Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134332e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3134332e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: UZ/DDMYOXHArojnbx5Ql5W3KTjfZlBb2sAYMxzx4LhU=
Subject key identifier: B3:76:EA:33:72:8C:72:41:45:6A:E3:82:A0:29:BF:EB:73:C5:E4:93
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2BB5319035FF3720BAC273418ACD6715F6C099F6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134332e302f32342d3234203d3e2032393134.roa
Signing time: Wed 28 May 2025 10:27:44 +0000
ROA not before: Wed 28 May 2025 10:22:44 +0000
ROA not after: Wed 27 May 2026 10:27:44 +0000
asID: 2914
IP address blocks: 145.79.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:b5:31:90:35:ff:37:20:ba:c2:73:41:8a:cd:67:15:f6:c0:99:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 28 10:22:44 2025 GMT
Not After : May 27 10:27:44 2026 GMT
Subject: CN=B376EA33728C7241456AE382A029BFEB73C5E493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:71:ae:13:bc:b1:4a:ec:2f:e2:69:db:4b:b3:
b1:ed:86:41:df:06:8d:09:bb:ab:03:b2:08:54:ca:
63:c3:c7:28:19:a7:e9:01:3a:da:a8:d4:26:23:30:
08:f2:b3:35:c9:b5:c1:af:e3:24:db:ca:06:1d:cc:
cb:0b:17:4e:27:7c:08:89:03:9c:53:f8:bd:bc:34:
1a:74:8a:e4:bb:d2:8b:d8:cb:7b:92:72:8c:e4:94:
4e:0b:7c:00:14:33:31:60:3b:50:2c:e8:f7:5e:9a:
f2:ca:4b:67:ce:09:94:6f:a6:fe:45:45:30:e1:9d:
19:3e:62:38:81:cc:be:e6:ea:18:3e:86:4c:91:2c:
80:d4:a6:18:65:40:cd:8b:a0:dc:a1:eb:9e:ce:ea:
b1:21:72:98:33:bf:e5:93:35:ac:5e:a4:9b:c5:0a:
14:3d:64:87:fd:4e:31:91:b7:88:2d:89:59:b9:30:
85:d8:94:a0:f7:8b:5a:aa:76:8b:97:ac:a3:5c:ed:
98:de:b0:b9:d5:e2:84:bd:a4:dc:de:c8:57:5e:6f:
a1:9a:91:73:d7:88:a4:3e:3a:a8:2b:b7:6b:05:a6:
a0:25:ad:a4:63:4e:0c:c4:08:f7:a4:9f:b0:ad:6b:
e6:71:34:4a:f1:55:d9:3c:4e:a4:03:1b:d6:41:08:
42:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:76:EA:33:72:8C:72:41:45:6A:E3:82:A0:29:BF:EB:73:C5:E4:93
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134332e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.143.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:1b:62:45:56:49:c7:c2:01:bf:ae:15:c5:fb:8b:a7:42:92:
f5:28:bf:53:bd:6c:61:d7:e3:24:1a:2f:a6:44:92:93:82:e5:
e4:18:e9:f7:29:b1:a6:f7:c2:7e:88:48:27:ff:90:d6:8a:4f:
55:9b:97:30:7e:1b:19:82:a6:93:9a:80:30:df:c8:08:f9:ef:
a7:9d:c0:2c:a0:ae:07:54:f1:33:87:3c:32:da:e4:01:1d:9b:
29:b2:c0:75:cd:4b:8f:02:6f:28:63:8a:c8:55:e2:f0:d8:ec:
8f:e3:7a:dd:e3:11:2c:b7:86:81:47:91:2a:11:07:82:64:a1:
38:b2:fd:da:f4:5b:5c:17:f4:45:d7:52:68:9c:db:cc:87:0a:
44:78:1a:35:c8:73:fa:5a:fe:ac:e2:ed:55:0f:c5:e8:fe:c4:
02:87:9d:a8:c2:3c:87:e2:25:51:87:0a:be:7c:4a:0f:5c:19:
08:16:a6:a0:2f:51:c1:15:33:31:59:9b:fa:a9:a7:47:86:b8:
6a:3b:73:60:b6:d3:26:4b:c9:5d:c3:1d:81:fb:d3:62:1d:d1:
82:8a:b6:7a:c8:94:db:5f:64:dd:15:28:49:9e:bc:3e:2e:ce:
cd:6e:22:22:06:d5:84:bb:cf:2c:0e:54:b9:60:c7:fe:3a:00:
3f:78:9b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:33:44 2025 by rpki-client