Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138382e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e3138382e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: EnqTUqSasMGcb2XLHsuLBuULbhlSydRwRviRgHGWZkU=
Subject key identifier: 7A:4A:B4:85:D7:B4:7C:D1:EE:E4:F7:22:25:7B:40:A9:1E:52:D0:A1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 57548916DDCD2F221FD5B8F2CF27B3C8A028E9C9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138382e302f32342d3234203d3e20333935373933.roa
Signing time: Thu 29 May 2025 19:06:52 +0000
ROA not before: Thu 29 May 2025 19:01:52 +0000
ROA not after: Thu 28 May 2026 19:06:52 +0000
asID: 395793
IP address blocks: 145.79.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:54:89:16:dd:cd:2f:22:1f:d5:b8:f2:cf:27:b3:c8:a0:28:e9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 29 19:01:52 2025 GMT
Not After : May 28 19:06:52 2026 GMT
Subject: CN=7A4AB485D7B47CD1EEE4F722257B40A91E52D0A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e5:cd:a9:21:95:35:44:e8:dd:cc:8b:df:9c:
5d:90:ad:58:ab:68:3e:85:a1:4d:6d:94:e0:eb:a5:
e4:22:22:69:fe:36:ca:e5:c5:b2:96:a9:7d:ba:21:
2f:91:75:83:9e:01:30:8a:8a:d8:9e:80:08:05:5d:
c5:27:78:d6:9b:d3:7b:26:c2:61:2d:aa:38:2f:d7:
c4:95:a9:4e:89:37:33:4d:9d:af:58:1b:9c:95:ec:
86:1e:ce:f0:29:c4:08:f2:5f:4f:12:54:49:5c:2b:
f1:f2:49:a6:8d:cf:3a:57:80:e0:4f:5f:25:00:51:
f2:94:23:d8:d5:28:48:9d:50:fc:b1:65:d9:7d:cb:
01:3c:3d:5f:ae:1e:da:3e:58:93:64:85:08:fa:fa:
5f:dd:16:b1:9b:c1:39:13:61:f3:14:78:8d:ae:5b:
88:2f:74:e3:d1:1b:9d:8e:20:70:f6:1d:cc:7a:77:
2a:b6:33:e2:cb:16:fd:bb:b0:61:84:08:21:5a:f5:
c0:c9:5e:21:86:d4:a4:09:7d:45:85:94:13:60:bb:
79:2e:3b:db:89:34:18:47:31:c3:88:48:b9:b8:35:
b4:e5:6e:73:2f:78:27:12:8f:47:2c:f4:2d:c7:6f:
0d:4d:44:da:0c:4a:a0:ca:f6:f6:25:f6:e9:18:92:
50:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4A:B4:85:D7:B4:7C:D1:EE:E4:F7:22:25:7B:40:A9:1E:52:D0:A1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138382e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.188.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:a6:02:59:1f:a5:3f:ae:1d:3a:6e:ca:c3:a9:7a:24:4b:93:
35:1a:6e:b5:54:8f:45:ea:56:10:2b:bf:8f:cd:75:d0:38:21:
78:98:a0:3c:d5:9e:ef:ff:1a:65:07:1b:74:bd:90:f0:ff:55:
24:d5:cf:3a:0c:b4:c2:71:63:41:d6:a4:6a:6d:e1:ad:5b:b5:
f3:16:30:3b:2c:78:0d:70:c8:5a:9c:88:f8:0b:7e:c2:65:d6:
64:e8:eb:1e:2c:3f:1b:fe:ac:9a:d3:65:2a:27:df:4a:3c:40:
09:a5:79:e7:21:ef:ca:8b:b6:39:bf:5d:cf:5b:2b:e6:ff:91:
cd:44:4d:fd:d2:a2:bf:87:9f:62:94:fe:d4:1e:d6:0a:29:e3:
e5:d0:ef:40:39:49:f0:60:94:e2:d6:eb:d5:ff:0b:1b:95:92:
0f:12:25:44:55:7f:3b:c4:90:a1:c4:2e:93:f8:bc:ab:c1:2f:
eb:a7:4e:c6:b1:41:10:b3:28:90:e1:7a:10:9b:48:f2:1a:58:
a8:26:3d:77:c8:0e:f0:07:f4:c8:e5:4f:83:97:ff:83:b8:a1:
8b:f0:57:88:ec:c7:a5:bd:ac:4f:42:bf:a2:a9:99:1b:04:0a:
b6:e7:e3:11:92:34:cf:c1:55:ce:d9:b1:7f:fe:65:4a:47:b2:
55:44:7b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:37:20 2025 by rpki-client