Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e3138392e302f32342d3234203d3e2039333034.roa
File: 34352e3135322e3138392e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: 2djbZrqhGzf6ZSzR/3/BvsE+IdQRWchpITeaFquS+7M=
Subject key identifier: 1A:CC:2B:A6:4F:48:B4:CA:98:05:B0:D1:98:F1:0F:4A:07:76:2C:B7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5DC8E5A35D10F073B23F2CA7273B69C9C3E8ED2E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e3138392e302f32342d3234203d3e2039333034.roa
Signing time: Thu 03 Jul 2025 20:20:35 +0000
ROA not before: Thu 03 Jul 2025 20:15:35 +0000
ROA not after: Thu 02 Jul 2026 20:20:35 +0000
asID: 9304
IP address blocks: 45.152.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:c8:e5:a3:5d:10:f0:73:b2:3f:2c:a7:27:3b:69:c9:c3:e8:ed:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 3 20:15:35 2025 GMT
Not After : Jul 2 20:20:35 2026 GMT
Subject: CN=1ACC2BA64F48B4CA9805B0D198F10F4A07762CB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:41:51:cc:93:00:c7:48:f6:96:3b:8f:99:3c:
8e:81:32:14:ae:ed:d1:37:b9:f3:43:3c:70:3c:95:
3e:ba:70:af:2c:d6:ee:60:bc:4e:ba:38:27:cd:96:
42:f5:58:9d:85:9a:33:c4:57:0e:cc:27:69:5e:82:
5f:c1:d1:5f:63:27:62:fd:73:f7:92:4a:30:3a:a4:
d8:01:a6:44:13:cb:1e:c8:d6:bb:6f:67:e2:d2:ea:
c7:36:ea:b1:42:dd:3e:3f:7b:5c:61:17:d4:dd:27:
50:7d:a2:49:ed:2e:14:d5:8b:35:7b:18:b9:2b:77:
8b:30:53:75:1f:8b:77:cb:80:e6:35:ea:68:97:2e:
30:b1:a5:15:21:d1:a3:59:7a:9f:fb:da:21:6b:f2:
d4:7f:6f:c2:ed:57:4e:eb:a5:bf:4e:52:10:fb:b6:
ee:29:e1:30:15:50:aa:e2:29:e9:ea:e4:40:e2:9b:
10:88:7a:4c:7d:71:5f:4b:bb:6e:9a:a6:4a:47:21:
44:6a:1f:5f:7b:61:1e:d4:ce:52:54:11:fa:01:d7:
f9:b0:bc:7a:cf:75:25:3b:a4:3f:86:41:cd:86:b0:
fd:18:1b:f1:9e:c4:01:c7:08:99:b9:2e:66:d2:f3:
b7:84:e5:3b:3b:3e:72:7a:96:a6:71:5e:cf:8d:bf:
83:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CC:2B:A6:4F:48:B4:CA:98:05:B0:D1:98:F1:0F:4A:07:76:2C:B7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e3138392e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.189.0/24
Signature Algorithm: sha256WithRSAEncryption
43:54:2e:30:b3:3c:57:54:9b:93:7f:b6:8f:4e:7e:71:ba:f6:
21:66:e9:dc:09:f7:e6:d8:06:9c:11:98:a8:8c:a8:af:22:7b:
b7:81:31:bb:2f:7d:c1:e8:2d:53:43:93:90:01:92:b1:fb:e9:
b3:14:44:7d:19:46:5f:73:fc:b7:1a:b6:7e:c2:04:51:43:4e:
09:7c:3a:93:63:e1:a8:66:10:ee:4f:11:65:8f:25:ea:5b:ed:
92:53:08:74:2e:a6:2f:b5:e6:ec:6f:86:08:f5:49:00:96:4e:
9b:34:d8:06:68:ed:5b:bb:c7:49:d3:a8:f0:d1:e4:35:b7:6f:
c7:ce:e4:ab:1f:a1:46:fc:91:5f:d4:3e:b9:ec:a1:c9:cb:b7:
0f:75:cb:b9:b2:4a:64:57:6e:eb:66:83:3a:2c:1d:73:47:ff:
3b:89:54:07:ac:7f:59:e8:01:6d:b6:4c:6f:ff:f5:24:c7:d2:
bd:8f:e7:91:fc:21:65:65:bb:55:d5:19:22:42:3b:b0:e4:b1:
74:11:b1:8e:0e:a4:bd:0a:ea:0a:ff:6d:26:54:b0:87:26:06:
f9:06:97:5d:f1:34:11:d1:3c:47:59:41:ae:a9:33:31:54:1a:
5f:ef:95:77:f7:3d:f1:28:dd:5b:23:5e:36:d4:7d:ef:97:d6:
7d:92:e8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:11:13 2025 by rpki-client