Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3234302e302f32302d3332203d3e203531313637.roa
File: 3130392e3132332e3234302e302f32302d3332203d3e203531313637.roa (raw, json)
Hash identifier: dNgYPBiDjKfPueno27/Sb+tIIdym+nRGtJS3N7IQ9uY=
Subject key identifier: D2:52:E7:94:D5:AE:79:3D:0E:4C:1C:88:EB:23:B4:FA:DA:23:14:18
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 70A35FBBD5C92BFDD2E7BC8CCB50BA8866F4ECEC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3234302e302f32302d3332203d3e203531313637.roa
Signing time: Mon 27 Jan 2025 09:45:26 +0000
ROA not before: Mon 27 Jan 2025 09:40:26 +0000
ROA not after: Mon 26 Jan 2026 09:45:26 +0000
asID: 51167
IP address blocks: 109.123.240.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:a3:5f:bb:d5:c9:2b:fd:d2:e7:bc:8c:cb:50:ba:88:66:f4:ec:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:26 2025 GMT
Not After : Jan 26 09:45:26 2026 GMT
Subject: CN=D252E794D5AE793D0E4C1C88EB23B4FADA231418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:1b:09:72:e2:2e:d6:45:51:cb:b3:30:97:
64:c6:31:fc:45:77:9c:fa:36:a8:f6:65:0b:af:ba:
76:d8:df:49:1b:e9:6d:c9:77:d0:15:31:14:02:fb:
92:97:42:12:de:2b:8e:aa:d4:54:6b:b9:97:26:f9:
84:ab:95:27:c1:1c:16:66:6c:8a:e9:cd:cd:fd:dc:
d0:2c:b2:9a:a5:36:b2:0f:18:c3:fc:87:b1:c0:99:
0f:85:4c:7b:01:f5:46:a3:43:82:f8:e0:96:2e:0e:
f9:cf:b1:87:97:13:16:48:0d:2f:c2:ac:d5:6a:25:
5e:59:c0:4e:72:e0:74:20:67:32:9f:8d:0c:8a:19:
12:1b:bc:e2:f9:0b:54:78:8f:2e:05:20:92:07:66:
b8:6b:fb:8d:07:74:fc:5a:8e:76:d7:0e:85:70:65:
5e:30:14:01:73:84:d3:f7:a0:b4:15:4c:9e:3f:c2:
1b:6c:4a:7e:1c:b5:32:54:bf:f1:cf:de:fe:8b:af:
ef:60:ed:28:31:3e:6f:87:26:a1:15:38:02:ab:ff:
30:c9:f8:59:bb:8f:51:80:05:53:9c:47:12:91:47:
8c:9f:b1:ce:46:87:9e:f4:3e:6d:9d:9d:ec:38:a5:
87:2b:e1:23:7f:d3:84:bb:ea:52:ee:15:86:f2:79:
89:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:52:E7:94:D5:AE:79:3D:0E:4C:1C:88:EB:23:B4:FA:DA:23:14:18
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3234302e302f32302d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.123.240.0/20
Signature Algorithm: sha256WithRSAEncryption
18:f5:42:58:83:5a:2b:85:84:c7:54:fd:cf:a9:fb:03:d3:bc:
13:a1:bf:67:58:4f:cf:e8:8a:33:14:13:f2:c6:4b:32:f3:ed:
8e:1a:8e:9f:7f:63:fb:80:db:8c:16:92:dd:05:42:50:90:cf:
0d:e4:78:01:22:ff:b0:8e:48:91:b0:d1:74:76:84:00:56:60:
04:46:d0:df:e8:18:97:7b:2e:a5:bd:d2:1e:0a:07:c0:1a:43:
26:0d:a6:1e:f3:ab:a9:a9:44:57:f1:b2:79:fe:91:27:c6:da:
13:32:d5:7f:da:dd:28:c6:c2:cf:17:8f:0e:63:af:4e:63:1c:
ae:86:c3:1f:08:e7:e0:69:49:e9:88:6c:63:55:f7:48:44:60:
9c:c0:7b:f4:a8:a9:bf:1d:3b:d3:8e:39:68:df:5f:5b:b3:a6:
04:6b:52:1e:82:aa:a8:7f:b0:08:ea:ba:28:c4:a3:77:31:21:
5f:0a:08:b2:a7:ac:fe:a2:92:b3:07:c8:da:52:3d:d7:8a:e9:
c6:58:2b:24:52:bb:4d:7a:cc:54:36:5f:43:5b:9f:e5:2d:c5:
1c:15:53:82:f7:be:e5:9e:81:29:cd:2b:cb:5a:c8:24:9b:2b:
ba:85:db:f0:e8:e8:ad:d1:cb:24:b7:78:68:82:85:6a:62:b9:
b9:94:0b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:00 2025 by rpki-client