Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137322e302f32322d3234203d3e203230313135.roa
File: 3134352e37392e3137322e302f32322d3234203d3e203230313135.roa (raw, json)
Hash identifier: uYrWbeMvj10EAn/d/NgDvQ0mpGo/LonM0+PMJo0pOqw=
Subject key identifier: 2B:42:CB:97:96:68:2D:9B:76:0A:BB:7F:CB:F3:AF:C5:F5:9C:1B:84
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 74CF8A2E344430C077A393B7BD39AC7D5C2AC848
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137322e302f32322d3234203d3e203230313135.roa
Signing time: Tue 03 Jun 2025 20:00:01 +0000
ROA not before: Tue 03 Jun 2025 19:55:01 +0000
ROA not after: Tue 02 Jun 2026 20:00:01 +0000
asID: 20115
IP address blocks: 145.79.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 12:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:cf:8a:2e:34:44:30:c0:77:a3:93:b7:bd:39:ac:7d:5c:2a:c8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 3 19:55:01 2025 GMT
Not After : Jun 2 20:00:01 2026 GMT
Subject: CN=2B42CB9796682D9B760ABB7FCBF3AFC5F59C1B84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e4:f5:c2:29:b4:a9:43:d6:78:0a:78:af:2f:
05:a4:1a:79:cc:a7:4d:cc:88:a5:85:07:37:06:a3:
82:93:f1:db:33:7a:f2:b7:2f:5a:76:3b:73:a4:73:
c4:71:c1:c1:45:9c:86:d6:e2:09:7f:78:e4:59:f4:
25:f5:b3:fc:53:f2:03:cd:2f:39:59:c9:ab:d1:f0:
97:e4:41:8c:83:7f:87:74:f6:e7:cf:6c:dd:29:30:
50:26:f0:b2:77:93:35:d1:20:ef:b8:f5:37:3b:08:
80:ce:53:f9:44:0e:72:0c:72:5e:83:ed:5a:5f:ad:
47:ba:80:8c:3f:1c:20:f1:bf:df:be:0b:c2:33:d3:
1b:35:14:23:b5:9e:64:e1:84:c7:0c:35:c8:a7:a0:
5b:c1:03:29:b4:bd:3a:5b:74:5c:43:94:99:65:eb:
70:44:be:7b:8a:cc:06:db:2d:a1:a6:fc:41:8d:ad:
3c:a1:07:1a:78:6e:c9:fb:c7:73:eb:0a:74:34:06:
83:2f:36:b3:a6:36:61:61:ca:5d:18:77:a0:c2:fa:
cb:be:53:d2:79:f1:ac:3a:b0:7b:37:15:b1:90:15:
75:87:ee:b8:15:af:a1:57:69:8a:2a:26:94:70:b9:
73:84:a6:02:a9:50:f5:52:11:c0:fd:38:00:e4:21:
ad:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:42:CB:97:96:68:2D:9B:76:0A:BB:7F:CB:F3:AF:C5:F5:9C:1B:84
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137322e302f32322d3234203d3e203230313135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.172.0/22
Signature Algorithm: sha256WithRSAEncryption
82:b4:45:f8:2f:c4:28:f5:eb:66:c8:3b:fc:68:44:c9:18:b3:
99:43:6a:f4:78:36:6d:51:60:65:c1:ef:7e:f4:b3:b1:cf:b0:
7c:48:ef:7d:4f:49:49:42:db:fb:d2:8b:c5:8e:81:e6:ea:b6:
2b:4e:76:f3:66:e0:ff:87:1d:98:75:21:a9:2e:1d:d4:90:a7:
a6:3c:44:24:99:f7:a2:32:f2:42:8b:2f:42:fa:fe:c4:81:82:
6e:fe:33:71:2e:7e:fc:9f:c0:29:f3:1a:3b:46:78:88:c8:03:
f8:c6:6f:c8:51:61:63:d9:8f:73:9e:d3:ac:02:44:02:63:55:
5e:1f:27:32:14:e9:7f:8c:c5:d9:24:e4:e7:c5:81:41:09:65:
bf:9b:6f:12:97:0d:8f:45:e4:90:9e:e9:cb:9f:09:a6:09:9b:
5c:3c:75:93:2d:ca:d5:8e:79:63:7b:dd:8c:64:4a:09:af:db:
8e:23:a1:f1:ca:4d:f2:9f:42:46:ff:8c:2d:9a:9d:1a:e1:1a:
83:fd:9d:66:dc:39:51:47:bb:7c:fb:fd:b6:25:b9:ad:fa:22:
e1:16:02:04:b2:d7:14:4e:78:f8:45:da:f2:f3:0d:cf:73:d8:
2c:b2:77:da:05:b3:8a:8b:c0:7f:86:6b:2b:34:41:4b:e2:2b:
af:ee:c5:eb
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUdM+KLjREMMB3o5O3vTmsfVwqyEgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA2MDMxOTU1MDFaFw0yNjA2MDIyMDAwMDFaMDMxMTAvBgNV
BAMTKDJCNDJDQjk3OTY2ODJEOUI3NjBBQkI3RkNCRjNBRkM1RjU5QzFCODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC5PXCKbSpQ9Z4CnivLwWkGnnM
p03MiKWFBzcGo4KT8dszevK3L1p2O3Okc8RxwcFFnIbW4gl/eORZ9CX1s/xT8gPN
LzlZyavR8JfkQYyDf4d09ufPbN0pMFAm8LJ3kzXRIO+49Tc7CIDOU/lEDnIMcl6D
7VpfrUe6gIw/HCDxv9++C8Iz0xs1FCO1nmThhMcMNcinoFvBAym0vTpbdFxDlJll
63BEvnuKzAbbLaGm/EGNrTyhBxp4bsn7x3PrCnQ0BoMvNrOmNmFhyl0Yd6DC+su+
U9J58aw6sHs3FbGQFXWH7rgVr6FXaYoqJpRwuXOEpgKpUPVSEcD9OADkIa2pAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUK0LLl5ZoLZt2Crt/y/OvxfWcG4QwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM3
MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjMwMzEzMTM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
kU+sMA0GCSqGSIb3DQEBCwUAA4IBAQCCtEX4L8Qo9etmyDv8aETJGLOZQ2r0eDZt
UWBlwe9+9LOxz7B8SO99T0lJQtv70ovFjoHm6rYrTnbzZuD/hx2YdSGpLh3UkKem
PEQkmfeiMvJCiy9C+v7EgYJu/jNxLn78n8Ap8xo7RniIyAP4xm/IUWFj2Y9zntOs
AkQCY1VeHycyFOl/jMXZJOTnxYFBCWW/m28Slw2PReSQnunLnwmmCZtcPHWTLcrV
jnlje92MZEoJr9uOI6Hxyk3yn0JG/4wtmp0a4RqD/Z1m3DlRR7t8+/22Jbmt+iLh
FgIEstcUTnj4Rdry8w3Pc9gssnfaBbOKi8B/hmsrNEFL4iuv7sXr
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:31:22 2025 by rpki-client