Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137322e302f32322d3234203d3e20383132.roa
File: 3134352e37392e3137322e302f32322d3234203d3e20383132.roa (raw, json)
Hash identifier: pRR9zNEvm3tIkXXAUqQgjyzHQaNms23oXyvJbOYYBA0=
Subject key identifier: A2:13:C8:A5:44:1E:F4:F5:75:AF:55:3E:99:D9:13:90:D9:84:91:F7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7E578938A815B8CC95CF3C721666F60348770E81
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137322e302f32322d3234203d3e20383132.roa
Signing time: Tue 03 Jun 2025 20:00:48 +0000
ROA not before: Tue 03 Jun 2025 19:55:48 +0000
ROA not after: Tue 02 Jun 2026 20:00:48 +0000
asID: 812
IP address blocks: 145.79.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 17:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:57:89:38:a8:15:b8:cc:95:cf:3c:72:16:66:f6:03:48:77:0e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 3 19:55:48 2025 GMT
Not After : Jun 2 20:00:48 2026 GMT
Subject: CN=A213C8A5441EF4F575AF553E99D91390D98491F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:45:87:fa:35:0b:e7:0f:a1:db:24:1f:15:99:
89:3b:b5:56:ab:69:d7:86:5a:e1:f0:8d:fe:f5:21:
88:69:32:2a:ea:07:ff:c5:84:57:14:2d:a4:60:d1:
06:70:7f:a0:4e:f9:15:05:ee:d6:00:73:eb:cb:4f:
2a:58:03:28:e3:77:92:10:c7:98:5f:38:f8:e8:82:
13:fd:ce:62:24:a7:95:d1:bd:09:3b:4f:56:48:35:
e8:01:db:66:9f:79:41:74:f3:76:ea:39:00:38:d3:
2b:6f:fd:94:a5:a3:b1:5e:dc:d8:4b:65:2d:0f:75:
c6:1c:9c:6d:5b:33:f5:0e:14:1c:7f:c3:0d:88:6b:
0e:aa:41:6b:a8:15:5e:f8:b4:2f:0a:3a:6e:a0:7e:
55:d6:9f:3e:fd:d4:16:00:83:f2:73:67:62:25:ed:
3f:82:1c:57:90:fd:07:e5:0b:63:65:17:49:82:35:
3b:4b:42:5e:20:84:ac:04:bd:c8:0c:86:d2:7a:d2:
b9:af:18:e3:e7:91:18:94:5d:11:72:7c:ce:f5:68:
51:16:a7:43:e9:15:74:3a:59:e6:e2:42:ac:26:dd:
d7:7d:15:91:9c:29:cc:fe:3c:b5:67:74:48:b2:0a:
14:0a:24:c8:10:ce:da:27:20:4f:af:31:87:9c:20:
2e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:13:C8:A5:44:1E:F4:F5:75:AF:55:3E:99:D9:13:90:D9:84:91:F7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137322e302f32322d3234203d3e20383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.172.0/22
Signature Algorithm: sha256WithRSAEncryption
99:6e:68:65:fd:9f:37:0e:6e:b9:ba:05:c9:37:91:85:33:7b:
14:e9:67:63:43:f6:fa:8d:80:5c:3e:0d:8b:ad:ee:bd:b6:4a:
66:6e:99:c9:33:93:4e:71:d1:d8:5b:89:17:03:34:08:5b:5e:
17:93:c3:b0:fc:c8:b9:a6:ab:b0:af:5e:6e:0f:46:45:95:1c:
34:76:70:06:b2:c3:f0:9b:07:9e:8c:11:e6:20:b0:c2:a4:12:
82:3b:15:dd:70:19:79:b2:33:82:17:7e:ec:94:22:c7:b5:1f:
9c:aa:f4:a5:12:2c:d7:56:35:8d:df:50:fc:46:e3:3b:69:cf:
5d:44:d1:0b:1e:64:08:c6:60:6c:09:d4:da:3b:a6:b6:21:9c:
d1:9c:2e:bc:e9:01:5b:13:43:62:4a:22:22:e9:5b:ea:ba:2f:
8d:ae:0d:29:3d:f6:28:9e:d2:8c:e2:54:6f:f1:d9:74:c4:0a:
c3:1b:d2:7b:de:c2:a7:64:84:15:a3:0e:d8:71:b0:45:46:e6:
99:aa:4d:d1:c5:ab:b6:c0:e6:af:ce:8c:4e:19:01:2a:e3:fe:
01:01:07:c6:b4:6a:bc:dc:75:b1:01:58:7d:81:10:cd:81:02:
fa:14:c8:12:90:76:27:ef:ac:b4:dd:93:5b:9f:6d:74:30:9e:
0d:b6:8e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:21:38 2025 by rpki-client