Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3133342e3235352e3137362e302f32312d3332203d3e203531313637.roa
File: 3133342e3235352e3137362e302f32312d3332203d3e203531313637.roa (raw, json)
Hash identifier: qhdY4mvI+Lp2jg2yOOx3flPZK/gM16gCeB8gX2Y3lvA=
Subject key identifier: A4:11:79:1E:67:02:D5:E6:E2:39:B9:BD:74:60:71:30:6D:F1:2B:29
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 568B938B19E66CCB3DC603C85BF0297550680AEC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3133342e3235352e3137362e302f32312d3332203d3e203531313637.roa
Signing time: Thu 29 May 2025 17:46:34 +0000
ROA not before: Thu 29 May 2025 17:41:34 +0000
ROA not after: Thu 28 May 2026 17:46:34 +0000
asID: 51167
IP address blocks: 134.255.176.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 12:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:8b:93:8b:19:e6:6c:cb:3d:c6:03:c8:5b:f0:29:75:50:68:0a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 29 17:41:34 2025 GMT
Not After : May 28 17:46:34 2026 GMT
Subject: CN=A411791E6702D5E6E239B9BD746071306DF12B29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:de:b3:d5:76:fa:13:1f:55:76:9d:f1:88:e7:
7b:88:9f:69:f4:12:33:f3:e8:77:4e:52:65:72:4f:
ef:46:63:72:22:3f:a6:0a:15:29:79:df:db:ad:2f:
c9:76:3a:c1:bd:76:e9:6f:d5:f1:55:dd:8b:15:23:
32:da:0c:c9:fc:b0:79:b4:4a:2a:72:56:29:5a:e9:
6e:7f:1d:8c:f9:77:72:f7:c6:dc:d7:7c:b7:9f:08:
63:fa:7a:9e:2f:c1:88:e2:7e:a4:85:5d:f6:4b:bf:
0f:05:ea:ce:10:b2:16:39:72:f6:6b:bd:ac:6c:29:
5e:e9:a9:82:22:c3:02:a5:cf:dd:23:66:51:ce:6e:
6f:88:54:13:bf:91:a3:f9:a7:8e:fa:3f:ce:47:4c:
4a:a6:89:b4:dd:b5:77:df:b8:91:7f:5e:03:d6:c6:
d7:27:68:a2:9f:66:81:e3:6c:b7:60:fa:2d:84:f4:
85:dd:89:99:81:fe:9d:2c:06:92:f5:9a:bf:cf:d8:
ed:19:ce:f0:92:eb:1c:4d:b2:b0:ce:7c:f6:55:0b:
89:dc:39:b7:db:7f:b9:b5:0b:17:40:54:83:67:d0:
9d:36:2b:9f:0a:5c:71:74:bf:bc:38:55:e1:ee:63:
42:00:37:30:4d:f4:bb:a7:a9:c7:32:fc:51:49:1b:
20:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:11:79:1E:67:02:D5:E6:E2:39:B9:BD:74:60:71:30:6D:F1:2B:29
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3133342e3235352e3137362e302f32312d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.255.176.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:fc:32:78:45:b3:d1:6c:c1:a5:b5:c4:60:65:53:b1:d6:b8:
3b:32:49:ef:64:95:b1:77:b1:82:73:29:07:6f:7e:c7:13:4a:
6f:38:24:1a:83:aa:50:92:54:13:4f:3b:49:52:0c:5d:b3:7b:
06:d2:fc:a6:28:83:84:22:0a:5c:85:89:f9:f8:de:d9:57:ec:
9a:42:a3:6b:cc:c3:f8:f8:6d:fd:8a:e6:6f:2a:52:0a:9a:f4:
eb:b6:b3:47:c6:74:09:01:fa:c3:dd:29:85:e7:c4:93:0e:5a:
a6:d3:ca:13:85:50:d4:99:1a:79:a3:f0:e6:5a:c9:15:f9:c8:
b5:eb:fe:79:b8:7a:b8:9d:35:53:d2:5f:0d:b4:df:9b:af:91:
21:90:2f:88:65:b8:88:20:34:3a:5e:18:e3:43:a6:70:62:a3:
70:71:8e:20:84:8a:ad:27:98:64:42:3b:5e:22:3f:24:35:8d:
8e:c1:e4:0a:c7:08:c6:43:06:6b:6f:32:43:40:27:3d:d7:22:
87:98:27:67:f0:01:ee:51:75:07:f3:0e:33:69:41:ef:b7:b1:
c2:fb:b9:cc:52:c6:ff:0e:2b:3a:c6:ba:f0:bb:a6:90:81:91:
3b:ab:17:63:64:ac:6c:9d:f0:64:71:fb:77:37:d9:37:1d:0e:
76:36:97:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:13:32 2025 by rpki-client