Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130362e302f32342d3234203d3e203332303433.roa
File: 3134352e37392e3130362e302f32342d3234203d3e203332303433.roa (raw, json)
Hash identifier: TGFU/opisWPSiRk6iKW1eTXDN8kcmR6SkHbygPhZ+zM=
Subject key identifier: 45:0F:37:B9:D2:C3:D1:0D:14:4A:08:BF:C2:28:1A:9F:D2:08:9B:CC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 21765B7E4842FEBD485E2250A962F133D3A1E989
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130362e302f32342d3234203d3e203332303433.roa
Signing time: Wed 09 Jul 2025 10:51:03 +0000
ROA not before: Wed 09 Jul 2025 10:46:03 +0000
ROA not after: Wed 08 Jul 2026 10:51:03 +0000
asID: 32043
IP address blocks: 145.79.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:76:5b:7e:48:42:fe:bd:48:5e:22:50:a9:62:f1:33:d3:a1:e9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 9 10:46:03 2025 GMT
Not After : Jul 8 10:51:03 2026 GMT
Subject: CN=450F37B9D2C3D10D144A08BFC2281A9FD2089BCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:3f:87:a6:5f:89:5d:4b:ca:5e:31:35:83:
70:b9:b8:e3:81:a2:9d:dc:fc:b4:58:e5:59:f2:51:
72:35:2f:85:f3:01:84:e4:6c:a8:0f:d3:26:b4:08:
50:fc:6f:1e:5c:a0:8e:91:60:9c:5d:20:f0:68:cf:
2a:cc:cc:6c:03:5a:fd:47:6b:a8:a9:2f:71:25:e3:
b8:ac:0a:89:7d:42:1a:fa:4b:a9:33:a0:00:3f:83:
64:e2:fd:08:84:9e:86:cb:a1:d6:f8:10:44:cc:ee:
c4:37:a5:bf:e9:e7:be:5d:45:45:06:e1:41:24:52:
2b:fc:2b:fb:ec:3e:3c:2f:a4:a2:9b:a6:ee:7a:bc:
a3:be:ee:b5:a6:c7:75:21:21:c0:40:87:3a:3e:62:
bc:f6:a9:da:f7:e4:0d:3c:51:a7:4c:80:ee:44:b8:
3d:86:3e:3b:7c:16:05:05:76:b9:62:05:9a:95:54:
6e:14:31:a1:0a:65:46:26:2c:05:88:70:5a:fc:2c:
8e:45:d0:bc:fc:47:d6:68:8d:78:a9:d6:d0:b5:16:
f0:64:4e:db:22:40:4e:b1:11:50:cb:ba:e7:1a:93:
57:ec:72:42:39:aa:66:27:b2:76:70:df:d1:bc:72:
71:59:a4:ed:72:a6:d5:93:66:52:d4:4a:15:59:c8:
3d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0F:37:B9:D2:C3:D1:0D:14:4A:08:BF:C2:28:1A:9F:D2:08:9B:CC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130362e302f32342d3234203d3e203332303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.106.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:80:5a:41:90:cb:95:96:9c:8e:2c:39:db:88:2f:f4:25:15:
6a:ac:94:45:a8:72:72:03:a1:d7:27:19:e0:46:6b:8e:83:1a:
71:03:41:f0:b6:28:78:e6:4a:98:3f:cb:05:69:8f:2f:6c:3b:
58:ec:e5:ee:e8:ac:9d:91:e1:71:0a:2f:4d:7b:11:fe:4b:27:
45:ba:11:f0:a1:b9:7d:c6:c6:3c:7a:3c:15:56:2a:7b:d1:36:
18:b6:b3:0a:a4:e9:26:cb:13:57:bf:75:ba:02:4e:78:8b:16:
02:ad:5d:eb:63:a7:46:1d:08:d2:78:6d:19:57:f6:13:ac:23:
61:2c:19:bc:d1:39:4c:eb:1a:e3:93:d0:46:2d:f5:ce:27:c7:
db:7e:51:2b:19:24:a7:7a:a6:58:5e:84:fc:61:52:2d:53:b8:
86:f1:d0:ea:4f:2f:38:d3:b2:83:0e:5a:5e:d0:59:b7:b3:84:
aa:c3:d5:18:54:72:19:1d:04:5f:87:ed:6f:48:e9:f4:61:45:
67:cf:13:6d:70:dd:c4:84:7c:d5:71:30:74:7d:70:c4:57:b3:
a7:9b:d7:28:3e:c3:d9:ad:8e:fd:ad:bd:a3:c8:ca:fe:c1:7a:
82:40:a1:41:c4:2a:49:78:aa:ad:4d:bc:51:91:70:f1:eb:53:
21:81:89:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:07:36 2025 by rpki-client