Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3232342e302f32342d3234203d3e20313336373837.roa
File: 3130392e3132332e3232342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: VAY38RK6V9ZSWoIQmp+ZYXxkdkLBJyZ7OkjnjMTs0xo=
Subject key identifier: 9D:AE:1E:4E:49:FB:1C:C3:FB:58:86:52:B7:AE:42:79:4E:5A:F6:05
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0E925CBF15F89827038905744688CBA8D926EC1E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3232342e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 27 Jan 2025 09:45:08 +0000
ROA not before: Mon 27 Jan 2025 09:40:08 +0000
ROA not after: Mon 26 Jan 2026 09:45:08 +0000
asID: 136787
IP address blocks: 109.123.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:92:5c:bf:15:f8:98:27:03:89:05:74:46:88:cb:a8:d9:26:ec:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:08 2025 GMT
Not After : Jan 26 09:45:08 2026 GMT
Subject: CN=9DAE1E4E49FB1CC3FB588652B7AE42794E5AF605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d7:96:ed:99:44:d0:d6:76:eb:19:86:3e:ef:
75:aa:f1:a2:a5:ef:74:e0:48:76:ad:15:9d:8c:3a:
6d:af:33:cc:0b:5a:e4:11:79:c3:41:2a:5c:b1:6e:
c6:39:25:e4:47:0c:1a:2b:c1:d2:92:0b:7d:03:93:
32:dc:59:42:df:49:d9:65:72:4b:9e:9c:48:b1:6d:
cc:8c:31:a3:bc:a5:95:09:41:85:c7:db:75:a2:c5:
21:c1:0e:1e:7d:53:04:b4:e1:45:eb:ed:41:57:b4:
91:d5:b4:d8:42:37:a9:75:06:f3:ab:0e:e1:b6:83:
62:78:99:c9:7e:b9:af:a1:32:d2:bc:60:0f:a0:dd:
97:36:d0:21:57:50:71:56:fa:fe:a3:a2:f5:1d:a0:
5b:63:f7:36:13:31:43:e7:3e:ba:d2:8d:2b:f6:af:
4e:e6:95:e9:03:43:0b:35:f6:27:58:dd:35:b3:ce:
b9:e1:78:3d:b6:f5:b9:73:74:03:0f:74:ad:07:a4:
1b:28:cd:0b:58:a6:01:36:86:88:b3:5a:cd:8f:1a:
52:0a:4e:3d:b2:29:5d:c5:25:55:92:1a:e2:76:25:
c1:79:2b:91:34:10:19:0a:a7:45:38:b8:42:ff:dd:
03:69:15:1c:18:59:59:45:69:17:99:8f:be:ac:4a:
33:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AE:1E:4E:49:FB:1C:C3:FB:58:86:52:B7:AE:42:79:4E:5A:F6:05
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3232342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.123.224.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:c1:fd:6f:9f:20:ba:8b:81:e6:6e:14:2c:2c:c9:f5:27:92:
c6:e6:35:64:c5:fd:91:09:5c:f7:63:0a:48:a8:14:08:43:ff:
f1:16:53:1e:38:36:d1:e2:28:60:7a:40:d2:73:7e:10:44:b4:
7e:51:9c:a4:00:7e:e7:21:ec:48:8d:f1:1a:7e:36:66:97:68:
32:8f:d3:5c:5a:4a:c0:4d:dd:fd:e1:bc:5f:0a:57:92:d3:01:
30:0e:39:6c:a1:4f:e8:c6:32:e2:6f:49:6e:d5:9b:c6:dd:4c:
78:0d:ff:c0:90:a4:2b:08:11:c2:2c:b6:18:ec:36:19:4a:7c:
c7:1d:41:96:e6:be:a5:89:20:93:e8:62:c6:1d:28:2e:57:57:
01:8d:06:26:6d:12:49:8a:84:bf:aa:c9:78:56:1a:bf:42:34:
74:fb:ab:cc:0c:74:a4:fd:e3:79:c8:9a:1b:61:b8:c0:bd:f9:
0a:ef:49:8b:ef:76:9b:be:a9:6e:e4:4c:4a:cc:51:da:33:1b:
c8:2d:cd:21:df:ab:0c:71:fb:81:86:e6:aa:4c:20:05:f4:d6:
b7:89:17:65:0c:7c:42:70:4d:11:db:6b:12:2f:41:97:d8:70:
a4:04:55:a7:45:59:a6:98:09:02:49:a3:98:56:d2:26:f8:d2:
92:a0:76:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:00 2025 by rpki-client