Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3233322e302f32312d3332203d3e20313431393935.roa
File: 3130392e3132332e3233322e302f32312d3332203d3e20313431393935.roa (raw, json)
Hash identifier: 4L9YnVEgnmcgF4ZOCvhOrflrIzJeuWBtdHH7W3iVpsQ=
Subject key identifier: C2:BE:74:C6:67:CF:F1:D4:89:58:EC:E1:ED:B3:E3:C5:55:55:D2:EC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3617C2DF61A183220EDB008D52D1FF09F0732F36
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3233322e302f32312d3332203d3e20313431393935.roa
Signing time: Mon 27 Jan 2025 09:45:26 +0000
ROA not before: Mon 27 Jan 2025 09:40:26 +0000
ROA not after: Mon 26 Jan 2026 09:45:26 +0000
asID: 141995
IP address blocks: 109.123.232.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 15:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:17:c2:df:61:a1:83:22:0e:db:00:8d:52:d1:ff:09:f0:73:2f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:26 2025 GMT
Not After : Jan 26 09:45:26 2026 GMT
Subject: CN=C2BE74C667CFF1D48958ECE1EDB3E3C55555D2EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:78:1d:01:02:c1:c9:7a:5a:d2:25:21:7a:
98:0a:55:18:eb:2f:f5:db:55:79:d3:f6:05:9c:14:
1b:81:b9:b3:45:fd:d7:9a:13:15:51:45:d0:28:64:
dd:3e:1a:a1:9a:25:f9:6e:f1:f4:1a:22:d3:c7:2c:
1f:2f:ca:ac:7b:1d:ec:75:67:55:4d:10:6b:d8:d7:
83:9f:6a:d0:93:1d:af:df:9e:7f:70:2b:5d:01:81:
89:36:24:97:d0:b6:97:17:a5:d3:6f:e5:77:a9:38:
d5:bc:bc:6a:8f:5a:3c:f6:01:35:55:ac:9c:b8:00:
d6:03:cb:22:e8:58:3f:99:96:0f:9a:d1:8f:6a:15:
33:76:fe:f4:1a:06:50:55:26:45:85:bc:96:e8:e1:
98:1c:da:7f:3b:b2:db:11:2c:81:03:80:04:d8:c6:
77:74:62:31:6b:6b:74:34:d2:5a:df:26:59:31:00:
78:28:3f:83:9f:38:f2:0f:e1:49:9a:02:3a:c9:ff:
dc:f3:42:83:b1:ea:1c:de:41:49:92:42:74:40:f8:
b7:22:76:83:65:87:5e:fd:10:80:f8:1f:e3:c2:ed:
b1:f4:ac:47:00:b5:1a:2c:e2:66:a1:2d:96:b2:da:
bb:ae:48:b5:0b:23:be:7d:60:a2:34:a4:25:ac:af:
de:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BE:74:C6:67:CF:F1:D4:89:58:EC:E1:ED:B3:E3:C5:55:55:D2:EC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3233322e302f32312d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.123.232.0/21
Signature Algorithm: sha256WithRSAEncryption
31:6c:e8:9b:38:c8:b2:84:05:ca:49:12:c4:ea:59:fc:ef:45:
03:b4:0a:34:f4:01:93:58:be:e3:b2:38:9d:6a:c8:51:f4:30:
d4:98:b8:30:b6:69:37:c7:d5:20:8f:40:62:52:b7:e7:09:6e:
55:e0:c9:1b:a3:e6:1b:a0:4e:38:d7:2b:80:a1:36:7f:d2:7f:
10:ad:39:70:fc:41:dd:fb:b9:bf:97:41:f5:b3:69:e0:df:67:
ac:c6:0e:b1:81:a7:4f:ae:99:c4:9b:3b:55:23:db:5d:02:29:
44:db:71:57:06:12:72:0e:e7:2e:f4:6a:5f:7d:98:d7:13:66:
79:d7:a3:3f:f2:a3:11:70:77:cc:d2:ff:e0:f1:1d:52:00:ba:
bb:64:05:03:27:5e:15:e1:e9:c4:3b:73:82:49:7e:d3:56:ed:
cc:07:6d:aa:a2:d3:a3:8d:84:7d:d9:13:c7:e5:d5:d7:90:3e:
5a:72:83:85:76:13:f4:92:2a:0c:b0:89:4c:b7:2f:fb:44:8e:
25:31:3f:26:94:36:a8:10:98:4a:6a:72:63:b5:4e:13:1f:53:
9e:c6:86:3a:26:6b:45:7e:64:47:5a:a9:3b:e3:50:3b:04:d8:
f4:98:df:4e:cc:f7:b2:97:b3:02:d2:39:f7:1d:52:fe:b1:d3:
30:e3:82:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 03:32:47 2025 by rpki-client