Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133342e302f32342d3234203d3e2039333034.roa
File: 3134352e37392e3133342e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: Vwi8y09b42cHQxSzvUOqR1Ppc+3RM7Q+uSIZrejAZ5o=
Subject key identifier: 85:9A:59:F0:B4:B5:09:CF:DC:B8:BF:B8:A2:F1:82:A5:4A:21:D0:33
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3F4FC6287AF15E276FF0C2947DB3B584C03E4504
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133342e302f32342d3234203d3e2039333034.roa
Signing time: Tue 03 Jun 2025 08:29:45 +0000
ROA not before: Tue 03 Jun 2025 08:24:45 +0000
ROA not after: Tue 02 Jun 2026 08:29:45 +0000
asID: 9304
IP address blocks: 145.79.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:4f:c6:28:7a:f1:5e:27:6f:f0:c2:94:7d:b3:b5:84:c0:3e:45:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 3 08:24:45 2025 GMT
Not After : Jun 2 08:29:45 2026 GMT
Subject: CN=859A59F0B4B509CFDCB8BFB8A2F182A54A21D033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cd:4f:70:c5:28:8e:a8:7a:f5:f1:7b:70:70:
5a:19:f8:72:31:97:2a:76:4d:b9:6b:2e:e4:a0:ba:
90:27:d0:ff:f6:fb:e7:ec:cf:d9:0e:2f:d4:5b:ab:
71:f9:e1:24:70:f7:08:b1:8e:56:bf:71:16:f2:dc:
2a:71:4b:b7:8e:6b:f7:44:c3:ac:be:51:e7:3d:21:
af:00:d9:10:dc:db:be:4f:0b:cf:aa:93:00:06:72:
b7:32:91:9d:99:81:28:e1:58:37:e5:30:d1:de:ff:
d1:d4:34:cb:28:ca:e1:0a:bf:91:d9:61:63:de:45:
42:b9:16:5b:38:45:e8:05:c6:ec:90:90:ec:f4:16:
1c:bc:a4:63:e1:b3:e8:d6:12:20:0a:6d:59:ce:a5:
33:9a:50:a5:0d:c5:cc:aa:8d:d3:27:9f:3a:70:b5:
2d:52:03:c2:7c:bf:7f:19:a3:82:33:2d:12:43:b8:
22:a6:da:fc:d0:1a:de:14:ff:37:86:c2:4e:48:85:
52:52:a9:e5:de:6f:dc:c3:8b:ef:56:2c:fb:d4:da:
82:88:5d:67:0b:d3:05:c7:98:b0:d8:85:26:40:45:
76:4f:75:e6:29:80:2f:47:6f:8a:37:ad:87:ec:9a:
fb:80:35:0c:5e:55:73:78:fe:aa:93:2d:0e:4a:6c:
b9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9A:59:F0:B4:B5:09:CF:DC:B8:BF:B8:A2:F1:82:A5:4A:21:D0:33
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133342e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.134.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:be:eb:86:f2:30:9e:6f:04:26:1d:1a:a0:68:2c:0e:9f:8b:
db:c1:49:38:c0:ad:1e:b5:d1:be:95:2a:9c:36:d8:d1:ac:29:
68:69:c0:f7:f6:56:af:51:76:ae:a3:1f:cc:b1:c0:51:74:31:
87:a4:9a:f1:67:3f:70:8f:9b:63:99:73:4d:27:8e:a3:26:2e:
24:45:cf:b3:ec:3a:85:ba:b6:da:d7:e0:f7:66:a9:61:6a:eb:
e7:12:71:c4:f0:de:63:2d:0f:7c:9e:be:e3:db:cd:28:dc:a7:
2b:50:2b:fe:bd:8f:aa:ca:de:b5:a8:2c:ee:9a:c5:fa:3b:32:
f0:97:98:9f:f8:17:75:e7:d3:39:19:cd:6c:8d:7e:8a:91:fe:
a4:5b:89:6b:78:da:1b:a9:a6:4a:7b:44:5f:3b:f6:1f:2d:69:
aa:6c:d9:27:30:bb:46:a1:ab:bc:5f:da:ba:6f:42:1d:63:c6:
10:37:5c:02:f5:2a:da:77:15:3a:7f:bf:e7:f6:9c:d9:f4:3c:
1c:af:4d:bc:ce:75:c0:4a:e5:81:3c:68:76:e0:d2:88:01:61:
4d:85:1d:1b:35:82:86:8f:1a:40:ec:51:3c:d1:42:45:07:22:
69:53:4e:2e:67:41:1f:b1:9e:38:38:fc:72:c4:ac:30:3c:e0:
29:4d:ef:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:22:38 2025 by rpki-client