Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135302e302f32332d3233203d3e203537303433.roa
File: 3134352e37392e3135302e302f32332d3233203d3e203537303433.roa (raw, json)
Hash identifier: vSdig6z+I78BP04Sv/7KrRV42YreZD91yzU1R30pvdc=
Subject key identifier: 24:E4:7C:D3:A8:C6:48:62:98:F0:8E:32:4D:75:E1:FD:2F:42:42:FA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6B4930F3E399DCBF6925A2DDBAB76AACCC2299C6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135302e302f32332d3233203d3e203537303433.roa
Signing time: Wed 28 May 2025 10:28:08 +0000
ROA not before: Wed 28 May 2025 10:23:08 +0000
ROA not after: Wed 27 May 2026 10:28:08 +0000
asID: 57043
IP address blocks: 145.79.150.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:49:30:f3:e3:99:dc:bf:69:25:a2:dd:ba:b7:6a:ac:cc:22:99:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 28 10:23:08 2025 GMT
Not After : May 27 10:28:08 2026 GMT
Subject: CN=24E47CD3A8C6486298F08E324D75E1FD2F4242FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:10:89:e0:6b:de:8c:63:24:60:92:a0:9f:80:
3f:fc:29:1b:f0:7f:9c:bc:f6:4e:22:c6:4b:45:69:
06:20:ed:cc:98:bc:91:f5:40:02:5a:d8:af:73:b2:
29:fe:39:d9:88:dd:c3:49:31:44:e8:46:ea:5d:fd:
62:6c:4f:6b:e4:6c:48:0f:84:cd:c8:90:1e:9d:e3:
d4:28:33:05:7f:bf:fe:64:a9:50:b4:3b:7d:f5:4e:
b6:6e:88:e3:40:b1:90:7f:d2:e6:5e:8f:90:87:0b:
81:96:46:7b:cc:42:1a:85:b5:d8:28:a8:f6:a3:ce:
a6:c4:db:d7:82:17:24:43:57:2b:88:52:fd:6a:ae:
7b:02:ff:79:44:8a:05:9c:bf:a9:99:d4:59:68:cd:
3d:d1:3e:3f:6f:8a:26:e9:f5:32:22:bd:cc:11:be:
18:26:c1:f0:ff:fb:5e:24:8c:30:48:92:8c:14:d2:
07:43:e7:57:97:34:88:fc:c4:37:a6:d8:d6:c8:59:
81:f9:a0:61:30:fe:44:39:50:1d:64:ec:9e:45:5e:
da:c0:08:1f:48:95:19:f8:1e:78:db:26:73:1a:95:
6e:61:e8:b7:8b:46:51:9e:6d:4d:d4:8f:ef:9f:c6:
70:dd:b0:5a:8d:37:a5:f5:dc:b8:2e:33:e6:8e:a9:
27:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E4:7C:D3:A8:C6:48:62:98:F0:8E:32:4D:75:E1:FD:2F:42:42:FA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135302e302f32332d3233203d3e203537303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.150.0/23
Signature Algorithm: sha256WithRSAEncryption
13:64:ad:f3:1d:a5:70:66:1e:6b:e4:c3:2e:fd:2f:43:0c:ee:
eb:91:97:a9:88:22:6d:f6:3b:81:2f:b5:73:e8:b3:94:99:8a:
57:ba:64:e4:31:7d:83:22:40:3b:32:05:84:2a:1d:ae:fe:15:
84:c3:16:9e:72:8d:24:cf:09:1d:e8:0b:72:bc:13:7b:8e:1a:
9b:11:ef:d8:f0:3f:cf:1a:49:de:ad:e7:82:93:9d:63:62:bd:
c5:5b:35:56:42:e6:7e:a1:8f:4c:8e:be:40:6d:71:75:75:ba:
55:6c:ce:43:2f:22:d6:6a:9f:ad:ad:73:20:5e:a1:33:0d:87:
fc:5e:b7:95:9a:61:5d:ed:73:a2:67:7d:16:2d:25:a5:f7:f8:
6b:bf:77:3d:68:07:4b:c1:6e:5c:13:4b:09:2d:ab:c0:23:9b:
f6:86:a0:26:b9:9d:3e:b0:9b:e6:c4:fb:64:3d:74:48:79:68:
40:7b:20:23:8e:d7:53:f0:ff:4e:31:2a:bf:ee:c1:32:8f:da:
b7:23:af:ac:16:9b:bd:55:ba:52:c3:45:4b:1d:f8:bc:2b:de:
1c:0b:9e:7e:49:f3:d9:f6:cc:ba:f7:13:70:3e:13:0b:37:79:
e3:9c:64:0e:56:9c:4e:1c:22:3d:4e:4f:13:0a:1d:f2:77:9b:
3b:99:e9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:22:23 2025 by rpki-client