Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134342e302f32332d3234203d3e2039333034.roa
File: 3134352e37392e3134342e302f32332d3234203d3e2039333034.roa (raw, json)
Hash identifier: 6OifbtucMM0Jyo8x6kKKUNBMdpjxkZmbIkIgosRT0BE=
Subject key identifier: AD:55:F8:EC:41:1A:33:EE:0E:0B:E2:2A:51:BD:45:02:1F:DF:CD:73
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 177A4C998A9F562E5AE099216C00190C303C560C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134342e302f32332d3234203d3e2039333034.roa
Signing time: Sat 31 May 2025 20:06:03 +0000
ROA not before: Sat 31 May 2025 20:01:03 +0000
ROA not after: Sat 30 May 2026 20:06:03 +0000
asID: 9304
IP address blocks: 145.79.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:7a:4c:99:8a:9f:56:2e:5a:e0:99:21:6c:00:19:0c:30:3c:56:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 31 20:01:03 2025 GMT
Not After : May 30 20:06:03 2026 GMT
Subject: CN=AD55F8EC411A33EE0E0BE22A51BD45021FDFCD73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:81:f7:8f:10:39:64:37:9e:28:fa:59:dc:9b:
17:73:8e:1f:ff:d9:23:33:ca:ca:2b:f2:8a:52:c5:
dd:dc:b3:c0:e6:56:a2:9b:d8:f6:ed:4d:3d:85:e5:
d7:f8:45:29:56:13:2d:85:88:ac:03:f1:02:92:34:
7f:91:4e:ef:4f:ad:35:f3:30:cb:17:30:89:70:e8:
3f:42:10:b5:8d:25:3f:3b:ca:ae:8b:68:ee:a3:53:
80:ea:e0:09:6e:36:7e:0e:43:19:f5:c1:19:9a:2e:
99:18:a1:c3:d4:e6:92:10:4a:6f:fb:ee:6c:94:0b:
f2:dc:87:66:94:4e:7d:f8:96:d2:da:aa:38:83:2e:
5b:a1:61:37:cd:54:53:6d:06:4e:14:a9:fe:c6:30:
3f:e8:0f:bf:fb:f4:62:94:45:1f:5c:02:a8:20:ef:
49:a7:f9:2e:d8:1a:75:d0:7d:c4:ca:4e:d8:83:8b:
ef:12:fa:44:6d:c0:63:2c:a8:c2:9c:21:7a:5d:3a:
64:bf:ae:93:41:65:b1:79:fb:08:a0:3e:f0:f4:cb:
ac:1c:bb:2a:ed:d0:4c:a4:aa:f8:c7:7e:ba:e0:07:
66:bb:7e:7c:56:e5:24:a9:8c:63:b5:34:d8:b1:cc:
13:e1:ab:e4:6b:55:17:0f:5a:24:04:a0:e4:75:12:
7b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:55:F8:EC:41:1A:33:EE:0E:0B:E2:2A:51:BD:45:02:1F:DF:CD:73
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134342e302f32332d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.144.0/23
Signature Algorithm: sha256WithRSAEncryption
06:b2:ac:cd:61:4a:67:1b:8b:42:26:7b:d0:2a:ff:9b:70:7f:
11:bb:84:8f:71:3b:60:f3:92:54:e6:12:b6:91:72:8b:92:a3:
61:aa:3f:1b:13:0b:d4:61:b7:89:63:04:0b:b0:09:36:73:f6:
1a:aa:2e:63:56:04:25:80:f4:9e:24:4c:9b:30:65:e5:d8:9d:
bf:3d:22:75:fb:ab:e3:e7:79:48:35:85:45:2e:3b:15:1d:4b:
39:d9:52:26:a8:3e:d5:12:1f:54:f9:f6:d5:71:ba:0d:43:4a:
51:d0:86:ac:f0:c0:94:f6:48:32:fd:cf:c8:1a:9e:06:58:2f:
d5:36:6f:2f:b1:ca:37:c2:12:2c:d5:50:cf:e8:03:d9:3c:1c:
69:d2:c9:19:a5:0c:20:71:88:6f:bd:0a:ac:d0:aa:c5:66:95:
95:74:ae:ec:32:59:cd:10:6a:84:b4:b5:7a:28:70:0f:2b:5c:
c9:46:66:38:9b:7d:5f:ae:dd:11:b1:6a:8f:77:b3:64:df:66:
28:4c:44:2e:74:1f:77:6b:6a:ae:58:19:c4:c0:67:51:f1:34:
b0:11:ed:2e:1a:58:ea:c1:b8:7e:0f:d2:cd:a7:64:59:c3:30:
94:42:e8:00:74:26:ca:41:7c:27:d6:10:a8:16:16:0b:c2:4c:
07:e1:f7:fc
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUF3pMmYqfVi5a4JkhbAAZDDA8VgwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA1MzEyMDAxMDNaFw0yNjA1MzAyMDA2MDNaMDMxMTAvBgNV
BAMTKEFENTVGOEVDNDExQTMzRUUwRTBCRTIyQTUxQkQ0NTAyMUZERkNENzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBgfePEDlkN54o+lncmxdzjh//
2SMzysor8opSxd3cs8DmVqKb2PbtTT2F5df4RSlWEy2FiKwD8QKSNH+RTu9PrTXz
MMsXMIlw6D9CELWNJT87yq6LaO6jU4Dq4AluNn4OQxn1wRmaLpkYocPU5pIQSm/7
7myUC/Lch2aUTn34ltLaqjiDLluhYTfNVFNtBk4Uqf7GMD/oD7/79GKURR9cAqgg
70mn+S7YGnXQfcTKTtiDi+8S+kRtwGMsqMKcIXpdOmS/rpNBZbF5+wigPvD0y6wc
uyrt0EykqvjHfrrgB2a7fnxW5SSpjGO1NNixzBPhq+RrVRcPWiQEoOR1Env5AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUrVX47EEaM+4OC+IqUb1FAh/fzXMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM0
MzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzOTMzMzAzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZFP
kDANBgkqhkiG9w0BAQsFAAOCAQEABrKszWFKZxuLQiZ70Cr/m3B/EbuEj3E7YPOS
VOYStpFyi5KjYao/GxML1GG3iWMEC7AJNnP2GqouY1YEJYD0niRMmzBl5didvz0i
dfur4+d5SDWFRS47FR1LOdlSJqg+1RIfVPn21XG6DUNKUdCGrPDAlPZIMv3PyBqe
Blgv1TZvL7HKN8ISLNVQz+gD2TwcadLJGaUMIHGIb70KrNCqxWaVlXSu7DJZzRBq
hLS1eihwDytcyUZmOJt9X67dEbFqj3ezZN9mKExELnQfd2tqrlgZxMBnUfE0sBHt
LhpY6sG4fg/SzadkWcMwlELoAHQmykF8J9YQqBYWC8JMB+H3/A==
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:24:04 2025 by rpki-client