Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3131322e302f32312d3234203d3e203437353833.roa
File: 3134372e39332e3131322e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: sVmpq/XUBs1YGgy27vyE3kGFwHKkRMWuXmgifjjvL2A=
Subject key identifier: 8E:D4:8B:C6:97:00:08:86:D8:81:F5:7E:D9:33:BC:27:09:03:93:34
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5E8021F1E0F0D2CB5F6CE327157A061870AB1D9A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3131322e302f32312d3234203d3e203437353833.roa
Signing time: Mon 16 Dec 2024 19:53:43 +0000
ROA not before: Mon 16 Dec 2024 19:48:43 +0000
ROA not after: Mon 15 Dec 2025 19:53:43 +0000
asID: 47583
IP address blocks: 147.93.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:80:21:f1:e0:f0:d2:cb:5f:6c:e3:27:15:7a:06:18:70:ab:1d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 16 19:48:43 2024 GMT
Not After : Dec 15 19:53:43 2025 GMT
Subject: CN=8ED48BC697000886D881F57ED933BC2709039334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:c4:9a:23:c4:59:d5:df:d6:45:45:0d:e9:
27:da:0e:f7:c3:72:79:74:20:a6:26:8a:2a:86:c3:
04:85:8e:d1:e0:92:2d:9b:5a:a4:30:96:7f:17:8f:
0f:f3:59:57:15:d1:b1:9d:a0:cc:28:e4:ce:fc:b4:
84:aa:42:e3:c5:a1:16:de:92:8e:5b:6b:5e:d6:f0:
b1:bf:92:f6:28:22:b9:1d:07:0a:b1:39:42:ab:2a:
f0:25:e0:97:6e:e8:74:01:61:40:2c:65:61:ef:fa:
a2:a5:46:aa:2a:bc:15:30:47:c0:d9:13:00:c9:7f:
89:15:83:af:08:32:44:17:62:62:17:cc:a7:da:de:
e7:56:8c:1f:08:fe:9e:c0:be:c4:e8:d7:7c:9b:84:
9f:74:6f:d7:3f:14:95:b7:aa:a6:5d:da:c6:85:8d:
e0:63:b3:26:1f:37:3b:31:4d:a6:8d:90:6d:02:9b:
4e:3d:bb:b5:7d:15:3d:6d:16:e5:d5:2c:dc:c4:67:
f0:8c:66:c7:6a:2f:2c:d2:20:18:fa:ac:63:c2:00:
fe:68:9b:a2:a0:e6:32:76:35:b9:3a:e9:b7:45:c8:
59:1e:e9:70:2f:4d:1f:4b:30:32:78:4b:58:81:5d:
69:a3:34:2d:e1:8f:30:03:75:e3:fd:ce:0e:62:31:
a9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D4:8B:C6:97:00:08:86:D8:81:F5:7E:D9:33:BC:27:09:03:93:34
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3131322e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.112.0/21
Signature Algorithm: sha256WithRSAEncryption
75:90:53:aa:e4:ae:6c:cd:cd:6e:21:d2:f9:e2:09:ba:91:47:
d0:55:6f:15:b2:c2:bd:62:7d:2d:3a:0b:eb:32:f9:16:82:e5:
da:a9:07:ce:b3:cf:3a:c6:de:11:80:e0:1d:83:89:e4:36:05:
fe:6a:07:52:da:52:df:c9:b6:8b:b2:fc:bc:6a:95:dc:19:96:
d6:63:8c:78:90:e6:c5:2b:83:27:04:5a:3d:ed:1e:c5:46:5b:
dd:03:62:11:57:28:2a:00:e3:28:b2:80:7e:57:55:c4:c4:b3:
50:52:19:16:f3:d6:91:ef:a5:40:1a:38:ea:b6:46:cd:01:c5:
a5:b9:70:e5:7e:7d:70:ca:cf:f4:3b:7a:de:0a:10:e7:71:33:
98:8f:34:c0:88:f1:40:90:f3:e6:40:9f:1a:5f:aa:e9:a2:79:
5e:42:92:f7:04:7b:47:1c:aa:c8:42:7d:fd:65:26:85:55:55:
ec:1d:17:5f:39:9a:a7:94:bd:34:e1:8d:18:13:bd:a5:2b:1d:
2d:3c:f8:11:46:01:72:dd:e0:84:d0:18:b1:7f:ef:aa:06:bd:
b7:1f:5b:8e:ba:75:2c:18:41:f1:a6:80:02:70:72:b6:cd:09:
b1:d6:24:c5:f2:bc:91:ab:4f:6d:a2:7a:62:04:67:9c:69:99:
7b:41:6a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:34:05 2025 by rpki-client