Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139302e302f32332d3233203d3e20323132323338.roa
File: 3134352e37392e3139302e302f32332d3233203d3e20323132323338.roa (raw, json)
Hash identifier: mldRKPgSHaBHiJa/Cq9RWERhclyozI2EpMdY+hnTM1c=
Subject key identifier: 2E:9C:C7:08:5D:8B:CD:19:92:B7:8C:AF:2B:6F:55:6A:61:C8:56:1A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6F3CEF4130D2A5F4395A76B8A61D431B58ADC5BA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139302e302f32332d3233203d3e20323132323338.roa
Signing time: Wed 04 Jun 2025 19:37:16 +0000
ROA not before: Wed 04 Jun 2025 19:32:16 +0000
ROA not after: Wed 03 Jun 2026 19:37:16 +0000
asID: 212238
IP address blocks: 145.79.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:3c:ef:41:30:d2:a5:f4:39:5a:76:b8:a6:1d:43:1b:58:ad:c5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 4 19:32:16 2025 GMT
Not After : Jun 3 19:37:16 2026 GMT
Subject: CN=2E9CC7085D8BCD1992B78CAF2B6F556A61C8561A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:2e:c4:bc:f9:18:36:f0:2c:42:50:97:4e:
17:a2:e2:0f:ac:bd:23:72:2f:43:3a:3e:a2:1e:88:
48:f2:1b:97:93:1b:57:eb:70:de:9f:af:75:cc:eb:
0c:00:4b:91:bb:90:8a:32:17:c0:4a:de:3f:79:ea:
63:ff:a4:f0:da:8b:60:62:b2:95:e0:b6:dc:81:56:
0d:22:2b:fc:4b:f8:b4:5b:0d:f9:c1:d1:66:21:2a:
ef:0e:ad:f9:2f:8b:19:3c:ca:9d:c1:4c:fa:ec:9c:
fe:20:72:f2:be:48:93:19:b6:7c:2b:99:d4:d9:96:
82:cb:bf:d2:a9:73:4c:f6:74:4a:65:e3:c6:8f:13:
d2:e9:d3:91:ba:ca:81:82:30:0a:84:5f:1e:1a:c8:
49:2a:ec:4f:0f:27:46:91:4e:2c:63:3a:7a:8b:50:
f2:39:91:58:fd:52:fb:24:30:1e:de:f6:57:ff:af:
77:7a:4a:1e:c2:84:73:12:d4:45:3e:c7:6a:e3:71:
e3:f0:27:55:6e:ad:12:9b:8c:f8:01:14:b9:28:f3:
ac:0f:26:d3:96:8d:7c:76:46:d5:ff:12:e7:b7:85:
bf:12:c7:71:5b:23:ed:70:79:54:ea:15:e7:80:8a:
b6:91:45:a5:18:db:e7:5e:29:5b:bd:07:b4:e2:b4:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9C:C7:08:5D:8B:CD:19:92:B7:8C:AF:2B:6F:55:6A:61:C8:56:1A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139302e302f32332d3233203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.190.0/23
Signature Algorithm: sha256WithRSAEncryption
54:ab:ae:fe:6e:fa:be:77:ce:93:78:01:0a:2b:bd:ee:a9:ee:
6f:2f:6d:b5:70:7f:e3:27:9a:7f:4c:9a:a9:b0:24:85:f8:10:
ed:61:d0:f6:f1:8e:6e:46:d5:a8:36:3f:9c:98:0c:a2:02:2c:
fc:89:5f:15:11:29:fb:2a:c4:8c:0a:d3:74:a4:4b:14:28:d1:
08:70:ac:23:82:fd:a9:17:c4:0d:91:3b:fa:ce:5a:9e:77:bc:
52:86:5f:44:99:57:af:04:f1:c3:7b:8f:e9:ea:56:05:a2:e4:
5c:5c:d6:ce:a1:e1:84:de:3c:15:e6:87:31:44:97:4e:e0:73:
b7:f9:b9:e8:76:75:09:03:32:ea:93:69:43:97:3a:ff:7c:8a:
e3:4c:3d:b2:ad:ae:06:0f:47:f2:2b:86:92:e4:bb:d0:b8:87:
b5:50:5c:7a:82:43:58:86:d1:b1:09:96:3a:4f:13:6c:a2:b2:
e5:44:ae:57:54:a8:76:be:a0:7f:38:c4:eb:c1:fd:de:68:aa:
8e:0b:b9:7e:aa:33:56:b9:11:b8:f6:4a:37:f9:2d:80:a9:8b:
f9:b2:22:4c:33:8a:b5:a2:c8:51:52:4e:3c:a2:de:8c:10:03:
e3:e4:ca:ba:68:21:56:b2:16:a7:ff:0d:47:d9:dc:b5:8e:c3:
c8:52:a9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:21:51 2025 by rpki-client