Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135312e3130362e3131322e302f32302d3234203d3e203437353833.roa
File: 3135312e3130362e3131322e302f32302d3234203d3e203437353833.roa (raw, json)
Hash identifier: N3VnsCU+Vts/5kfvYd0R46TiEKBCfWd1upCNiwsTrOo=
Subject key identifier: FE:15:48:EF:88:E8:DD:44:BE:4D:BD:11:2E:AE:E6:96:C0:85:84:4D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 79EC8EA7547FC65389F6B88A1785355E12DC4E8C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135312e3130362e3131322e302f32302d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:45:16 +0000
ROA not before: Mon 27 Jan 2025 09:40:16 +0000
ROA not after: Mon 26 Jan 2026 09:45:16 +0000
asID: 47583
IP address blocks: 151.106.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ec:8e:a7:54:7f:c6:53:89:f6:b8:8a:17:85:35:5e:12:dc:4e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:16 2025 GMT
Not After : Jan 26 09:45:16 2026 GMT
Subject: CN=FE1548EF88E8DD44BE4DBD112EAEE696C085844D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:3a:24:d1:5d:f7:2d:64:56:ea:4c:94:35:
7b:4f:74:96:54:c9:c1:2a:cc:e7:ff:0d:22:73:88:
f8:a8:a6:8e:d1:8e:b7:55:53:72:3b:87:26:7c:78:
b6:42:2d:fd:de:d7:96:f1:c7:eb:4c:b0:78:6e:50:
8c:b3:4f:00:ad:18:05:6e:9f:25:6e:e6:fc:99:b0:
12:2e:ed:75:58:bb:6b:7e:29:9c:67:38:b2:20:db:
d6:ac:a1:17:e4:7c:54:ee:ba:fe:5e:1f:ea:00:e7:
a9:a7:4e:53:5c:d3:c1:6a:52:03:8c:5c:a4:07:9d:
e6:ed:0f:6e:4d:5f:1a:0b:26:69:db:d3:4f:04:71:
0b:09:12:71:72:bd:72:e0:80:99:fa:84:01:e9:d0:
ce:80:87:de:ba:e7:5a:2f:d0:26:ab:79:98:50:af:
a7:fe:6e:31:1f:50:2f:3c:4d:6e:d7:65:2d:0e:92:
97:81:ee:0a:4c:1b:98:46:6c:72:1a:f7:d3:6d:3b:
68:a0:6d:f8:0b:5e:52:54:90:46:7b:f7:d7:e8:51:
59:4a:a7:77:2d:a0:c1:bd:22:72:a6:95:f2:4e:93:
9b:fa:c7:5a:75:5d:a2:d8:cf:56:7f:03:96:cc:16:
9b:f0:f8:70:04:d4:d9:ce:59:cb:4b:0d:b0:56:c2:
2a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:15:48:EF:88:E8:DD:44:BE:4D:BD:11:2E:AE:E6:96:C0:85:84:4D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135312e3130362e3131322e302f32302d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.106.112.0/20
Signature Algorithm: sha256WithRSAEncryption
62:e6:42:72:78:8a:17:ee:92:bb:e5:9a:23:b2:0a:d9:94:18:
43:70:08:c0:ba:2a:a4:2e:dd:10:ff:f8:54:0a:1f:24:53:09:
26:ec:f7:80:8f:c0:ab:0b:80:c5:ff:5e:32:e5:44:81:6a:85:
28:a6:7a:56:14:5a:52:51:3e:54:7f:fa:e1:d4:7e:8a:be:df:
e4:ab:7e:86:a0:eb:09:50:5b:d7:18:78:36:0a:cf:93:1c:31:
75:f8:74:ad:ed:3b:19:43:f0:a7:6b:e1:33:ee:54:49:06:91:
f0:f6:c8:f9:56:4f:0c:0c:a2:ab:4c:a2:66:db:ec:ca:51:ff:
aa:54:66:3f:b3:d0:7b:23:d1:67:5e:b7:dd:2f:ed:28:bb:87:
9b:83:4c:7a:da:4f:9e:3f:62:e6:d7:29:b9:4e:47:94:ec:e6:
59:6d:76:6e:3b:f3:e9:ac:6f:a6:02:fd:56:3f:0f:85:e4:00:
a7:58:ce:f3:1f:06:f7:9c:88:5e:3b:c8:41:75:70:ed:a5:d2:
df:ca:39:15:0f:80:05:0f:06:e4:30:e5:b7:7c:e7:89:2e:94:
d3:91:e1:ca:8c:05:ee:02:9b:e2:55:38:64:38:14:84:98:3f:
87:25:8c:15:43:a5:f0:1c:4f:c9:43:4c:37:65:c3:56:ba:b4:
92:1f:08:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:03:19 2025 by rpki-client