Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e38342e302f32322d3234203d3e203437353833.roa
File: 3134372e39332e38342e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: RszpWnwm+7GMOT+iYpfXZpnPF0Wtv1mZXOWWmLzhUxg=
Subject key identifier: 8C:BD:2F:9D:7B:71:4B:4B:E9:00:05:AA:5C:0F:41:C6:B0:49:06:DA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2976AF2E48632C7C26CCC690E874C37975810114
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e38342e302f32322d3234203d3e203437353833.roa
Signing time: Mon 16 Dec 2024 19:54:04 +0000
ROA not before: Mon 16 Dec 2024 19:49:04 +0000
ROA not after: Mon 15 Dec 2025 19:54:04 +0000
asID: 47583
IP address blocks: 147.93.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:76:af:2e:48:63:2c:7c:26:cc:c6:90:e8:74:c3:79:75:81:01:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 16 19:49:04 2024 GMT
Not After : Dec 15 19:54:04 2025 GMT
Subject: CN=8CBD2F9D7B714B4BE90005AA5C0F41C6B04906DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8c:53:96:c8:ec:ca:a5:5d:4a:58:50:ea:da:
95:fe:9e:ad:07:7a:f9:f7:0c:7d:7a:b5:18:95:f9:
fe:db:a2:24:7c:64:d6:69:64:5c:4c:94:57:0d:d3:
c1:b3:9e:3d:e2:66:b5:75:73:fb:48:b5:3e:b1:55:
85:e3:40:95:ee:1a:c8:d8:94:fb:ba:a5:35:a3:0e:
c9:62:6d:fe:88:10:11:35:b7:3c:6e:6b:a5:ed:69:
38:eb:eb:a3:65:31:ab:aa:10:8c:dc:89:5c:87:c2:
2e:9e:a4:27:58:12:d0:40:60:dd:75:35:70:36:89:
b5:96:fb:bc:cf:04:02:c4:02:95:68:17:e2:6d:78:
22:f2:cb:fc:d5:e6:55:94:55:b0:c4:4d:d8:0d:ea:
dc:f9:d6:a1:ee:87:85:bb:85:f8:a0:8f:d1:c1:e7:
11:9f:03:86:01:58:b3:e9:de:1c:e3:9f:67:77:f9:
ab:08:39:60:e3:a7:76:64:95:b7:2d:df:a4:b9:0b:
bb:f5:7c:9f:af:0f:40:5e:f4:31:0d:6f:f1:ed:22:
a4:07:83:85:93:b8:9e:4d:ed:97:81:8d:59:9a:0e:
fb:9f:ba:55:82:99:78:ae:c6:43:e1:21:60:c8:b1:
61:66:49:0d:77:d5:b7:9a:da:ea:42:c4:7a:80:c9:
46:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BD:2F:9D:7B:71:4B:4B:E9:00:05:AA:5C:0F:41:C6:B0:49:06:DA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e38342e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.84.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:e7:38:41:50:33:5f:63:55:ea:47:54:a1:3f:b4:45:23:b4:
af:13:01:e8:a0:65:e1:c3:c3:69:1d:a0:6c:24:00:26:65:1f:
64:14:3c:cd:8d:9b:df:9d:56:c5:7e:58:7e:11:ef:54:4f:28:
00:e0:eb:71:8d:c3:9c:68:16:a3:d9:c4:b5:7a:87:ab:10:d4:
62:82:e4:1f:cf:59:5d:87:6b:19:7f:0c:fb:8f:c4:53:05:cd:
f4:d3:ee:af:60:47:40:a4:d1:09:bb:d0:1f:66:fb:5e:10:1a:
56:9f:b3:af:d1:59:85:94:fa:f2:68:f6:b4:82:7a:da:ef:29:
5e:0b:d1:ff:87:ca:56:a2:d6:59:a4:2f:98:fe:ef:8e:19:91:
8c:3d:0e:9b:db:69:bc:4b:45:63:f9:b3:27:af:b2:10:48:31:
67:ca:ca:47:5c:94:d0:d8:be:aa:90:d4:52:98:fb:4a:42:0e:
38:da:0a:5f:41:08:e4:a1:d2:1e:b4:d8:25:74:c7:7a:10:9a:
87:18:36:ad:83:e1:31:7e:6b:26:74:bf:c0:5c:f5:80:0a:ce:
9b:e7:89:79:1d:84:68:c1:50:b7:75:f8:b5:2a:db:89:2d:77:
af:36:e6:f7:80:8c:58:fe:8c:04:9f:bd:ad:ab:2f:74:f8:62:
f5:f3:36:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:58:18 2025 by rpki-client