Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231332e32352e302f32342d3332203d3e203531313637.roa
File: 3138352e3231332e32352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: UQyVsF5wmleH9djtJZVGFlKqiY56WBlVHjPC2F7xC0k=
Subject key identifier: C4:E6:CC:A6:95:40:73:0E:3B:89:B4:E3:F6:3C:98:0D:D4:43:7D:2B
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 5971CC9C26657516A36B39128E04477F27CE82F3
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231332e32352e302f32342d3332203d3e203531313637.roa
Signing time: Mon 30 Dec 2024 15:41:18 +0000
ROA not before: Mon 30 Dec 2024 15:36:18 +0000
ROA not after: Mon 29 Dec 2025 15:41:18 +0000
asID: 51167
IP address blocks: 185.213.25.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 10:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:71:cc:9c:26:65:75:16:a3:6b:39:12:8e:04:47:7f:27:ce:82:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:18 2024 GMT
Not After : Dec 29 15:41:18 2025 GMT
Subject: CN=C4E6CCA69540730E3B89B4E3F63C980DD4437D2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:33:de:8e:f7:75:f1:24:e4:94:39:ad:fb:
c3:2a:3c:96:5f:08:8c:01:ae:b6:98:37:3d:a2:2e:
ff:62:c7:52:24:91:10:74:ef:e4:43:85:46:91:f7:
cf:84:3f:4c:eb:75:94:35:61:87:ab:ed:17:88:8e:
4e:7a:39:e1:b2:7b:13:5c:f9:8a:ff:72:ad:0f:44:
6f:ea:c8:d0:ad:fd:2c:2c:09:74:c6:d3:d2:5b:0a:
94:49:bc:75:c1:92:10:de:4f:7e:18:66:c2:30:b1:
0a:9f:51:c0:a5:70:8d:46:81:59:65:d3:9c:d7:c9:
1a:56:eb:84:37:c5:c9:31:10:de:53:f2:3d:0d:4b:
04:ef:f7:82:42:3d:41:38:e3:8b:5f:be:d6:4f:f8:
5e:22:2e:52:ca:d9:e1:34:bc:77:44:53:35:4b:50:
0b:31:2e:70:5b:b5:6b:b2:0a:4f:c5:49:31:af:fb:
07:fc:66:15:65:b6:34:98:f7:64:29:60:a7:46:2d:
30:49:a0:b8:83:67:6c:ae:c3:53:da:42:91:d1:4a:
83:99:e7:81:98:37:fe:db:5b:55:4d:8d:aa:49:02:
e0:24:2a:90:27:13:c7:2d:f8:4e:c9:05:0d:36:62:
12:c2:4f:0b:b7:3a:82:d5:39:6c:ca:9f:03:0e:ae:
a9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E6:CC:A6:95:40:73:0E:3B:89:B4:E3:F6:3C:98:0D:D4:43:7D:2B
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231332e32352e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.25.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:da:ba:c8:2b:57:e9:28:08:eb:f0:d0:5f:cf:51:4d:42:92:
b6:fb:08:2a:20:3e:d6:ce:a6:ba:35:fd:8b:4a:24:3c:28:14:
e7:24:7b:3b:e1:57:29:51:f3:60:16:d4:6e:a6:61:00:f7:e4:
d1:5b:f0:81:35:13:fb:35:42:b6:6a:61:02:c8:5e:bb:e6:e8:
2c:b8:f4:eb:b0:c4:ad:da:9a:63:bf:99:0b:cf:4b:a6:14:b0:
7c:22:26:48:b1:e2:3f:1e:06:25:52:90:07:5f:ac:26:bf:1e:
27:0c:09:bb:80:6b:56:7e:e9:aa:ef:98:03:ed:44:cf:b6:8c:
7c:4e:cb:8c:67:0f:aa:10:85:59:66:e0:58:37:ef:00:a3:c6:
59:c1:75:56:04:16:40:08:f1:57:df:1d:82:03:dc:d3:51:12:
ad:55:06:8d:a1:08:44:d8:e5:26:09:69:05:3d:c1:77:e6:d8:
3f:9a:b9:11:8d:d3:b2:c2:c9:06:a4:1b:8b:b0:25:60:a5:68:
33:e4:a6:9a:7b:5c:0c:96:ab:27:f2:3a:5c:26:d4:7a:e6:ad:
5c:ad:73:19:d4:47:f3:2a:d2:0c:b5:cb:17:ea:0d:98:16:fd:
26:f0:58:6b:5e:68:cb:bc:b9:f2:07:fa:e7:de:20:b9:23:cc:
dd:e0:61:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:45 2025 by rpki-client