Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137362e302f32312d3231203d3e203230343733.roa
File: 3134352e37392e3137362e302f32312d3231203d3e203230343733.roa (raw, json)
Hash identifier: RNlI/7y7QvzcpQ9DZNjUw0YbVHPVzXoxKqAK3neT4Ek=
Subject key identifier: FF:B6:20:7E:83:2B:7D:4E:1A:48:98:6F:F6:45:E3:3C:83:CC:47:71
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 50424511FC42CB1DFFDDFFB3DEB6F1DF468E8454
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137362e302f32312d3231203d3e203230343733.roa
Signing time: Tue 03 Jun 2025 08:30:27 +0000
ROA not before: Tue 03 Jun 2025 08:25:27 +0000
ROA not after: Tue 02 Jun 2026 08:30:27 +0000
asID: 20473
IP address blocks: 145.79.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 12:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:42:45:11:fc:42:cb:1d:ff:dd:ff:b3:de:b6:f1:df:46:8e:84:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 3 08:25:27 2025 GMT
Not After : Jun 2 08:30:27 2026 GMT
Subject: CN=FFB6207E832B7D4E1A48986FF645E33C83CC4771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ec:f2:d8:13:14:ed:46:b5:1b:f3:a9:e6:1d:
08:07:8c:a6:74:05:83:02:bf:44:2c:9c:94:48:c3:
cd:a2:52:3e:22:8d:40:ad:f5:3c:30:6e:55:1e:f5:
32:6d:d4:d4:38:10:5f:df:e7:3d:39:bb:a2:56:da:
69:43:5f:74:d7:79:23:fb:a1:60:83:52:6c:5b:34:
18:4d:2a:54:f5:fc:c9:c4:cf:3e:60:d9:c6:2c:38:
bf:19:71:0a:5a:7d:7d:21:e6:b6:39:04:ef:fc:5b:
58:81:ba:d0:c7:8b:8b:59:65:a2:14:78:91:9b:51:
bd:9b:6c:ec:c3:42:55:3e:be:66:2e:ba:ef:9b:60:
8d:0d:7b:a9:69:96:9f:32:a7:db:fb:38:4e:19:9f:
eb:e6:0f:f4:2e:f2:a0:2c:19:59:85:d0:87:b5:64:
3c:2f:8b:27:ac:fd:3e:a1:1e:61:a9:24:18:e5:0d:
5a:e0:a2:ad:6d:6b:95:63:a9:4a:b9:41:e2:c0:0a:
d9:7f:7f:2e:01:a0:7d:3d:8c:4a:cb:5b:47:11:94:
31:fe:23:43:50:59:79:11:3e:8b:3a:2e:e8:14:d9:
a4:f0:11:46:87:b5:36:28:eb:3c:2e:01:68:5e:72:
8f:cb:75:14:a6:5d:f9:3a:da:ec:48:ae:99:ab:22:
a8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B6:20:7E:83:2B:7D:4E:1A:48:98:6F:F6:45:E3:3C:83:CC:47:71
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137362e302f32312d3231203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.176.0/21
Signature Algorithm: sha256WithRSAEncryption
29:ee:ca:cb:28:04:b5:34:27:41:5f:de:11:8e:90:6a:2e:6e:
9d:e2:ce:d1:76:9a:7e:7d:a9:13:60:fa:4f:23:8c:cb:8b:0f:
50:e4:c6:de:fa:97:91:db:0f:a4:47:bb:ef:bb:54:a3:02:a5:
a0:53:0d:96:37:52:75:f6:c5:78:6e:cb:d2:11:6c:f2:8d:f1:
68:51:5b:a9:7c:51:d6:42:a6:4f:e8:f6:a3:11:dc:a5:b0:43:
41:b6:15:f1:51:25:1b:ab:7a:c5:9f:46:f9:10:fb:58:41:0a:
a4:a3:86:4b:81:9e:de:6f:63:e6:c5:9b:8f:58:7a:76:6b:0b:
b4:f7:f3:70:82:90:7e:52:47:67:5a:2a:5c:eb:62:ef:38:ff:
7a:cd:51:f4:c1:b4:11:b9:88:df:cc:91:db:49:fb:e3:dd:ef:
d9:ef:a7:c6:7e:33:a5:7a:35:73:9f:5f:1c:f9:06:1d:e9:94:
8d:c2:d2:fd:4e:80:a6:84:c7:f2:7b:79:e0:5c:78:7f:b9:21:
7a:6d:9a:7c:7a:7e:23:5f:63:f6:d7:25:fa:83:31:17:f8:d0:
21:24:3f:10:25:8e:21:4c:4d:af:d5:db:47:b6:e1:76:b3:07:
ce:d4:ab:95:84:7f:1b:4c:4a:6d:ea:47:cf:62:a2:4c:80:0d:
8f:f3:1d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:14:49 2025 by rpki-client