Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137302e302f32342d3234203d3e2039333034.roa
File: 3134352e37392e3137302e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: lBPkDLCAitklnlHKhkbEF1XuA3yghE3Yl1w46wr3QDM=
Subject key identifier: CD:32:88:B5:C8:EF:34:DB:47:67:8D:C2:1D:52:D2:FB:10:2A:3D:C2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2E04B42EBDAE6E56460238DFC8DA4AC2F5C6E6BB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137302e302f32342d3234203d3e2039333034.roa
Signing time: Thu 03 Jul 2025 20:19:43 +0000
ROA not before: Thu 03 Jul 2025 20:14:43 +0000
ROA not after: Thu 02 Jul 2026 20:19:43 +0000
asID: 9304
IP address blocks: 145.79.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:04:b4:2e:bd:ae:6e:56:46:02:38:df:c8:da:4a:c2:f5:c6:e6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 3 20:14:43 2025 GMT
Not After : Jul 2 20:19:43 2026 GMT
Subject: CN=CD3288B5C8EF34DB47678DC21D52D2FB102A3DC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:29:7a:83:b3:f1:10:69:9f:71:a4:88:9b:51:
57:77:0a:38:48:34:f5:9c:88:a0:bd:df:cf:f2:ef:
02:09:f0:a4:80:3e:66:61:5a:52:c1:10:ab:d9:46:
9c:fd:4b:93:d1:75:63:de:b5:ab:36:2a:e8:ee:11:
96:89:b3:c2:7f:7c:e5:33:b6:fe:e6:4f:d8:a8:1f:
c1:a2:2f:b4:df:cd:cf:ca:05:9c:5e:0c:49:02:5d:
c4:ed:f0:fc:6b:19:a4:84:d5:19:1a:89:d8:4d:83:
a6:00:71:0f:7f:dc:e3:d6:05:35:49:c8:05:c0:fe:
38:1d:38:1d:c6:91:7e:d1:2f:6b:dd:a5:45:d9:70:
c8:61:7a:cc:a1:7b:55:26:41:55:bb:a2:d8:31:81:
fc:2a:07:91:07:27:1c:0d:bc:db:51:c3:c4:a7:c8:
0e:fb:a9:c2:59:3c:e1:ea:c0:d8:f5:53:f4:55:84:
85:ff:b1:14:28:77:04:34:90:40:6d:20:bd:b8:dc:
a3:a0:ff:73:15:b5:82:da:07:6b:2a:9d:c6:31:f2:
e7:84:ab:93:58:4c:37:08:23:f6:ec:69:5a:7f:e4:
e6:83:0a:9a:9d:a8:c2:44:61:20:10:2c:82:8e:5d:
c4:f3:52:cf:29:b6:c0:c9:ad:95:a7:2d:e9:5b:fa:
33:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:32:88:B5:C8:EF:34:DB:47:67:8D:C2:1D:52:D2:FB:10:2A:3D:C2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137302e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.170.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:3e:91:e1:f5:43:18:c8:97:40:a7:26:1b:88:7c:a0:ca:00:
f2:38:63:e8:cc:5d:7f:3d:3c:d8:56:f5:05:22:7f:33:e5:14:
cb:7c:4d:f7:34:02:72:89:fc:54:d8:df:7a:3c:f1:8a:05:dd:
06:d9:86:1b:66:6b:8b:a3:84:fc:80:66:11:df:8b:1b:ab:fc:
f4:c5:40:e6:3b:8d:40:2c:89:aa:6f:eb:f0:59:e2:5b:2f:ff:
ad:09:b2:41:6e:e5:7f:91:b4:3d:6a:3a:1e:78:e4:50:0a:b5:
d4:f8:6f:b1:3a:ea:61:74:4c:b9:77:3b:01:02:22:b9:30:0b:
1b:dc:8b:f3:96:27:9e:5f:2b:67:cc:f0:69:8b:9b:4c:58:41:
80:10:39:c9:44:2d:d6:90:16:8c:e0:2e:9a:58:67:84:6b:47:
79:7f:85:77:1f:2d:d0:de:d7:6e:72:24:d8:32:63:3b:55:49:
46:74:13:3b:b8:0c:6b:92:d9:e2:dd:37:26:01:df:65:7e:75:
1e:b9:97:3e:59:74:71:25:06:d3:69:c1:17:a4:88:f2:b5:7c:
a8:47:86:69:35:0b:a9:58:f0:41:37:76:00:4f:ed:88:74:8c:
c6:69:b2:c9:3d:a2:42:cd:ec:bc:89:18:02:dc:82:99:ad:dc:
a9:e6:9e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:09:55 2025 by rpki-client