Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e35362e302f32312d3234203d3e203437353833.roa
File: 3134372e39332e35362e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: mE5bnDxjR51yo5VtVDoqX2gUgvbSoAJKLvax3iby3z8=
Subject key identifier: 38:8C:25:F7:35:EB:E8:A4:1B:66:35:C4:3A:DC:F4:E6:8E:8B:29:6B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3DA43741DA5A469EF6236A9BBE5D95B2FEA9F4B3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e35362e302f32312d3234203d3e203437353833.roa
Signing time: Wed 11 Dec 2024 16:34:44 +0000
ROA not before: Wed 11 Dec 2024 16:29:44 +0000
ROA not after: Wed 10 Dec 2025 16:34:44 +0000
asID: 47583
IP address blocks: 147.93.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:a4:37:41:da:5a:46:9e:f6:23:6a:9b:be:5d:95:b2:fe:a9:f4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 11 16:29:44 2024 GMT
Not After : Dec 10 16:34:44 2025 GMT
Subject: CN=388C25F735EBE8A41B6635C43ADCF4E68E8B296B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:49:dd:06:fa:a7:f9:34:50:3e:e4:fe:87:58:
49:1b:19:ea:d5:15:8c:9f:52:1e:fb:04:e2:37:68:
7b:0e:5c:6c:a2:38:3f:0d:4a:e3:a5:49:3c:de:fd:
6b:67:bc:63:75:f5:d8:a6:22:1e:5d:bc:3f:ba:f5:
6f:15:ae:b0:57:b5:2f:39:03:62:d6:7e:6e:61:6f:
09:6c:ef:33:2e:2f:24:db:ff:02:e9:4d:f2:3e:84:
d3:f6:f5:3b:fb:ec:2d:ca:c8:02:98:b3:c2:57:7a:
38:09:bd:1a:f3:69:94:02:4a:53:dc:9d:80:a6:e3:
b7:1b:66:04:cd:5c:a9:2a:21:da:9c:ae:5b:b2:44:
5a:cb:cf:b9:42:67:8a:c2:77:7a:39:5d:9e:12:e6:
d4:a5:9c:9e:f7:03:5f:0a:2b:36:ac:55:0e:08:df:
0f:53:9e:52:47:81:75:29:6c:c4:27:34:c0:eb:5b:
25:ed:aa:1c:aa:60:ea:7a:d8:de:ca:3e:f1:71:03:
da:37:0f:e5:d4:c8:68:99:ce:75:af:78:6c:85:0f:
c3:ef:a4:dd:0f:f9:24:89:fc:b3:21:87:3a:a7:32:
d0:1c:95:bb:9e:f9:5a:2e:86:00:03:ad:d5:5e:16:
c7:55:67:15:28:9e:a7:ca:57:a6:18:fe:17:df:ba:
74:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8C:25:F7:35:EB:E8:A4:1B:66:35:C4:3A:DC:F4:E6:8E:8B:29:6B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e35362e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.56.0/21
Signature Algorithm: sha256WithRSAEncryption
84:a4:4d:a1:db:ba:13:10:47:0b:db:a7:bb:b5:73:17:2e:7e:
f3:cd:b7:b0:65:5a:67:a1:a1:31:95:1b:19:d4:6a:95:38:4d:
3a:f1:18:da:39:ca:49:60:ee:d6:70:0d:c2:e8:11:50:ef:07:
96:cb:75:3c:df:9e:04:70:25:10:95:cb:d9:c3:ee:30:93:fd:
b7:eb:5b:df:95:d2:38:51:d0:19:bf:9a:c9:4d:23:c6:ac:af:
d9:71:a0:ef:43:f4:d3:a2:2d:cc:2c:64:58:f0:0c:ed:2e:8d:
5c:51:89:98:df:8f:3b:16:6c:3c:38:2f:76:b7:95:9e:ae:20:
9a:25:be:9c:41:15:48:fe:4c:9e:b3:e7:71:6b:9d:4a:57:12:
53:fe:61:ba:af:37:4e:26:ca:0b:65:8d:71:b0:92:3e:a3:a6:
fe:45:ee:ee:b6:cc:18:e2:89:45:94:b4:1f:df:6f:71:ad:77:
17:b4:a3:c5:e2:f3:25:6e:82:e6:5c:cb:d0:48:2c:2e:06:d0:
18:43:a4:58:33:65:7d:68:3b:ea:46:f6:f1:6f:c0:fd:97:7b:
65:3b:3b:4c:2b:55:ce:db:c3:d5:d1:db:17:18:2a:0d:3c:c3:
54:90:c5:2a:ef:45:0d:8a:23:bd:61:c8:82:66:52:dd:47:49:
65:09:f5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:45 2025 by rpki-client