Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133372e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e3133372e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: 6X+mIJft08Q9vfBNzfS4/2C7XN8seth2G4IrkZoWjSg=
Subject key identifier: 8D:2E:6A:BD:C6:6F:90:9C:8D:66:CB:63:22:44:68:8F:D3:1B:21:61
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2AE4FCF029721067433709F5148C19DCD78E49A3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133372e302f32342d3234203d3e20333935373933.roa
Signing time: Thu 29 May 2025 19:06:58 +0000
ROA not before: Thu 29 May 2025 19:01:58 +0000
ROA not after: Thu 28 May 2026 19:06:58 +0000
asID: 395793
IP address blocks: 145.79.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:e4:fc:f0:29:72:10:67:43:37:09:f5:14:8c:19:dc:d7:8e:49:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 29 19:01:58 2025 GMT
Not After : May 28 19:06:58 2026 GMT
Subject: CN=8D2E6ABDC66F909C8D66CB632244688FD31B2161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:de:a7:7a:33:05:c4:cf:1b:55:8b:bb:7e:23:
c3:7e:ab:28:47:3c:e0:0b:c9:78:7a:7b:7e:2d:3f:
61:01:b3:0c:29:12:b3:56:3d:a4:3e:72:db:1d:4a:
14:04:ea:54:f3:23:dc:8a:ea:21:21:87:fa:ec:5c:
d0:3d:cc:73:b9:1c:97:dc:0f:9d:4b:aa:54:30:8a:
81:14:1e:01:ea:f0:80:3b:9e:db:15:f5:8b:e1:a4:
c6:cd:e9:71:f7:ea:6d:c1:a8:a4:ca:2a:5b:98:b5:
30:e5:e9:c1:85:1f:2e:ef:90:e5:2d:75:69:11:6c:
62:93:4a:55:2f:fa:55:6e:2d:13:56:b0:21:00:b9:
68:27:ce:f2:6f:65:ce:49:2e:c9:15:be:1b:7a:23:
47:f6:12:d5:4b:5f:67:13:fe:91:00:a7:6b:d2:f5:
4e:c5:94:1c:01:41:49:76:0e:73:b2:88:48:8f:e2:
6d:5f:2a:13:15:df:11:32:a0:50:83:62:b9:30:94:
98:8a:8a:92:c6:18:55:0e:81:8c:10:a0:d4:9c:4a:
64:7a:ad:f5:e1:8b:51:b2:91:49:59:8b:32:57:1c:
88:68:d7:8a:af:4b:16:25:d3:4e:f7:dc:15:89:c0:
14:57:8b:df:79:12:f8:59:f9:88:30:71:3c:ff:a7:
d0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2E:6A:BD:C6:6F:90:9C:8D:66:CB:63:22:44:68:8F:D3:1B:21:61
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133372e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.137.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:85:1f:1d:37:b0:a4:15:95:7a:68:4e:7f:58:5f:fa:58:ad:
30:76:b8:41:ad:6d:86:da:e6:8f:7b:2f:41:2b:5a:b1:16:bc:
31:c4:e2:22:26:ba:e5:2a:7d:4a:67:0a:bc:06:d7:57:4d:3d:
13:90:91:80:cd:24:1b:af:f8:f2:e6:97:d9:51:2a:d7:70:16:
31:69:d5:c5:0c:9c:3e:37:85:05:d6:a7:f2:3e:d1:7d:27:b3:
51:12:b4:01:56:7e:47:4b:f9:e0:35:1c:f3:86:a9:ff:f8:d8:
b7:52:99:a0:3e:63:80:af:3e:7b:1c:a9:fb:3d:e7:3b:71:43:
6b:1c:ad:df:eb:47:f3:8d:9f:33:12:e2:5e:35:4a:c1:6f:7c:
be:65:92:50:79:6b:e1:64:4c:91:17:fb:9b:0d:f6:ea:67:aa:
e9:af:06:f1:0f:09:4f:a3:77:f4:7f:11:72:d3:48:a7:79:4f:
3b:1c:cb:37:23:d5:6d:18:17:d6:13:48:01:7a:6b:91:04:86:
8c:7d:aa:ea:79:6c:26:ab:7e:70:3c:b4:4c:c4:65:ab:a5:49:
bd:ec:c5:b1:3c:5f:1c:48:33:9d:c2:ae:d7:0f:9c:37:46:10:
be:7e:f1:32:eb:17:75:07:05:06:de:ff:7c:02:d7:9e:42:4d:
98:d7:28:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:35:29 2025 by rpki-client