Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134382e302f32332d3234203d3e203631313132.roa
File: 3134352e37392e3134382e302f32332d3234203d3e203631313132.roa (raw, json)
Hash identifier: yFnuWua3ip9jthuYpI2lItqZfuN8/0pnZ+Dld8exFEc=
Subject key identifier: E7:79:38:57:FA:1C:B6:CF:42:D6:05:6B:76:73:FF:5C:EB:98:94:CE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 71AFD570ECDD73E30915F0FEEE159A865701B74A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134382e302f32332d3234203d3e203631313132.roa
Signing time: Tue 03 Jun 2025 08:23:47 +0000
ROA not before: Tue 03 Jun 2025 08:18:47 +0000
ROA not after: Tue 02 Jun 2026 08:23:47 +0000
asID: 61112
IP address blocks: 145.79.148.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:af:d5:70:ec:dd:73:e3:09:15:f0:fe:ee:15:9a:86:57:01:b7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 3 08:18:47 2025 GMT
Not After : Jun 2 08:23:47 2026 GMT
Subject: CN=E7793857FA1CB6CF42D6056B7673FF5CEB9894CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cb:89:5a:b7:53:3b:80:e1:bf:f6:60:aa:fa:
b8:6e:75:57:57:d3:d7:0b:0b:e6:bf:36:90:31:4b:
4b:49:69:95:1b:24:17:85:bf:7a:27:08:70:6c:b4:
b2:d2:5a:f4:9d:7b:a1:4d:84:a6:22:a7:37:a6:f3:
df:6f:25:a1:08:44:30:52:7e:12:04:7f:b5:72:98:
e4:fa:5a:bc:86:aa:d9:4b:2a:bd:0a:48:45:74:e8:
71:eb:61:14:28:61:ac:09:23:ba:f5:c9:9c:d9:ad:
8b:26:92:a6:66:e6:95:5f:56:0c:75:83:ff:c4:06:
f1:c9:b3:ac:0e:80:e4:a9:7b:7c:a0:9a:76:7b:51:
98:8c:a1:79:8f:54:72:6a:0f:07:16:c5:92:fe:34:
86:6d:25:f6:44:18:88:e2:c6:b7:27:e4:d1:5c:57:
e5:c7:65:71:96:0c:d4:55:33:e9:6d:1c:97:96:f5:
3e:fe:3e:cd:8f:60:ff:ea:cb:5d:5a:20:de:1a:06:
16:1f:68:9f:9d:4c:ce:14:2d:65:49:34:89:0a:ba:
d1:3a:d3:e5:e2:df:59:e6:09:07:83:ba:76:0b:c7:
7b:28:a6:30:ef:62:98:16:6c:19:50:fb:2d:9e:88:
5d:16:78:60:72:1a:11:12:e3:f2:db:08:85:39:55:
ce:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:79:38:57:FA:1C:B6:CF:42:D6:05:6B:76:73:FF:5C:EB:98:94:CE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134382e302f32332d3234203d3e203631313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.148.0/23
Signature Algorithm: sha256WithRSAEncryption
80:ba:fa:88:8d:78:6c:38:14:72:90:e4:f1:55:c2:13:b8:4a:
86:14:fa:2b:47:2f:0d:00:ab:39:23:21:78:74:0f:66:b3:de:
d1:ec:49:f4:d0:f8:4c:51:72:bf:96:7c:4a:e1:ba:44:a2:1e:
f3:29:ac:fb:9c:4a:42:4c:08:f5:33:52:0a:e9:04:94:26:9b:
37:f3:0b:fa:18:1c:39:ac:88:e2:ac:58:42:1a:fd:fd:ac:2d:
e6:f1:90:2f:bb:cd:d4:19:08:74:03:8d:ce:9c:b5:df:b8:8c:
fe:7e:bb:d1:8b:82:da:a4:cd:86:71:57:4b:f5:37:d2:84:81:
7c:66:1f:59:ce:38:ff:f2:f6:42:cc:fa:73:38:c2:14:de:6d:
94:3a:16:4b:03:46:cb:51:ca:9b:bf:f8:3a:28:d0:52:67:26:
9d:17:29:c4:dc:77:3c:5e:0d:00:3e:19:d8:e7:43:e1:62:e7:
eb:7b:c4:8f:e4:5b:9f:3c:35:d1:3c:57:c4:17:b3:e5:c7:54:
e7:d6:0c:4d:c3:28:59:21:b9:98:72:fe:43:c1:fd:1e:69:42:
d6:7f:76:7a:bf:62:45:4a:90:6c:ad:cc:fc:63:c1:cf:cd:65:
b4:e8:39:e6:5a:47:e3:83:cb:e3:ed:9c:b6:6b:a8:c5:60:49:
c0:95:85:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:38:12 2025 by rpki-client