Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135312e3130362e39362e302f32302d3234203d3e203437353833.roa
File: 3135312e3130362e39362e302f32302d3234203d3e203437353833.roa (raw, json)
Hash identifier: AdbTwYJL+/hX+KDuirk57VdmbpDgqM0c4MRHWM7+gYw=
Subject key identifier: 71:C9:7A:44:05:76:C3:E4:A9:DB:6E:B2:C3:23:88:CC:B7:A5:32:1B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3DF1B4C6C61B6B56A8ED4A7A9EF62A075228A37D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135312e3130362e39362e302f32302d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:44:59 +0000
ROA not before: Mon 27 Jan 2025 09:39:59 +0000
ROA not after: Mon 26 Jan 2026 09:44:59 +0000
asID: 47583
IP address blocks: 151.106.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f1:b4:c6:c6:1b:6b:56:a8:ed:4a:7a:9e:f6:2a:07:52:28:a3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:39:59 2025 GMT
Not After : Jan 26 09:44:59 2026 GMT
Subject: CN=71C97A440576C3E4A9DB6EB2C32388CCB7A5321B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f8:89:e9:fe:f9:5b:24:e2:9e:eb:24:c8:6a:
a5:79:7d:aa:ce:a1:51:7c:a1:d3:34:47:f4:f6:8f:
6d:28:13:72:a8:ed:e7:e3:79:b4:85:67:5e:2b:d1:
4e:55:29:56:ad:19:e2:bf:03:a5:06:41:1a:4a:b7:
9a:52:4f:2f:1a:47:43:b2:14:8d:c6:fc:c2:40:34:
4d:2a:c0:34:2a:f2:6d:92:a8:dd:64:5e:b7:db:2d:
ad:50:5c:01:d9:e6:33:af:4e:76:71:4e:bc:0c:38:
59:2a:bd:fa:9f:d6:4b:7f:a9:d7:52:fd:78:1b:97:
a0:56:54:75:39:6d:d4:f0:6f:28:97:c8:cc:15:86:
b0:70:e7:23:2c:a4:c6:2b:50:c5:07:db:8d:f6:4b:
92:af:fa:cf:ec:05:47:c5:98:4a:b7:d0:17:cf:1f:
3d:ae:75:93:72:3e:3d:1e:f6:03:f4:ec:16:e4:f1:
16:3c:0b:4d:5d:2b:e5:b1:fc:ba:fd:28:e7:ba:d4:
a6:f6:96:c2:6d:5d:79:73:8d:fe:6d:e7:db:28:1e:
ae:a7:b8:2e:c0:e5:30:c7:69:3c:75:83:b1:ff:5a:
da:8c:19:43:0d:05:66:d5:a0:05:ce:5c:94:15:ca:
8b:9f:28:d9:c3:00:05:82:91:a7:cf:d8:52:36:bd:
12:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C9:7A:44:05:76:C3:E4:A9:DB:6E:B2:C3:23:88:CC:B7:A5:32:1B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135312e3130362e39362e302f32302d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.106.96.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:b5:94:43:d8:0d:c3:35:ff:57:43:70:c0:44:b7:08:35:64:
df:50:7c:18:57:cb:5e:4f:33:e6:1a:e2:7f:27:cc:22:ec:37:
51:15:9f:ac:a5:dc:ba:21:ec:5d:12:2e:12:c8:b5:84:36:61:
ee:49:1e:08:fb:48:41:13:c8:3c:a8:4e:0c:d7:eb:bc:93:bd:
74:26:5e:b6:27:a1:6f:33:71:29:1f:46:8d:38:6d:0e:3a:79:
bf:6a:73:7f:f4:7d:04:49:86:0e:4b:f2:d4:da:cf:c5:c4:55:
15:95:ac:3a:0b:9d:2e:8d:38:f7:69:90:6d:c3:24:1d:a7:a4:
ba:5d:b0:9b:da:3f:e5:f7:37:f0:a4:ac:bf:ba:33:9b:7a:3a:
cc:29:2a:20:88:e3:fc:8a:4a:e1:89:ea:0d:a5:bd:5b:6b:16:
1a:a5:b0:5f:9a:f8:b1:fd:19:08:a6:94:b9:58:1f:ef:ca:c3:
74:e4:ec:cb:be:42:34:7e:9a:99:a5:01:58:2f:bc:a4:37:c6:
26:27:8a:bd:1a:82:e2:49:15:71:72:db:c9:52:91:44:cc:80:
31:03:c2:1f:37:34:38:d7:b9:27:f9:8b:f7:33:8f:39:66:0f:
1b:02:4d:0a:c9:e5:6b:f1:4e:18:4f:78:a7:6e:a4:ca:da:70:
28:65:fc:bf
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUPfG0xsYba1ao7Up6nvYqB1Ioo30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMjcwOTM5NTlaFw0yNjAxMjYwOTQ0NTlaMDMxMTAvBgNV
BAMTKDcxQzk3QTQ0MDU3NkMzRTRBOURCNkVCMkMzMjM4OENDQjdBNTMyMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd+Inp/vlbJOKe6yTIaqV5farO
oVF8odM0R/T2j20oE3Ko7efjebSFZ14r0U5VKVatGeK/A6UGQRpKt5pSTy8aR0Oy
FI3G/MJANE0qwDQq8m2SqN1kXrfbLa1QXAHZ5jOvTnZxTrwMOFkqvfqf1kt/qddS
/Xgbl6BWVHU5bdTwbyiXyMwVhrBw5yMspMYrUMUH2432S5Kv+s/sBUfFmEq30BfP
Hz2udZNyPj0e9gP07Bbk8RY8C01dK+Wx/Lr9KOe61Kb2lsJtXXlzjf5t59soHq6n
uC7A5TDHaTx1g7H/WtqMGUMNBWbVoAXOXJQVyoufKNnDAAWCkafP2FI2vRIpAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUccl6RAV2w+Sp226ywyOIzLelMhswHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTMxMmUzMTMwMzYyZTM5
MzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE
l2pgMA0GCSqGSIb3DQEBCwUAA4IBAQBLtZRD2A3DNf9XQ3DARLcINWTfUHwYV8te
TzPmGuJ/J8wi7DdRFZ+spdy6IexdEi4SyLWENmHuSR4I+0hBE8g8qE4M1+u8k710
Jl62J6FvM3EpH0aNOG0OOnm/anN/9H0ESYYOS/LU2s/FxFUVlaw6C50ujTj3aZBt
wyQdp6S6XbCb2j/l9zfwpKy/ujObejrMKSogiOP8ikrhieoNpb1baxYapbBfmvix
/RkIppS5WB/vysN05OzLvkI0fpqZpQFYL7ykN8YmJ4q9GoLiSRVxctvJUpFEzIAx
A8IfNzQ417kn+Yv3M485Zg8bAk0KyeVr8U4YT3inbqTK2nAoZfy/
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:01:31 2025 by rpki-client