Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139362e32322e302f32342d3234203d3e20323132323338.roa
File: 3138352e3139362e32322e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: vMMxSnmiENZmxlLAXDatqvk3ZcB+/JysT5EBvpWbRH0=
Subject key identifier: 3F:F6:AA:BA:A0:BE:CF:C5:7A:73:8C:E2:1F:12:3B:FC:84:6F:40:5F
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 21AFE2823FF25D70A29BDAEE353438631DC62B33
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139362e32322e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 30 Dec 2024 15:41:19 +0000
ROA not before: Mon 30 Dec 2024 15:36:19 +0000
ROA not after: Mon 29 Dec 2025 15:41:19 +0000
asID: 212238
IP address blocks: 185.196.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:af:e2:82:3f:f2:5d:70:a2:9b:da:ee:35:34:38:63:1d:c6:2b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:19 2024 GMT
Not After : Dec 29 15:41:19 2025 GMT
Subject: CN=3FF6AABAA0BECFC57A738CE21F123BFC846F405F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0f:07:0c:f0:02:b1:7a:58:d4:70:15:58:51:
cb:3f:7a:61:76:99:91:16:66:7a:15:c2:f0:4c:09:
d1:43:49:80:e4:d7:11:16:3c:52:95:19:86:53:4b:
20:77:fa:12:82:6e:bd:ba:69:6e:a4:91:79:d9:37:
c9:0c:69:07:ee:d9:11:58:d4:0f:85:7d:33:c0:81:
f5:66:b0:92:27:21:29:d0:7b:8e:37:ca:e1:50:ea:
20:29:f6:66:69:06:2a:96:3c:eb:54:b1:05:5d:4a:
be:ef:64:97:93:11:46:4e:98:7c:e2:d2:b9:38:3e:
e2:b5:02:f1:ba:07:60:38:07:f5:f7:7d:6f:81:e3:
ca:96:12:fa:60:93:3f:90:a3:10:8b:08:5e:d2:e8:
7e:c6:f7:ae:41:4b:a1:01:20:83:0d:d2:06:05:0b:
5b:c5:cc:60:66:da:ef:8b:e2:a1:c9:08:21:cb:22:
0a:80:17:d8:a3:e7:29:8b:75:19:79:04:00:1e:c7:
6c:40:4c:e5:04:40:9d:24:44:b4:7b:39:79:0d:82:
d7:d8:97:90:42:86:6d:fc:ea:5f:4b:86:04:2a:ec:
ad:61:fc:e2:91:7e:3e:44:c0:96:32:58:b8:da:93:
66:92:26:4a:db:45:17:79:ea:ef:10:d2:10:77:b7:
f8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F6:AA:BA:A0:BE:CF:C5:7A:73:8C:E2:1F:12:3B:FC:84:6F:40:5F
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139362e32322e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.22.0/24
Signature Algorithm: sha256WithRSAEncryption
24:da:93:a5:9c:da:3a:ef:f8:4d:20:39:b6:07:c7:56:1b:a9:
97:25:5d:56:48:fe:26:9a:c3:35:fe:19:85:be:39:7f:9f:0c:
22:64:2e:de:ee:47:e2:a6:6b:b0:9d:2b:81:b6:1e:51:3c:05:
08:20:e3:20:86:80:3f:34:2a:31:5b:4e:86:49:68:24:bd:5a:
3b:bd:d3:ef:1e:f2:70:42:a3:65:70:bd:ba:9c:2b:7d:e4:c6:
d8:64:8f:d7:33:56:39:98:09:41:76:68:f0:63:53:00:53:63:
f7:1c:aa:00:c8:ef:b7:88:d2:e8:2b:70:37:39:6a:e5:f6:e0:
ec:15:38:03:a6:69:9d:ff:c3:37:58:73:b6:5e:54:75:8f:a0:
49:5d:18:1b:59:9b:62:8f:01:ff:ab:40:4a:dc:63:a2:d5:76:
0e:c4:5d:37:3c:92:57:fb:ca:62:96:64:78:9a:e5:2a:6b:82:
b7:01:d0:42:d8:9c:9b:2d:02:49:76:4f:92:90:d6:02:8b:88:
5c:f6:22:fe:f4:3e:1c:fc:b1:27:b3:fb:77:39:32:6f:76:74:
cd:45:1f:d7:dd:69:38:a5:b1:3e:a1:b3:35:4c:75:9d:08:d0:
17:38:22:b0:5e:f4:46:a9:e3:55:a7:28:a1:12:35:19:f2:1d:
ff:97:84:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:59 2025 by rpki-client