Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230352e31332e302f32342d3234203d3e20313336373837.roa
File: 3138352e3230352e31332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 8WNYNixtkdcRb7xNBD4r1qCQRvGm5S9ZXsY0iT/eNlw=
Subject key identifier: 2E:F2:E7:9B:F8:F7:D2:92:AF:3D:CB:77:C5:8F:B1:06:04:8B:34:85
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 37AD03880143F042646C3CFA7ED55EA17B39A57A
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230352e31332e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 30 Dec 2024 15:41:16 +0000
ROA not before: Mon 30 Dec 2024 15:36:16 +0000
ROA not after: Mon 29 Dec 2025 15:41:16 +0000
asID: 136787
IP address blocks: 185.205.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:ad:03:88:01:43:f0:42:64:6c:3c:fa:7e:d5:5e:a1:7b:39:a5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:16 2024 GMT
Not After : Dec 29 15:41:16 2025 GMT
Subject: CN=2EF2E79BF8F7D292AF3DCB77C58FB106048B3485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:cf:43:92:b5:c6:2f:9e:1a:85:3a:97:e2:
c6:c3:95:b1:60:ed:85:60:f3:15:da:15:ae:ba:52:
e1:01:1f:7d:9c:db:b2:c1:e1:d5:3b:a3:d4:48:25:
7e:37:f5:45:2a:cb:6c:85:56:d2:53:54:27:c2:35:
1b:7a:6c:69:10:98:e1:85:19:f8:fd:4f:d6:f8:85:
4b:bd:6f:07:72:0f:7c:e9:dc:91:22:57:c4:b9:13:
54:1f:d4:fd:ac:ab:41:51:80:d6:bb:a0:90:dc:54:
93:8b:81:f5:c2:c0:44:c0:54:00:14:4e:af:d2:fd:
c2:f5:90:35:3e:f6:e5:29:96:71:ee:c1:7f:ee:6e:
8e:0f:f1:e8:f8:56:2a:13:b7:ba:90:75:16:8d:b7:
b8:f4:9b:29:20:e2:8f:cb:91:78:bf:1b:ab:ec:8d:
4f:c9:fd:2c:8d:33:df:28:62:de:10:9a:4e:49:1d:
9b:a5:cf:2b:e1:3e:08:01:ca:6f:9c:d8:3a:ac:07:
f1:9b:ef:84:85:14:d3:58:81:98:62:ab:3c:4d:c4:
09:fa:cf:dc:34:30:50:8c:b2:5d:78:94:d9:80:23:
f2:27:3b:75:14:2e:94:60:4d:06:22:ab:43:e3:04:
ef:52:4d:1c:8e:ce:59:5d:06:ee:9d:6f:62:0e:fd:
0d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F2:E7:9B:F8:F7:D2:92:AF:3D:CB:77:C5:8F:B1:06:04:8B:34:85
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230352e31332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.13.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:4c:db:35:25:19:6d:20:82:f0:f8:ab:49:93:08:6d:62:a4:
0f:77:8c:37:a0:df:bc:02:a0:78:80:af:03:ef:4e:d5:ff:66:
77:1c:97:9e:ab:e0:59:be:4e:4c:12:75:a0:17:22:eb:12:87:
26:a5:48:28:e3:59:3c:83:0a:bf:8a:dd:cb:9e:85:fd:a3:83:
5b:a3:e3:d5:5e:34:e5:d0:c7:4a:c9:2d:f8:a0:c0:19:19:ab:
28:b9:c6:a3:4d:01:c6:52:dc:1a:ba:0e:06:e9:1d:2a:3c:1a:
ca:da:90:55:6d:d1:6b:af:e0:26:97:95:89:db:ea:0d:bd:c5:
37:97:00:02:4a:0f:1e:12:cb:43:56:36:a5:89:4e:0a:9d:cd:
17:e1:f3:ce:06:18:8f:90:96:5b:6e:a4:c1:e7:bb:51:4e:54:
f2:1a:cc:88:01:7b:e3:3f:82:a3:4d:e2:7e:f6:3c:52:da:95:
fa:18:45:85:4d:34:e9:77:55:7a:11:fd:bc:5c:88:b1:73:06:
44:44:18:81:57:36:cd:8e:a1:94:a3:94:54:8d:88:df:d0:ba:
bc:4c:8b:d2:16:60:48:c6:00:df:a1:9d:92:86:4a:46:4c:8b:
8f:24:a9:e4:fe:65:41:58:1a:57:65:70:d0:e0:25:a2:d0:c5:
db:37:94:f7
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUN60DiAFD8EJkbDz6ftVeoXs5pXowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNDEyMzAxNTM2MTZaFw0yNTEyMjkxNTQxMTZaMDMxMTAvBgNV
BAMTKDJFRjJFNzlCRjhGN0QyOTJBRjNEQ0I3N0M1OEZCMTA2MDQ4QjM0ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzQM9DkrXGL54ahTqX4sbDlbFg
7YVg8xXaFa66UuEBH32c27LB4dU7o9RIJX439UUqy2yFVtJTVCfCNRt6bGkQmOGF
Gfj9T9b4hUu9bwdyD3zp3JEiV8S5E1Qf1P2sq0FRgNa7oJDcVJOLgfXCwETAVAAU
Tq/S/cL1kDU+9uUplnHuwX/ubo4P8ej4VioTt7qQdRaNt7j0mykg4o/LkXi/G6vs
jU/J/SyNM98oYt4Qmk5JHZulzyvhPggBym+c2DqsB/Gb74SFFNNYgZhiqzxNxAn6
z9w0MFCMsl14lNmAI/InO3UULpRgTQYiq0PjBO9STRyOzlldBu6db2IO/Q1FAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQULvLnm/j30pKvPct3xY+xBgSLNIUwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjMwMzUyZTMx
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5zQ0wDQYJKoZIhvcNAQELBQADggEBAI1M2zUlGW0ggvD4q0mTCG1ipA93jDeg
37wCoHiArwPvTtX/Znccl56r4Fm+TkwSdaAXIusShyalSCjjWTyDCr+K3cuehf2j
g1uj49VeNOXQx0rJLfigwBkZqyi5xqNNAcZS3Bq6DgbpHSo8GsrakFVt0Wuv4CaX
lYnb6g29xTeXAAJKDx4Sy0NWNqWJTgqdzRfh884GGI+QlltupMHnu1FOVPIazIgB
e+M/gqNN4n72PFLalfoYRYVNNOl3VXoR/bxciLFzBkREGIFXNs2OoZSjlFSNiN/Q
urxMi9IWYEjGAN+hnZKGSkZMi48kqeT+ZUFYGldlcNDgJaLQxds3lPc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:59:30 2025 by rpki-client