Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133312e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3133312e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: 6KF3g+6DiY+fQ5ImTWurawlCCYm/te/ttSI7BSxpoeI=
Subject key identifier: EB:23:BD:1A:B0:D4:88:88:21:62:CD:BD:4A:82:BA:39:77:7B:0F:54
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 033C0EAB71E0986534CC1E7CA7D2B46CD84C5CF5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133312e302f32342d3234203d3e2032393134.roa
Signing time: Wed 28 May 2025 10:27:52 +0000
ROA not before: Wed 28 May 2025 10:22:52 +0000
ROA not after: Wed 27 May 2026 10:27:52 +0000
asID: 2914
IP address blocks: 145.79.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:3c:0e:ab:71:e0:98:65:34:cc:1e:7c:a7:d2:b4:6c:d8:4c:5c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 28 10:22:52 2025 GMT
Not After : May 27 10:27:52 2026 GMT
Subject: CN=EB23BD1AB0D488882162CDBD4A82BA39777B0F54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:67:fd:27:e1:b3:ab:94:31:bf:9d:46:53:f5:
7e:43:ea:cd:f4:a0:85:d2:e2:e0:d3:dd:4f:a9:36:
69:9e:4c:ab:05:71:6a:75:9a:8a:71:12:28:01:35:
a1:b2:4e:74:3e:a9:cb:32:99:3b:79:e5:a6:4f:d1:
10:78:fe:1a:03:7a:0f:80:b5:79:62:5c:3b:81:61:
9a:14:17:07:b7:14:36:bb:5a:8a:84:ca:a2:99:41:
2e:96:fe:01:cc:b8:ae:13:89:53:ae:95:f3:98:2e:
5c:87:69:59:43:62:cf:6c:00:b2:03:7e:cf:c8:9d:
a3:46:2d:f8:f4:60:62:c4:94:e6:64:c0:c1:b8:64:
94:77:c7:7d:b5:29:99:5f:63:5a:19:4c:0b:6b:b5:
70:f9:71:e4:87:3e:1f:15:bd:54:45:ea:73:34:05:
ed:ee:15:28:c9:fc:ed:46:29:2f:93:a5:39:d9:11:
ba:a8:df:42:4c:f4:9b:03:7b:e4:a4:b3:90:8c:44:
49:06:d5:86:1f:b8:9c:f1:43:b5:9e:5e:75:f8:30:
42:60:6e:a6:a6:a2:2d:39:3e:12:1d:f1:ed:d3:e1:
3c:3e:a0:02:06:5f:af:39:05:f4:f0:29:33:38:3a:
e1:c8:da:1b:39:8e:94:76:b3:77:b4:7f:3d:fd:30:
81:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:23:BD:1A:B0:D4:88:88:21:62:CD:BD:4A:82:BA:39:77:7B:0F:54
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133312e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.131.0/24
Signature Algorithm: sha256WithRSAEncryption
46:8a:94:05:9d:00:ca:b8:0a:2a:31:5c:8b:e0:69:62:15:a8:
5b:38:1c:b8:0a:2c:68:7d:f3:da:92:1b:d0:e8:87:fe:54:bb:
d0:9b:bd:f9:65:ef:f4:f8:94:5a:eb:08:ae:69:77:cb:3b:3c:
07:63:c3:f5:e1:7d:f2:04:e6:88:77:5e:80:16:4a:69:a2:5a:
f5:76:51:1f:6c:89:1f:2b:a0:bb:a1:88:6d:7e:67:f3:f5:f0:
f4:7a:56:51:88:ad:ef:ae:85:fa:ed:3d:91:62:09:bc:f0:7a:
6e:7b:ad:d0:90:7b:15:21:c2:89:59:fb:b9:d5:40:69:06:8b:
20:3b:da:58:88:f6:fa:c6:50:1b:df:4f:a9:d9:7b:fd:ca:18:
fe:ac:08:5b:b9:2a:d7:87:6d:b5:48:05:a1:9f:a5:eb:f0:a8:
81:17:14:10:b0:a6:e4:ff:11:4a:99:2d:e4:37:de:5d:05:81:
4e:a0:7e:b8:e7:28:8d:1c:f4:22:85:6a:5e:2a:b5:21:70:cc:
ac:18:ab:33:80:48:0d:10:24:b3:ee:c1:1f:bc:c2:e0:37:fc:
7c:9d:1f:85:69:c7:f0:25:9c:60:7b:ef:55:8a:18:15:1a:fe:
89:4a:4d:78:46:34:31:70:83:e9:21:9c:df:43:f6:f8:1f:4d:
fa:8f:db:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:27:58 2025 by rpki-client