Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138342e302f32322d3232203d3e203239383032.roa
File: 3134352e37392e3138342e302f32322d3232203d3e203239383032.roa (raw, json)
Hash identifier: 3885rHhbnNgOEzl7ZuXaXeScf7lt/SlsC+9F7Xx5qKQ=
Subject key identifier: E7:B4:D3:E8:F6:A1:7C:27:9C:36:4D:77:6C:A5:A7:88:3F:71:8D:5F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6F54492EE7A4AF1AD627DB923712F914999DCB66
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138342e302f32322d3232203d3e203239383032.roa
Signing time: Thu 05 Jun 2025 12:40:57 +0000
ROA not before: Thu 05 Jun 2025 12:35:57 +0000
ROA not after: Thu 04 Jun 2026 12:40:57 +0000
asID: 29802
IP address blocks: 145.79.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:54:49:2e:e7:a4:af:1a:d6:27:db:92:37:12:f9:14:99:9d:cb:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 5 12:35:57 2025 GMT
Not After : Jun 4 12:40:57 2026 GMT
Subject: CN=E7B4D3E8F6A17C279C364D776CA5A7883F718D5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:60:93:07:3f:08:11:eb:fb:30:e5:17:8c:50:
c8:c3:42:36:37:b0:47:91:fe:65:33:87:3c:49:6f:
fb:bd:a2:a7:ba:99:95:e0:2b:3b:ef:b5:01:82:7e:
77:12:1a:90:99:43:6a:5a:09:06:d2:d7:8a:ea:ef:
4f:f0:3d:33:e8:8d:bc:27:a9:f5:da:4b:3b:cd:24:
96:9f:98:d2:fc:78:48:f7:af:b3:3f:f5:b9:4f:ed:
ef:84:4c:07:d6:4b:90:dd:c5:d2:dd:64:67:e8:63:
d5:b4:58:7b:2d:61:72:cd:ac:9b:27:21:b3:34:d8:
f4:3f:27:dc:9a:6b:36:e7:1c:8c:79:e2:dd:7c:b4:
0d:9a:d0:71:a4:35:6b:02:d3:fa:c1:85:04:0b:a8:
8f:e2:da:07:d8:16:6a:ba:b0:9f:65:11:90:86:40:
c0:0d:d2:ae:9d:53:da:a0:ae:7e:77:06:e2:86:9f:
e1:28:88:66:28:cb:d0:aa:76:99:f9:2c:ef:51:7c:
ef:11:ee:40:ef:2f:eb:79:02:ad:18:dc:ad:03:41:
64:b9:2c:22:45:19:0e:ff:23:53:3b:58:f7:7e:ae:
70:51:f5:0e:15:95:16:35:75:62:fe:f2:07:19:18:
c2:6d:35:65:1b:61:c3:82:26:1b:76:88:59:eb:9c:
a4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B4:D3:E8:F6:A1:7C:27:9C:36:4D:77:6C:A5:A7:88:3F:71:8D:5F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138342e302f32322d3232203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.184.0/22
Signature Algorithm: sha256WithRSAEncryption
85:f5:a3:fb:3f:fc:f6:69:9f:56:af:aa:80:3c:40:6a:6a:b6:
a9:f0:64:4c:48:8c:c3:f5:c5:f8:eb:a2:76:a0:2e:12:09:27:
2e:56:ab:cb:67:54:4d:68:0d:64:8f:00:c0:9d:be:47:31:a5:
02:ba:69:cd:bb:5d:b1:98:bd:f5:12:49:c7:34:5d:47:6e:72:
4d:50:ce:48:e5:33:4e:1a:1a:27:a2:80:9b:a8:f2:ee:e5:93:
1b:55:3e:e5:06:16:6a:b6:b4:19:7d:26:33:61:5b:7c:87:23:
ab:b5:36:f1:86:8b:90:0b:3d:cd:41:fe:92:05:74:22:b8:02:
5c:b9:78:26:bc:5d:d7:99:51:fe:63:51:0a:88:f5:f0:f3:ba:
47:aa:3c:c0:cd:b9:d3:f2:03:2d:5f:00:17:5a:34:c8:a0:0a:
d2:ad:52:40:70:f0:ad:fa:32:99:88:a1:e9:91:bf:f1:1e:04:
81:1b:30:83:93:34:54:a3:63:0a:14:1b:58:33:37:b9:c9:4f:
7b:1a:de:fc:d2:6f:59:a1:3c:15:af:44:b3:03:dc:b9:64:09:
83:d0:f4:31:5d:96:89:7f:0b:92:9b:cb:a9:81:11:01:32:c9:
04:40:29:6e:54:a9:49:6f:e1:30:79:c4:56:ff:2a:b0:8b:28:
ae:9b:f7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:20:17 2025 by rpki-client