Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135332e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e3135332e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: zZ/w3Jcn4J9qgwIyMgGmaQgZvnNxIJGjN5O0UbVAjgE=
Subject key identifier: 4A:D8:B7:C4:27:78:8F:06:E7:B6:0C:89:24:96:CC:0F:36:F0:47:3B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 16F8CC244B462EF8BFE204F0E643C91529AC136E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135332e302f32342d3234203d3e20333935373933.roa
Signing time: Thu 29 May 2025 19:06:53 +0000
ROA not before: Thu 29 May 2025 19:01:53 +0000
ROA not after: Thu 28 May 2026 19:06:53 +0000
asID: 395793
IP address blocks: 145.79.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:f8:cc:24:4b:46:2e:f8:bf:e2:04:f0:e6:43:c9:15:29:ac:13:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 29 19:01:53 2025 GMT
Not After : May 28 19:06:53 2026 GMT
Subject: CN=4AD8B7C427788F06E7B60C892496CC0F36F0473B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:17:c8:fc:98:0f:af:3b:b0:9e:a0:86:1b:
b2:4d:0e:08:eb:59:9b:f9:ab:3b:e8:73:ac:f1:b9:
fb:ce:25:d9:b9:e8:61:3b:65:4e:da:d8:f5:cd:9e:
83:3a:0a:03:b4:12:78:47:9a:71:0e:0b:48:0d:e4:
ea:bb:90:be:0e:64:bd:4e:d8:d5:b6:b9:60:ea:69:
77:f1:1b:8a:ef:57:66:15:21:1e:db:f8:7b:7d:40:
68:c0:46:1a:cf:d3:39:7f:04:60:bb:52:10:65:ea:
42:74:9e:c5:a2:70:bc:cb:82:44:ae:c8:f4:4b:d8:
de:62:a3:53:0d:d5:c3:0c:6f:fb:24:65:8e:b1:49:
65:ef:64:36:97:9b:c4:2c:cb:6a:94:40:8d:d4:43:
53:d8:6e:b4:d0:98:72:6e:07:42:48:50:70:75:3a:
e9:de:fe:ea:59:70:fc:77:57:4c:99:ba:dd:cc:d9:
a0:d2:e8:06:c1:c3:53:ab:de:ec:27:ac:c9:17:df:
60:33:74:b6:eb:96:b0:19:51:80:80:63:b7:29:c4:
bd:1a:e8:1f:ac:75:02:c8:94:71:cb:78:c8:11:b5:
ba:c8:8a:00:f5:12:0e:08:35:de:63:1c:0d:8d:fb:
2a:c6:4a:ab:2a:f0:b6:0d:69:41:b2:b7:b8:1b:a8:
3f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D8:B7:C4:27:78:8F:06:E7:B6:0C:89:24:96:CC:0F:36:F0:47:3B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135332e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.153.0/24
Signature Algorithm: sha256WithRSAEncryption
76:7b:f4:f9:e8:31:55:8d:5b:5a:ea:9d:aa:27:32:31:f7:6e:
c1:fc:12:00:99:54:81:da:d5:49:d1:8c:4b:19:3e:6f:fc:4c:
3b:b5:3a:aa:72:4a:9c:6b:af:f3:14:1f:a3:7b:d7:25:a5:15:
fc:44:13:7f:7f:ce:2a:ca:4b:e8:1a:18:06:f1:68:7b:44:f2:
3a:60:a0:d8:6d:cf:35:9a:9e:d0:4e:75:c8:cb:e0:6e:68:4c:
eb:48:17:de:47:71:f4:a5:ba:15:98:de:ba:f5:6c:69:67:be:
d0:2c:a8:9e:12:81:f7:52:2c:c6:fb:90:5b:90:bc:19:69:f9:
f6:68:03:16:b9:c6:df:a1:4d:e7:2b:c8:b0:1c:df:3d:d8:53:
fc:ba:1a:73:fd:f1:9e:25:5b:94:03:5f:bf:e4:99:da:6e:be:
9c:b3:d5:cc:3c:a5:06:33:75:98:bf:92:da:3f:e8:bf:af:dc:
da:57:ef:d5:7d:fc:1f:11:21:be:4e:8d:3f:4e:e6:16:6e:0b:
78:b4:ef:1e:c0:3a:91:5a:51:16:a2:58:91:00:38:65:30:3c:
a9:66:9a:d6:c4:67:03:54:1a:39:9b:fd:09:c5:d9:43:d9:db:
66:1d:45:a2:01:86:d0:c0:78:dd:60:52:d2:38:9c:ac:0c:8b:
5c:9f:1f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:35:11 2025 by rpki-client