Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e33322e302f32312d3234203d3e203437353833.roa
File: 3134372e39332e33322e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: UVZv5hi3TwAHFDm85ned7MgUSuqcDrhbBLYdtQmPZZ4=
Subject key identifier: C8:2E:34:63:81:6D:AA:04:8E:53:07:0E:F1:4A:13:19:EC:88:FD:3F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1C10820633B602A22A1F406A95B109181837F7C2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e33322e302f32312d3234203d3e203437353833.roa
Signing time: Wed 11 Dec 2024 16:33:23 +0000
ROA not before: Wed 11 Dec 2024 16:28:23 +0000
ROA not after: Wed 10 Dec 2025 16:33:23 +0000
asID: 47583
IP address blocks: 147.93.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:10:82:06:33:b6:02:a2:2a:1f:40:6a:95:b1:09:18:18:37:f7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 11 16:28:23 2024 GMT
Not After : Dec 10 16:33:23 2025 GMT
Subject: CN=C82E3463816DAA048E53070EF14A1319EC88FD3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:19:27:4b:36:bc:99:c3:45:95:4a:bb:3f:
33:7e:94:28:00:af:de:d7:53:d3:82:94:7a:d9:eb:
3d:57:48:6b:8b:94:fd:31:9c:21:2c:c2:1a:ee:57:
19:c0:0c:d2:11:e7:3c:00:e4:1b:8b:bc:5a:b9:f5:
09:6b:22:67:57:5a:64:5b:71:b3:11:aa:b0:f0:d5:
cd:4d:a6:f2:51:82:23:df:63:55:f3:31:08:2e:39:
4c:a3:8f:03:4f:81:4b:8f:86:fa:98:37:be:57:3b:
91:b3:5a:d2:ae:7d:b1:6d:a2:37:09:e6:b8:a1:fe:
85:33:49:b3:e2:ca:73:4b:f8:fb:2b:70:5a:71:b7:
7f:44:da:e9:5a:13:e2:4e:f2:03:55:7e:03:3e:3f:
6f:93:94:72:30:0a:3f:3a:f2:7d:cd:96:e6:6f:21:
4d:9a:ab:a5:ac:89:cc:c0:7c:aa:db:fb:d7:a8:7e:
4b:2e:8c:fd:61:3b:98:9f:e9:80:f7:2e:23:6f:af:
69:2c:d7:58:5e:7b:56:15:f7:89:ff:97:60:3f:45:
5e:7f:58:98:8b:80:e8:7b:9e:8f:a5:77:e6:6a:44:
53:7b:e0:d3:0f:76:7b:f8:26:36:33:09:67:ba:c6:
72:1e:82:db:1f:a9:bd:e6:f8:39:e8:81:b9:eb:f3:
01:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2E:34:63:81:6D:AA:04:8E:53:07:0E:F1:4A:13:19:EC:88:FD:3F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e33322e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.32.0/21
Signature Algorithm: sha256WithRSAEncryption
52:02:fb:dd:09:8c:9f:25:d6:83:ff:6b:f7:42:81:a1:e5:ce:
b0:07:56:7b:65:1a:27:d3:e3:cf:5a:04:a8:cd:7a:b5:f6:81:
bf:d6:c8:9e:87:40:86:5c:9c:0a:77:02:87:97:4d:8f:00:f1:
fc:0a:47:b2:23:62:08:0e:4b:03:74:91:bb:bf:3b:fd:ab:5f:
d0:84:b8:0d:8d:e8:b9:36:1d:c9:21:2a:74:9e:d6:de:54:00:
5e:c2:70:7c:92:eb:e7:3f:a1:3f:18:9a:e5:a8:ae:ee:96:1e:
e6:c3:8f:e2:75:4d:43:0c:46:db:68:1d:93:37:6f:57:c2:a5:
46:4c:83:fe:48:0a:18:04:12:0c:25:b1:a6:31:af:87:3c:cf:
ed:fc:d0:a7:6c:34:66:de:03:35:06:50:cc:30:67:2f:58:fd:
7c:d9:f9:a8:33:a0:1e:3c:ba:9a:49:2d:47:f3:80:6a:4a:97:
ab:1f:38:6d:fb:0a:92:c5:c2:2a:49:b8:aa:1f:18:93:4b:f6:
14:de:16:1f:72:6e:1e:81:04:e2:3f:a3:7e:27:67:48:7d:dc:
be:23:6c:47:d3:5a:db:b8:d0:71:8c:3b:20:11:2c:e8:d0:85:
29:72:13:d6:5f:03:31:3b:c0:30:e3:6d:47:2c:3c:8f:d9:a5:
51:06:8e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:58:11 2025 by rpki-client