Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135342e302f32342d3234203d3e2039333034.roa
File: 3134352e37392e3135342e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: x/d0hK/x6blh6vtrP2pi7q8gVs5ciK6Py7cqjUBVLCs=
Subject key identifier: 38:DA:58:6E:A2:89:5D:5C:47:DD:B7:BE:51:77:C3:AA:02:04:29:77
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0D76A93854BFAFAEA43ADF7A9C2BCD4DAA9999B2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135342e302f32342d3234203d3e2039333034.roa
Signing time: Tue 03 Jun 2025 08:29:42 +0000
ROA not before: Tue 03 Jun 2025 08:24:42 +0000
ROA not after: Tue 02 Jun 2026 08:29:42 +0000
asID: 9304
IP address blocks: 145.79.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:76:a9:38:54:bf:af:ae:a4:3a:df:7a:9c:2b:cd:4d:aa:99:99:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 3 08:24:42 2025 GMT
Not After : Jun 2 08:29:42 2026 GMT
Subject: CN=38DA586EA2895D5C47DDB7BE5177C3AA02042977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:46:e6:3a:64:84:84:8f:98:86:18:81:4d:3a:
c8:a1:11:ac:a2:f5:a1:05:2b:e7:76:b0:6c:a2:74:
d9:08:8a:b4:45:a2:97:75:bb:35:d8:16:9a:ea:e1:
80:b6:b2:5e:ea:11:38:35:1d:dd:37:34:12:2f:ca:
d8:d9:d8:db:29:81:f2:49:14:67:1f:a8:bc:64:a8:
cf:41:34:e0:ad:c8:20:e1:08:9b:ac:9f:2b:d6:81:
b7:65:c5:3e:39:73:ab:5c:8c:a4:38:62:d7:8b:9b:
34:57:03:e5:92:e3:b9:5c:6f:41:b6:71:48:c3:2a:
95:94:2b:3e:45:a2:27:bb:ad:43:a2:6d:56:18:d3:
1d:b6:62:e1:ea:e2:0a:a8:f5:cc:38:dc:60:71:86:
d0:b0:2e:3e:ce:55:57:11:3d:e4:2c:f9:a9:64:6a:
91:be:03:c6:f6:f4:ab:5d:67:7c:5b:b7:d7:c1:5c:
cc:e1:b3:b8:44:8d:6d:42:97:16:d9:92:da:74:e1:
32:3d:01:76:3d:29:8b:af:bd:24:4f:7b:04:55:48:
20:30:7c:78:18:37:6b:c4:e6:e7:f7:9a:3a:25:19:
a3:72:4e:29:20:f9:aa:59:db:c9:0b:07:b3:7a:87:
8f:83:f1:95:73:04:33:ef:74:cf:73:eb:28:f8:0b:
65:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DA:58:6E:A2:89:5D:5C:47:DD:B7:BE:51:77:C3:AA:02:04:29:77
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135342e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.154.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:f5:e8:9c:48:fc:a3:6a:39:98:5f:41:57:25:9b:91:2c:3d:
24:a6:42:84:9c:7a:44:94:b8:19:d8:c3:2e:54:56:5f:ff:70:
22:96:46:89:66:44:05:b1:ef:50:5e:57:5b:1c:b1:c8:49:b4:
65:e7:22:e1:aa:e1:fa:e6:3e:3e:68:64:84:97:ad:83:cd:f4:
a3:20:25:c7:d2:32:ad:f5:b7:9d:f3:a5:b3:81:69:4e:b3:05:
16:9b:60:e9:31:a4:81:b4:00:e3:8c:fa:cd:18:79:f4:d8:09:
c5:2b:6d:09:a8:31:e2:3f:a5:c0:38:bb:ec:91:99:54:24:18:
c7:4e:81:0f:c9:06:85:f8:98:5e:81:c9:0b:0c:82:0b:45:3e:
1d:04:a3:fb:06:bd:e6:ce:32:24:c4:0a:1b:af:7a:88:4b:7f:
a4:91:7c:bc:30:ce:02:b4:f1:20:41:8c:30:66:1e:98:54:01:
c6:4d:3a:07:3f:8b:bf:96:8d:d3:ff:35:e1:4e:a1:21:97:21:
15:98:6c:c4:f5:7c:5e:77:a2:bd:a9:5d:c5:5f:b2:86:62:88:
d7:87:7e:0c:ad:97:19:06:43:57:c3:cc:53:a3:24:e8:ad:b0:
ea:02:1c:35:52:20:c7:7b:8b:b8:88:82:ff:7d:dc:9c:ae:15:
9d:4b:cc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:21:41 2025 by rpki-client