Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231342e3132342e302f32332d3234203d3e203437353833.roa
File: 3138352e3231342e3132342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: eA+Qeryl5kGHcVhO8ixvvXYwBXXSHD0QByaxHVN1qQA=
Subject key identifier: B5:B3:5E:47:B5:52:19:88:97:99:EA:E6:2B:0D:35:A9:5F:E3:5B:1B
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 66F9EB1A40A4AD95ABA5B35AEBF62DB2B981DE9D
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231342e3132342e302f32332d3234203d3e203437353833.roa
Signing time: Mon 30 Dec 2024 15:41:16 +0000
ROA not before: Mon 30 Dec 2024 15:36:16 +0000
ROA not after: Mon 29 Dec 2025 15:41:16 +0000
asID: 47583
IP address blocks: 185.214.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f9:eb:1a:40:a4:ad:95:ab:a5:b3:5a:eb:f6:2d:b2:b9:81:de:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:16 2024 GMT
Not After : Dec 29 15:41:16 2025 GMT
Subject: CN=B5B35E47B55219889799EAE62B0D35A95FE35B1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0f:56:ca:13:6b:c1:6d:a0:88:46:8a:4e:6b:
a2:73:19:98:3b:fe:2c:62:a3:b8:79:dd:d8:cb:bd:
8c:03:a7:f4:30:ce:28:97:6b:a6:05:61:7f:17:e9:
fe:b7:03:30:b8:ad:aa:a3:31:4b:c9:31:5d:18:ae:
68:7c:62:c2:16:6c:ae:71:2c:3a:93:a9:54:5a:2e:
e4:02:03:fd:e7:07:b5:34:c5:8a:43:7e:46:33:f0:
fb:4c:ac:83:bb:01:e0:3f:bc:c4:34:c0:2d:e0:ba:
57:7e:e8:86:48:d8:98:b9:d6:41:5e:99:d8:26:c9:
a2:6a:de:c8:00:00:52:be:3c:e9:13:f1:35:51:19:
f3:e7:76:2b:62:78:8d:fd:48:9e:eb:47:5c:4f:0f:
bd:59:6d:5f:98:62:de:ec:e6:c1:14:68:70:cd:d8:
74:54:9c:b0:b4:3b:77:6e:56:70:4c:ad:0a:0c:7f:
be:80:b4:ce:70:1e:1f:5d:17:6e:74:e4:df:4e:b9:
99:48:91:4a:35:47:c1:39:e5:ac:69:db:74:5d:46:
a6:c2:d3:af:86:43:23:88:e7:6e:9d:a5:7c:14:8e:
dc:a3:fc:00:45:15:56:c0:44:64:b3:1c:66:39:8e:
84:69:55:be:11:60:bd:fc:d3:f8:33:7d:fc:c7:bd:
86:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B3:5E:47:B5:52:19:88:97:99:EA:E6:2B:0D:35:A9:5F:E3:5B:1B
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231342e3132342e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.124.0/23
Signature Algorithm: sha256WithRSAEncryption
11:7a:19:3c:9f:91:45:ce:9d:ca:5d:41:35:d8:96:aa:8f:1f:
da:5e:09:a5:54:73:fc:f1:01:38:7f:9d:06:8e:0c:91:b6:be:
54:07:3d:f2:b7:24:d9:99:26:07:c4:6c:61:00:4a:24:f7:22:
72:a9:40:7f:e3:6f:0a:99:9e:73:88:d1:13:48:e0:0a:0c:75:
00:94:8c:77:40:28:36:f8:e7:72:d8:56:91:1a:54:b7:9c:dd:
ea:c0:c7:81:02:47:7c:4a:e3:b6:92:b2:1d:5c:55:5c:6a:01:
63:4e:63:1f:ea:22:5e:f8:10:ab:d5:d0:86:8f:01:b0:00:9b:
08:55:2a:09:46:f9:52:92:94:6e:06:d0:c3:d7:c8:b2:fa:eb:
c0:6c:bd:62:05:eb:78:ee:d9:06:38:3e:34:56:46:02:e4:a4:
2d:a8:f4:63:44:a8:e8:da:ee:7a:58:8a:9b:d8:5a:23:8e:48:
e3:ac:bc:c0:b0:78:92:77:ab:eb:78:08:ba:06:f0:3b:88:d8:
75:37:9e:3b:b9:6e:02:d0:cd:92:ef:88:be:0b:44:80:92:19:
9b:af:41:8d:6b:2e:68:67:50:82:cf:44:9f:70:ce:c4:a4:9a:
21:e8:10:5f:1a:b6:22:e4:df:a3:b4:9b:60:a1:c5:cd:82:9a:
56:89:8f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:53 2025 by rpki-client