Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139362e32312e302f32342d3332203d3e203531313637.roa
File: 3138352e3139362e32312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: 78pJOtQIQK8WlN+RpT/eTrGbvA8hu/SvM2I8uYeMEJk=
Subject key identifier: 94:AC:65:15:CB:8F:95:C3:EE:BA:E9:08:3D:64:C5:29:A2:4B:B6:40
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 22642D79FF9A73FBD5FDF7325A76189DAB47759E
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139362e32312e302f32342d3332203d3e203531313637.roa
Signing time: Mon 30 Dec 2024 15:41:16 +0000
ROA not before: Mon 30 Dec 2024 15:36:16 +0000
ROA not after: Mon 29 Dec 2025 15:41:16 +0000
asID: 51167
IP address blocks: 185.196.21.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 16:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:64:2d:79:ff:9a:73:fb:d5:fd:f7:32:5a:76:18:9d:ab:47:75:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:16 2024 GMT
Not After : Dec 29 15:41:16 2025 GMT
Subject: CN=94AC6515CB8F95C3EEBAE9083D64C529A24BB640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:60:7a:04:f5:4d:31:4d:94:a7:e1:81:8b:65:
83:11:5e:c6:be:55:b2:be:dd:c2:51:47:ca:8e:9f:
03:b5:11:1f:92:7f:13:40:97:1e:8c:6f:7d:02:fd:
64:62:75:bb:0f:db:d2:d3:71:49:1f:e0:64:7f:65:
36:21:13:78:ef:79:ca:d1:86:28:a1:4e:31:6c:8b:
bc:95:ac:7d:9e:cf:77:17:c1:c0:64:73:15:27:7e:
69:5f:f5:d9:56:f3:8a:f8:f9:59:14:c6:03:1e:e4:
e8:66:70:b9:79:4a:b2:6d:0c:88:43:b2:a2:bc:2e:
86:b0:bb:50:de:d0:b2:83:bf:94:4e:54:4e:65:39:
f5:73:bc:36:c5:77:e5:8c:9a:23:33:bc:c3:d0:50:
6f:43:2c:f1:7e:e8:ae:2b:f8:6f:ed:c4:df:79:e0:
57:19:02:31:d8:82:b9:d1:54:34:c2:76:0f:c1:a9:
3c:86:60:f9:99:0e:26:a2:39:ef:ea:da:7a:fc:e0:
34:cb:47:73:5a:93:f6:81:12:43:a7:70:a6:ad:1c:
8f:01:5b:17:e8:5a:94:ce:cf:0e:44:d8:d6:d9:fd:
34:a4:74:be:18:9d:52:69:1b:52:b5:7a:d5:12:16:
13:e7:20:24:89:d4:9e:31:47:80:18:ec:9a:7b:3d:
a2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AC:65:15:CB:8F:95:C3:EE:BA:E9:08:3D:64:C5:29:A2:4B:B6:40
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139362e32312e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.21.0/24
Signature Algorithm: sha256WithRSAEncryption
17:57:fd:eb:93:a5:31:0e:48:ab:a2:7e:b6:25:2f:17:b9:8d:
03:46:2a:1f:a4:51:ef:3a:df:5f:85:ec:e9:be:0e:f4:42:89:
cb:25:b7:ec:bb:ab:e6:17:4a:08:c4:72:a2:c4:5f:1c:f7:fd:
46:79:57:ec:b9:2f:d2:b6:5a:a6:66:93:c0:7d:98:d5:31:ba:
6b:93:f1:a8:1d:21:3d:9a:9b:b1:85:73:05:f9:a2:de:bb:cb:
89:54:c2:a8:21:a8:3b:f1:86:f8:0b:02:09:0e:94:1b:82:b1:
05:fa:03:9d:87:0a:87:f2:ad:b8:fc:9d:a1:8b:e1:a1:5f:43:
cc:91:d3:9e:9f:90:d1:ca:2a:b9:ca:57:5c:f5:f1:3e:eb:78:
d1:b0:ed:50:d7:92:88:3b:dd:74:cb:56:a4:41:fa:fa:a3:ff:
fb:d6:bd:50:19:46:91:08:2e:c5:bb:a9:93:c1:5a:aa:70:be:
50:56:3f:95:60:95:cc:09:47:3c:83:f4:20:11:e5:3a:6a:3e:
d1:85:92:ac:17:cc:ce:21:15:76:5b:72:b0:a1:99:29:4a:99:
6f:70:35:12:0b:d1:e3:83:5c:e9:e3:f5:8f:17:cc:60:c8:c6:
c5:c9:4a:a9:be:c7:86:c4:4b:47:6b:5f:29:73:a0:28:48:33:
97:16:ac:21
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUImQtef+ac/vV/fcyWnYYnatHdZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNDEyMzAxNTM2MTZaFw0yNTEyMjkxNTQxMTZaMDMxMTAvBgNV
BAMTKDk0QUM2NTE1Q0I4Rjk1QzNFRUJBRTkwODNENjRDNTI5QTI0QkI2NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjYHoE9U0xTZSn4YGLZYMRXsa+
VbK+3cJRR8qOnwO1ER+SfxNAlx6Mb30C/WRidbsP29LTcUkf4GR/ZTYhE3jvecrR
hiihTjFsi7yVrH2ez3cXwcBkcxUnfmlf9dlW84r4+VkUxgMe5OhmcLl5SrJtDIhD
sqK8Loawu1De0LKDv5ROVE5lOfVzvDbFd+WMmiMzvMPQUG9DLPF+6K4r+G/txN95
4FcZAjHYgrnRVDTCdg/BqTyGYPmZDiaiOe/q2nr84DTLR3Nak/aBEkOncKatHI8B
WxfoWpTOzw5E2NbZ/TSkdL4YnVJpG1K1etUSFhPnICSJ1J4xR4AY7Jp7PaKHAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUlKxlFcuPlcPuuukIPWTFKaJLtkAwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMTM5MzYyZTMy
MzEyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
ucQVMA0GCSqGSIb3DQEBCwUAA4IBAQAXV/3rk6UxDkiron62JS8XuY0DRiofpFHv
Ot9fhezpvg70QonLJbfsu6vmF0oIxHKixF8c9/1GeVfsuS/StlqmZpPAfZjVMbpr
k/GoHSE9mpuxhXMF+aLeu8uJVMKoIag78Yb4CwIJDpQbgrEF+gOdhwqH8q24/J2h
i+GhX0PMkdOen5DRyiq5yldc9fE+63jRsO1Q15KIO910y1akQfr6o//71r1QGUaR
CC7Fu6mTwVqqcL5QVj+VYJXMCUc8g/QgEeU6aj7RhZKsF8zOIRV2W3KwoZkpSplv
cDUSC9Hjg1zp4/WPF8xgyMbFyUqpvseGxEtHa18pc6AoSDOXFqwh
-----END CERTIFICATE-----
Generated at Thu Apr 3 05:17:13 2025 by rpki-client