Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136302e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e3136302e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: m4KM1gmeoWbelT+YDHsZ58V7ze4adY31qH2Cpmd3oWw=
Subject key identifier: 67:64:0D:6B:13:FB:00:DC:17:43:A4:72:42:CF:3D:2F:B2:9F:21:4D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 02D6DB640D79F7A050939AD1C511936AF7870C37
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136302e302f32342d3234203d3e20333935373933.roa
Signing time: Wed 28 May 2025 17:55:07 +0000
ROA not before: Wed 28 May 2025 17:50:07 +0000
ROA not after: Wed 27 May 2026 17:55:07 +0000
asID: 395793
IP address blocks: 145.79.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:d6:db:64:0d:79:f7:a0:50:93:9a:d1:c5:11:93:6a:f7:87:0c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 28 17:50:07 2025 GMT
Not After : May 27 17:55:07 2026 GMT
Subject: CN=67640D6B13FB00DC1743A47242CF3D2FB29F214D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:3c:a8:96:52:c0:de:d8:6b:1f:bc:16:b6:
6c:70:55:6d:79:b9:09:79:5d:66:bc:af:4a:2a:d0:
80:b6:06:f9:5c:69:63:88:a6:b9:82:7a:ad:de:b3:
bf:5d:d6:06:f7:42:a6:6b:f6:ba:02:23:1e:28:c4:
a4:bc:ff:fc:cf:fb:74:1f:f4:e6:95:04:f2:0e:16:
09:f2:55:d2:2a:ae:d6:04:ea:fd:f2:5f:6d:a5:e0:
b4:71:b4:3b:a5:5f:a5:89:80:c2:a5:f8:f7:eb:41:
cc:59:b5:22:e3:ae:7f:45:d3:eb:a8:92:7c:b3:2b:
64:05:6b:1a:7b:93:b7:f1:d7:97:0f:47:64:f9:44:
19:47:de:ec:95:fb:8c:76:44:c3:c2:36:8b:88:c9:
d8:ab:60:86:b5:8d:c5:fc:44:56:f3:4a:4d:f6:f8:
29:ef:c5:d3:55:9e:91:23:6f:69:82:b2:8c:46:91:
79:cd:fd:e5:d1:81:e8:d3:a2:ff:33:61:4a:43:5e:
c4:15:f8:43:c2:d5:21:48:4f:07:1a:c7:f0:34:c6:
cb:7e:eb:0f:6d:92:e0:bc:73:0a:97:e5:38:76:8a:
85:3a:3e:76:fe:47:fd:90:26:94:e4:f8:85:57:5b:
8c:90:50:ea:77:47:34:d7:81:af:03:cb:95:ae:53:
70:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:64:0D:6B:13:FB:00:DC:17:43:A4:72:42:CF:3D:2F:B2:9F:21:4D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136302e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.160.0/24
Signature Algorithm: sha256WithRSAEncryption
08:2e:ef:33:ac:46:f7:a9:23:29:b4:3d:04:9e:c6:4f:2f:39:
b2:40:d2:da:22:39:c9:a6:bc:80:4f:ff:d9:19:85:8f:ef:b0:
db:65:c3:00:3b:a1:59:61:f9:93:05:75:10:04:4a:e3:f5:60:
a9:b2:27:aa:b7:f5:f2:44:ca:9b:b5:de:26:a5:1d:16:25:eb:
50:f9:be:30:b2:bb:c6:03:6a:c3:b3:79:0c:23:52:e4:0c:a6:
74:b5:80:b8:d8:82:ea:d0:86:8b:66:2b:b9:fb:da:fe:91:95:
10:9c:34:1e:e4:4c:fd:87:63:a5:2f:17:b6:bf:27:f0:62:a7:
7a:2b:79:65:df:40:b0:60:b3:a8:46:28:75:04:53:4e:91:66:
a1:6e:f6:d3:6f:0e:f6:3a:c4:96:14:c4:22:15:b8:1c:c2:1a:
d5:d4:b6:64:0f:8f:1d:de:f5:5c:00:f1:81:62:fa:77:ed:65:
7a:03:b9:a3:51:b4:d5:91:74:c7:7d:ee:4c:48:5c:c9:c4:e1:
c8:67:c8:67:29:cd:4f:56:57:24:10:a6:7e:1f:76:5d:12:44:
40:2b:d8:0a:4c:d9:b7:d9:45:f9:82:de:01:8d:7e:a4:83:cc:
46:76:8c:59:61:bd:0f:19:f4:14:5c:52:8f:f4:55:ba:02:66:
0d:a3:f5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:24:38 2025 by rpki-client