Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3235322e302f32322d3234203d3e203437353833.roa
File: 3130392e3130362e3235322e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: XKF5i77HvQVY0AZUgRqnt6/6Qt03kQUUWjWIkMMIPUY=
Subject key identifier: 32:30:DB:D5:DD:EA:45:C4:BC:A5:F0:D2:FD:13:EA:8B:DD:42:84:63
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 53368FFDE53466C3901103F29196DD8D6A6D2953
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3235322e302f32322d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:44:59 +0000
ROA not before: Mon 27 Jan 2025 09:39:59 +0000
ROA not after: Mon 26 Jan 2026 09:44:59 +0000
asID: 47583
IP address blocks: 109.106.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:36:8f:fd:e5:34:66:c3:90:11:03:f2:91:96:dd:8d:6a:6d:29:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:39:59 2025 GMT
Not After : Jan 26 09:44:59 2026 GMT
Subject: CN=3230DBD5DDEA45C4BCA5F0D2FD13EA8BDD428463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e8:59:0f:9d:15:ce:16:07:d9:48:37:94:da:
7f:21:37:c5:f0:35:ba:44:1c:c9:cd:ae:3f:ba:8e:
0e:49:26:b3:7c:68:6d:80:08:3c:ea:9f:b4:68:92:
c2:99:c0:35:2e:72:39:4a:5c:51:48:e4:0c:d5:73:
49:56:7c:90:0c:f2:8d:a3:3d:9d:5b:1d:0d:64:2d:
d3:7b:56:b8:03:3f:0a:0d:37:e4:b5:f3:26:02:d8:
02:e6:8d:09:0d:74:9c:11:1a:5b:5e:19:38:56:ef:
f7:5f:d4:08:c8:32:4f:34:d7:a0:1e:3e:77:20:c1:
46:74:aa:d4:dd:7a:17:2b:e8:72:55:ec:76:cd:2f:
59:13:5f:dd:a6:f6:d8:f7:35:44:1b:47:00:b4:7d:
2c:23:27:03:55:cd:b8:a6:c4:a1:e3:e2:23:a6:bf:
95:69:4a:14:97:2b:e6:7a:73:d6:d5:80:79:ae:43:
05:28:09:3f:b9:f1:6f:76:f3:c2:c8:ad:74:ac:24:
ff:e9:c7:1e:5b:4d:0a:bb:bd:10:ad:92:26:ae:8b:
3b:a4:90:fb:9a:d4:bc:92:ef:69:77:69:a2:b3:1e:
0a:7c:c4:5b:ec:14:52:46:03:fd:e6:2a:21:1b:76:
84:5f:00:83:e1:65:1a:90:3f:a6:d4:3b:98:4a:81:
92:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:30:DB:D5:DD:EA:45:C4:BC:A5:F0:D2:FD:13:EA:8B:DD:42:84:63
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3235322e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.252.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:b0:0c:32:96:79:fe:2f:35:dc:25:4e:58:5c:f0:87:f5:47:
76:16:33:71:6b:f8:00:13:b3:8f:80:f1:90:09:ea:9f:90:75:
3f:af:a4:9e:61:a3:17:07:20:95:67:d4:e3:6e:14:8c:d8:b7:
d1:fb:3e:4a:31:e0:14:2f:9b:10:24:9d:1f:6b:a6:40:00:1e:
32:22:09:33:d1:09:8e:e3:9c:8c:13:4b:fe:e0:00:e1:04:0d:
66:cd:dd:70:05:3c:7f:a9:60:e1:e7:b6:68:a3:95:e9:a6:a8:
44:4f:fc:30:a6:b5:ad:f4:2c:7e:7d:74:d7:e6:ce:b4:26:98:
cb:20:45:ac:be:41:e8:65:bb:dd:1f:b6:61:7b:c4:9f:2e:f2:
02:71:d9:0f:e4:07:77:77:61:5a:1b:5d:54:74:17:a2:55:88:
72:56:5a:d8:5c:78:ea:b2:ab:c3:44:89:53:2d:20:e3:26:89:
60:03:91:48:1b:f9:0d:be:03:22:35:cc:d6:d4:80:2c:d5:2d:
b9:c6:3f:1a:f0:8c:55:13:28:1d:cc:8a:8e:35:8e:89:55:4e:
8f:c7:e8:a5:4a:e5:b4:8f:b8:00:80:e2:43:21:1a:77:3e:83:
37:17:31:aa:e7:0d:73:53:09:33:f0:ec:36:22:86:af:66:be:
a2:0c:8e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:12:27 2025 by rpki-client