0:46:40:ab:c4:
09:18:29:2a:58:98:f6:bd:81:6c:69:50:66:3b:f1:1a:07:9e:
27:88:e0:b6:67:23:2e:dd:ed:d2:89:81:d2:0e:a1:e4:2f:c9:
80:a5:32:14:dd:29:44:89:a1:56:c5:8a:bd:cd:e3:2e:fc:fd:
67:5e:4a:60:e7:eb:e2:8f:2b:1d:bf:19:fc:8b:88:7a:36:81:
36:39:37:3c:96:25:42:cb:90:74:18:c3:a1:a1:ec:63:89:74:
0f:36:81:a3:ac:df:c0:af:a0:e0:01:f0:39:e2:f5:2a:3b:43:
ea:b3:d1:34:8a:62:4d:c8:95:d5:46:a2:9c:25:c4:b7:3e:d9:
e1:25:34:d8:14:cb:03:36:f7:68:02:2d:54:56:e6:9e:24:6b:
bc:da:1f:79:4e:2b:43:45:fa:1a:ae:34:53:4b:4d:28:72:1a:
2b:aa:31:aa:2f:76:aa:1c:06:c0:f4:2b:40:78:d0:c5:a5:13:
17:4d:6d:8f:e8:85:7a:b8:db:89:bb:98:df:0f:9a:be:76:c8:
66:44:05:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:56:12 2025 by rpki-client