Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134362e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e3134362e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: 4fRtM32bWNbXSwMBdEy1rsR5YxaTQqOPppbbpp/Et3A=
Subject key identifier: 76:4E:89:A7:18:A0:A4:2C:6E:1A:12:0B:66:DA:28:54:CD:9D:D9:25
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 020143C1E8AD978F269DDE57A48F0416A1EC5666
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134362e302f32342d3234203d3e20333935373933.roa
Signing time: Thu 29 May 2025 19:06:54 +0000
ROA not before: Thu 29 May 2025 19:01:54 +0000
ROA not after: Thu 28 May 2026 19:06:54 +0000
asID: 395793
IP address blocks: 145.79.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:01:43:c1:e8:ad:97:8f:26:9d:de:57:a4:8f:04:16:a1:ec:56:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 29 19:01:54 2025 GMT
Not After : May 28 19:06:54 2026 GMT
Subject: CN=764E89A718A0A42C6E1A120B66DA2854CD9DD925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5e:ff:49:28:58:b6:bd:ab:84:5c:5b:2a:ed:
37:d4:ae:31:a1:e7:79:f9:49:23:68:92:70:ce:50:
0b:94:37:92:fb:3e:f8:b2:7a:fc:2a:f3:a5:c3:ba:
d6:89:62:05:c4:ea:70:3f:3c:5b:57:e8:74:58:9b:
40:14:8b:d1:7d:04:31:da:4b:75:42:bd:22:2f:e8:
9c:8b:1a:d3:69:05:5b:de:9e:ce:2a:fb:d9:6d:3a:
c9:e4:22:6f:b0:d3:7f:ad:3c:ba:8b:db:93:70:b3:
2e:87:8e:1d:65:d7:d0:43:96:bf:77:d7:33:1b:74:
26:07:0a:e1:02:2b:d1:b3:d9:5a:12:1a:fe:92:d5:
c3:47:04:8c:51:34:9f:83:5e:c6:ab:78:0e:8f:85:
85:0b:0c:f2:3f:c3:b4:b7:d5:63:8a:e3:1e:d3:f3:
89:a8:0c:81:b5:03:d3:d9:d0:cf:e4:02:66:dc:f3:
29:90:32:54:19:c4:c0:29:ab:69:df:9b:47:70:5d:
1d:0f:0d:16:7e:f5:a9:af:91:e7:b7:40:4b:37:96:
79:d5:02:68:29:bf:69:00:b9:85:ab:b9:9b:47:cb:
dd:6c:7b:b6:bf:83:c1:55:f7:30:51:18:af:b0:7c:
10:6a:40:a3:d4:91:73:99:cb:ce:84:27:f0:87:9d:
18:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4E:89:A7:18:A0:A4:2C:6E:1A:12:0B:66:DA:28:54:CD:9D:D9:25
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134362e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.146.0/24
Signature Algorithm: sha256WithRSAEncryption
84:bc:5e:06:5e:f1:fc:82:fe:ce:2c:68:34:35:a2:8a:76:52:
18:04:c8:50:af:19:dd:df:fe:f9:3c:2e:9f:de:6b:d2:94:6a:
88:19:e4:cd:63:09:3b:98:9b:b2:24:5c:7e:9e:14:4e:89:39:
71:75:54:2d:29:97:a3:9f:d9:7f:64:25:7d:d7:0b:30:7d:24:
90:bf:21:04:09:6e:b8:9b:77:e6:97:fc:78:fe:ec:f5:9c:7b:
57:18:81:e6:4d:aa:db:55:5a:a6:f9:a0:db:b8:b9:3e:09:bb:
c6:ae:e9:1f:c9:1c:7e:60:fc:2c:85:ad:04:06:7a:80:7f:7d:
f2:1c:61:9e:e5:e5:28:5e:15:ae:51:8b:c7:99:8e:54:92:89:
b5:78:d0:5b:a9:a6:43:2e:46:9f:00:0d:24:eb:be:02:a2:07:
2c:b7:77:50:dc:96:34:77:c6:92:1f:63:87:83:06:07:6b:37:
d8:1f:f9:5f:79:1c:f0:d3:ed:f3:b0:f7:3e:10:40:a0:be:80:
64:52:68:6b:4c:73:9f:76:43:12:f2:cb:1c:64:17:52:4e:4c:
2a:62:c5:14:72:6b:85:df:0e:50:b7:c1:17:14:79:4e:36:b5:
65:3a:b9:bc:43:07:9d:70:a6:b5:c5:c5:08:48:98:dc:5f:7b:
5b:13:85:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:39:27 2025 by rpki-client