Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134372e302f32342d3234203d3e2039333034.roa
File: 3134352e37392e3134372e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: eIFP+TrjNGEzo/wwF1OFznFhGvUrCaXWzxAXKM29Jkk=
Subject key identifier: 33:EA:D7:14:7C:33:27:EB:6D:97:4F:4C:6C:CA:2B:EF:3D:57:99:FE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2DABFD1940CEE6443D05A3A259FA62D7508B53A2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134372e302f32342d3234203d3e2039333034.roa
Signing time: Tue 03 Jun 2025 08:29:43 +0000
ROA not before: Tue 03 Jun 2025 08:24:43 +0000
ROA not after: Tue 02 Jun 2026 08:29:43 +0000
asID: 9304
IP address blocks: 145.79.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:ab:fd:19:40:ce:e6:44:3d:05:a3:a2:59:fa:62:d7:50:8b:53:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 3 08:24:43 2025 GMT
Not After : Jun 2 08:29:43 2026 GMT
Subject: CN=33EAD7147C3327EB6D974F4C6CCA2BEF3D5799FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:89:60:6e:25:51:ee:3a:df:ef:5d:c8:e2:
f0:94:60:11:a0:74:a9:5c:6c:03:44:8f:47:fe:02:
d2:ed:b5:d1:d7:2b:07:87:76:85:84:09:ba:e5:88:
7a:b2:45:78:64:62:43:b4:cc:ff:99:c7:1e:53:c6:
f5:94:e4:b4:66:11:aa:d4:75:54:26:95:2f:79:80:
db:5d:10:bc:c9:57:e3:f4:77:3f:61:8d:8c:98:94:
d8:bf:f1:48:9d:68:7b:da:00:e9:fa:91:63:c9:1d:
6c:52:9c:33:c0:c2:9b:fd:bd:69:d0:31:5f:48:a2:
da:cf:92:89:0a:74:16:f7:81:24:74:8d:cd:df:26:
de:bc:49:07:07:a6:51:b3:fd:c7:60:aa:68:89:44:
05:88:09:c1:b0:a9:6e:e7:77:5d:60:55:99:bb:49:
02:f1:4e:ed:9a:1f:e1:bc:32:0c:5b:b6:44:8c:5b:
7a:6f:74:53:dd:a8:ed:9f:76:78:41:7f:e0:a1:7c:
d3:38:61:5f:20:5e:9c:67:d6:15:93:32:16:a9:b6:
41:e2:d7:db:b3:ef:f7:e4:b7:ad:4d:13:22:24:d9:
8d:b4:7d:96:2c:20:37:c0:09:62:32:8d:94:9b:e8:
6b:a6:5e:20:d5:f0:98:be:38:40:51:49:06:83:68:
a5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EA:D7:14:7C:33:27:EB:6D:97:4F:4C:6C:CA:2B:EF:3D:57:99:FE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134372e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.147.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:3d:9e:f3:00:51:62:75:4b:73:d9:15:89:d1:6f:31:84:09:
68:4f:7d:8d:52:14:b5:fa:46:59:5c:b7:3f:f7:60:2a:4c:e0:
a0:12:09:48:63:ef:96:f2:17:00:6d:8d:8d:2f:c7:c7:5a:11:
fb:3e:d2:39:e2:79:b3:47:30:19:f9:cf:ce:b6:4e:e2:80:f9:
a1:b7:8f:4b:3e:75:17:a3:ea:c1:c3:66:ed:2a:4f:3a:e8:18:
0c:30:76:52:c0:5d:ec:c3:ed:bc:36:76:a0:a2:d3:bb:c4:ff:
29:32:58:d5:09:0a:8a:28:b2:e5:63:d1:c2:25:46:57:6a:69:
e2:d4:51:c6:58:ac:40:71:47:97:f5:08:37:77:6a:bc:1e:12:
ae:2b:d6:1e:e4:8b:32:34:30:36:b8:d5:04:8c:49:4b:48:e9:
03:70:2f:1f:57:4d:3e:ed:35:e6:7e:2d:7e:df:e6:da:08:46:
9d:28:f3:88:87:bc:1a:3f:10:68:ea:7d:28:6b:f9:66:97:3f:
cb:b4:53:87:de:b9:fd:57:20:79:82:79:58:d3:6f:7e:05:05:
84:e7:69:59:de:71:ac:39:11:3e:97:39:b2:58:fe:47:db:a3:
01:ba:a2:de:9f:47:db:32:9d:7d:9f:13:ab:5a:bc:88:25:71:
dd:66:1d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:23:15 2025 by rpki-client