Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232302e32322e302f32342d3234203d3e203437353833.roa
File: 3138352e3232302e32322e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: mxpxvLFSfAvEp7/Yk6APvkVFf1pfv4Rc9O+XVxp1Xi0=
Subject key identifier: 60:74:C4:B9:E4:C8:A2:E7:FD:6B:15:78:02:58:AC:54:61:5A:8C:E4
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 08BAADA55E714895BF67303420B022EB543E399C
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232302e32322e302f32342d3234203d3e203437353833.roa
Signing time: Mon 30 Dec 2024 15:41:22 +0000
ROA not before: Mon 30 Dec 2024 15:36:22 +0000
ROA not after: Mon 29 Dec 2025 15:41:22 +0000
asID: 47583
IP address blocks: 185.220.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:ba:ad:a5:5e:71:48:95:bf:67:30:34:20:b0:22:eb:54:3e:39:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:22 2024 GMT
Not After : Dec 29 15:41:22 2025 GMT
Subject: CN=6074C4B9E4C8A2E7FD6B15780258AC54615A8CE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9b:17:f8:af:e1:8a:d9:2e:3c:e6:e5:78:e6:
f8:c1:eb:25:e7:e4:fd:56:23:3f:3f:63:45:75:c2:
51:8c:d7:e4:90:3f:b4:2f:66:6c:dc:c7:f3:cb:53:
bd:ad:29:67:65:f5:9e:3c:cf:40:01:e5:4b:f8:d2:
78:ed:8f:1e:d3:a5:6e:27:0c:b4:bc:a7:9e:7f:ae:
84:ed:44:6d:44:c3:b7:0b:d0:b3:af:38:d8:f9:d2:
10:b9:3c:6c:b3:99:07:2d:51:87:8e:18:64:a5:16:
75:6d:57:1e:40:e6:c7:3a:31:58:c5:e7:ef:70:cc:
30:9d:04:13:65:1f:00:8d:55:1c:6d:02:fe:a0:d0:
4a:4d:e1:5d:78:17:db:16:a4:e9:1d:2d:04:c2:5b:
4c:f6:a6:8e:bb:51:82:f2:f0:89:9f:97:70:38:9a:
00:06:7b:05:70:45:7e:51:4a:5c:f3:0b:34:7f:a7:
54:56:6e:47:f0:cc:0e:26:99:af:51:84:f9:01:f3:
be:a0:95:1c:2a:fe:b5:b6:7f:8b:95:d3:af:a7:f0:
fa:c3:bc:c0:b9:9d:ad:b6:06:55:45:6f:cb:d7:64:
6d:ba:32:ae:79:22:9d:5f:bf:db:a7:6a:8b:e0:04:
7b:45:82:f9:fe:67:f4:d1:11:1c:32:59:6f:80:96:
0f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:74:C4:B9:E4:C8:A2:E7:FD:6B:15:78:02:58:AC:54:61:5A:8C:E4
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232302e32322e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.22.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:51:d1:78:1b:90:ff:5a:17:61:09:80:24:8d:80:20:4b:3b:
80:09:96:33:5c:86:9c:9b:5e:d7:de:f4:62:0e:64:0f:48:09:
3d:1d:86:bc:39:e9:91:da:44:9a:26:ef:fc:07:ad:50:68:3d:
c0:c4:53:46:4c:4e:07:fe:75:f5:8e:1e:44:8b:61:f0:dd:ca:
4a:2b:67:93:da:9b:7c:ba:83:4d:1e:78:7b:35:74:01:c7:4d:
6d:52:81:67:df:51:79:ee:2a:6b:a2:a6:6d:00:6f:f5:6e:1a:
d0:49:2b:c3:28:0a:f7:00:fb:72:eb:96:b8:d4:fa:91:61:29:
03:60:1f:a0:45:73:ed:7f:c8:df:b0:12:80:35:f0:b1:a1:34:
bb:d4:b0:60:8f:a4:f9:e1:a8:a5:a0:d6:2c:d9:bf:b6:a5:54:
3b:1c:07:73:bc:04:49:0c:a1:25:f1:07:83:d1:36:47:3c:ac:
6d:e4:3d:cf:f5:3d:4d:f2:87:3e:dd:55:43:2d:aa:94:06:7d:
5c:b1:af:ec:be:37:60:ce:68:ce:1f:c7:4c:29:1c:bf:d5:12:
07:56:58:76:2d:a8:65:8c:8f:41:09:39:59:43:c2:22:b0:c7:
4d:91:b4:e0:c6:13:b6:0d:49:76:f5:c2:3c:04:a7:15:c7:14:
41:7a:fc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:33 2025 by rpki-client