Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232392e3131342e302f32332d3234203d3e203437353833.roa
File: 3138352e3232392e3131342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: nb9O4YMTEEhrsDYTDKPq6Ifpf8ENEBDcAO8tN6cnii4=
Subject key identifier: 28:E3:B7:F7:72:B5:DF:C1:5E:93:B1:BB:6F:AB:4D:40:1C:B6:DA:DA
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 48C6A20F479739EF892DE8687F51D0E3FBA2AEF5
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232392e3131342e302f32332d3234203d3e203437353833.roa
Signing time: Mon 30 Dec 2024 15:41:22 +0000
ROA not before: Mon 30 Dec 2024 15:36:22 +0000
ROA not after: Mon 29 Dec 2025 15:41:22 +0000
asID: 47583
IP address blocks: 185.229.114.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:c6:a2:0f:47:97:39:ef:89:2d:e8:68:7f:51:d0:e3:fb:a2:ae:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:22 2024 GMT
Not After : Dec 29 15:41:22 2025 GMT
Subject: CN=28E3B7F772B5DFC15E93B1BB6FAB4D401CB6DADA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:89:b7:c4:9e:74:7f:ea:66:09:ef:1f:a5:
55:65:43:ae:be:48:36:95:7f:d1:eb:46:9e:ca:0a:
6d:30:ff:fa:ee:95:ba:2b:6f:88:33:12:35:6d:7a:
f3:83:be:d8:cc:7f:1d:0f:27:04:7c:26:70:8a:18:
90:3b:0c:e8:bc:4e:a5:52:27:06:7d:57:da:e0:47:
0e:cd:bd:29:0b:3f:5f:b0:a3:ba:ed:0a:8f:1c:56:
7e:e0:7f:e3:88:84:0e:91:8e:c9:4d:fe:78:26:cb:
af:a0:da:e7:bd:2a:d8:c6:73:71:58:c0:d5:b8:31:
75:1e:9d:62:a2:9e:d8:68:8e:cb:f4:c2:45:7b:a0:
0b:18:f9:e2:38:f2:58:e5:b4:69:70:47:79:b2:4e:
4a:2e:1c:e9:b2:f0:18:d6:ad:91:a8:e7:73:9c:26:
7e:87:bc:82:0c:8a:c8:e1:30:bf:ab:47:47:fe:2a:
d2:ce:c0:cd:f0:13:04:af:3c:cd:61:98:c7:13:ca:
5e:e0:80:b1:f8:44:2f:a9:6c:1e:00:2c:00:f6:35:
fd:8c:2f:69:f7:a1:da:d2:47:84:64:6d:69:b4:9f:
64:0f:65:d9:7c:36:15:28:ce:88:41:35:fb:d4:6d:
4d:1a:93:f4:e6:69:f8:43:09:b0:05:01:47:0f:57:
4e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E3:B7:F7:72:B5:DF:C1:5E:93:B1:BB:6F:AB:4D:40:1C:B6:DA:DA
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232392e3131342e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.114.0/23
Signature Algorithm: sha256WithRSAEncryption
67:98:5b:bd:99:50:2f:32:7e:42:07:d5:d6:0e:fd:88:ef:53:
a5:d2:b5:7d:0f:93:27:19:1f:e4:77:ad:99:41:1a:fd:21:1c:
dc:66:df:77:77:2b:a5:ca:1b:ed:a6:b7:78:65:8a:d3:a9:d0:
cd:4f:4c:07:cc:bb:56:f8:bb:e3:ed:0e:2f:f2:5e:66:9b:be:
b3:21:3c:9e:ac:4c:c6:ee:e8:56:92:02:80:8f:e0:72:4b:50:
69:59:56:1d:8b:6d:63:70:7f:6a:38:a7:0a:ba:1a:cc:2a:3a:
1a:d8:fa:b2:4f:4e:2c:15:22:60:14:53:1d:1d:0f:f1:e0:5a:
2c:3c:a2:30:3d:4b:13:9e:47:49:f5:5a:6d:60:fb:b5:e5:a3:
5e:46:07:31:90:22:12:f5:9a:33:91:72:0e:b0:4c:c2:ee:40:
f4:b0:32:b2:63:d0:8b:ce:b1:0e:0f:67:1d:12:10:e2:19:35:
b3:f4:9a:af:66:96:4d:cb:17:47:97:bb:2c:b8:f3:09:1f:b9:
8d:b4:be:c6:c1:cc:08:fb:2e:e5:02:ac:1c:af:c3:c4:19:06:
1c:90:14:3c:2f:3c:71:05:20:a7:24:ef:e2:5e:da:9b:e9:64:
b7:59:e3:5d:8f:b5:3b:31:ea:b6:5b:9c:94:29:77:09:26:ed:
97:79:64:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:51:12 2025 by rpki-client