Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134372e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3134372e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: Oh5wp2Qz1c1rL6IVBVKygcOn3MxdnlXhQY+Ef5LGzBA=
Subject key identifier: 90:20:A8:2A:68:72:A2:D5:95:83:E3:19:A4:38:38:23:D6:FB:7D:5E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 256AEBBE178D8598A60D7EA763D1EAC6B60CFAE3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134372e302f32342d3234203d3e2032393134.roa
Signing time: Wed 28 May 2025 10:27:37 +0000
ROA not before: Wed 28 May 2025 10:22:37 +0000
ROA not after: Wed 27 May 2026 10:27:37 +0000
asID: 2914
IP address blocks: 145.79.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:6a:eb:be:17:8d:85:98:a6:0d:7e:a7:63:d1:ea:c6:b6:0c:fa:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 28 10:22:37 2025 GMT
Not After : May 27 10:27:37 2026 GMT
Subject: CN=9020A82A6872A2D59583E319A4383823D6FB7D5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:ef:b8:f5:21:4c:0b:4b:82:f2:2b:e9:c3:
29:d5:a1:1c:4c:a8:c6:08:e3:28:c7:4c:34:66:a9:
13:c1:51:5c:86:31:9a:28:ea:7f:25:d1:63:cc:c5:
e3:07:9b:d1:3b:7c:63:59:59:ca:ca:a2:76:9d:b3:
f7:94:e5:0b:11:ad:c6:57:88:fc:6b:44:39:13:9d:
9e:c3:8e:9f:8e:62:84:37:dd:40:87:48:e0:f0:ed:
7e:aa:94:b9:bf:8e:03:39:17:60:1b:75:eb:e2:ff:
5d:f9:a3:01:0d:a7:b3:57:65:46:fa:67:e6:a5:8b:
13:33:d7:24:4e:d7:3d:23:14:a3:09:6f:12:81:fa:
3a:9f:ef:50:43:8e:72:fb:dd:3e:0d:da:51:44:26:
d5:96:26:cc:7d:87:c8:1b:ef:2e:51:17:80:95:84:
48:7a:2d:ee:8e:d1:ed:6d:58:08:7c:79:0e:e3:99:
14:fc:ba:b6:73:2a:5c:16:70:32:af:6f:88:b9:93:
2b:cb:86:09:e1:5c:5b:6f:f8:fc:e4:82:17:c4:57:
90:f0:3b:4a:ef:72:0b:79:9c:24:01:15:31:ef:66:
13:af:ab:d8:94:6e:b5:cf:32:5f:f0:7e:2e:ae:11:
45:4f:f8:76:02:c0:e6:b5:45:75:90:b5:29:98:85:
4c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:20:A8:2A:68:72:A2:D5:95:83:E3:19:A4:38:38:23:D6:FB:7D:5E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134372e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.147.0/24
Signature Algorithm: sha256WithRSAEncryption
94:56:df:89:14:cb:6f:c6:31:d7:5f:42:a0:dd:ad:67:9a:73:
bc:b1:8a:ac:57:8a:ba:50:f1:74:5f:d7:f9:27:a2:77:08:10:
7f:39:4d:d3:71:bc:6e:7b:de:60:99:83:8f:c0:4a:60:fd:52:
4f:9d:00:d8:6d:67:bc:80:37:62:c2:e1:e3:30:0d:50:79:bf:
95:b1:36:8f:a0:1f:04:5a:3b:49:f3:32:0a:9e:dd:47:79:ef:
46:17:d6:0b:a4:db:ab:17:ed:a7:fd:43:72:d1:8e:75:71:97:
57:3b:40:9f:0b:b5:a0:4b:a8:fe:26:63:cb:ed:d7:7e:d2:26:
de:94:be:9f:fb:0e:8c:67:f2:f4:8c:d0:2f:30:82:50:5a:86:
a1:c1:72:e1:13:19:86:00:fa:a4:0d:7b:9d:0e:bb:25:fa:82:
ca:22:3f:40:c1:46:34:a2:46:22:f1:23:9c:d3:b8:1d:41:48:
89:14:ed:88:d6:c5:20:d5:67:01:89:70:b5:97:9f:0c:7b:39:
d0:ae:eb:61:b1:0a:ba:b7:a5:14:83:e4:39:ba:d8:e3:c5:1d:
79:87:ea:69:41:50:1d:6c:88:5e:77:b7:97:61:0e:ab:f3:e5:
d3:ce:50:e1:1e:ec:9d:89:3e:39:05:e3:7c:30:65:53:a2:a7:
54:8a:72:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:32:59 2025 by rpki-client