Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e302e302f32342d3234203d3e203536383736.roa
File: 3135352e3133332e302e302f32342d3234203d3e203536383736.roa (raw, json)
Hash identifier: VMzYJc4HH//iCfqiQRiCkUcipXqBLxehTqYYt28Bzfc=
Subject key identifier: 6B:76:A1:0E:23:DD:27:CA:67:A8:9D:09:87:4E:C8:FE:67:5B:69:7E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3AD4DA078AEC7568FB19F992979F1DE3BDA17738
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e302e302f32342d3234203d3e203536383736.roa
Signing time: Mon 27 Jan 2025 09:45:13 +0000
ROA not before: Mon 27 Jan 2025 09:40:13 +0000
ROA not after: Mon 26 Jan 2026 09:45:13 +0000
asID: 56876
IP address blocks: 155.133.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:d4:da:07:8a:ec:75:68:fb:19:f9:92:97:9f:1d:e3:bd:a1:77:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:13 2025 GMT
Not After : Jan 26 09:45:13 2026 GMT
Subject: CN=6B76A10E23DD27CA67A89D09874EC8FE675B697E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d7:88:1d:91:ad:3a:1f:3d:60:32:47:5c:8d:
cb:38:f6:af:6c:d9:02:d3:69:3f:97:95:0e:7d:c4:
b9:19:3f:34:9f:19:62:8a:a8:cd:94:15:44:a5:a5:
93:ad:06:23:33:45:23:ba:b8:b5:a2:f9:97:0d:d5:
5a:e5:1f:09:82:ba:21:7d:88:37:b2:27:91:30:9b:
0f:ac:f9:dd:2b:cf:12:63:f6:5a:30:ab:b3:52:70:
d0:a2:27:72:72:d0:64:29:78:fb:69:60:09:49:7f:
cb:5d:97:b6:04:c2:b2:04:71:20:ae:35:af:46:d9:
03:ce:ba:98:19:7b:e7:32:65:cc:af:d9:87:b9:02:
66:f8:4b:d3:f8:94:45:71:fb:13:0a:f7:a1:db:8b:
6c:d2:20:d5:61:8f:bf:48:22:06:91:2a:c0:87:7e:
dc:81:77:97:9d:26:94:40:82:86:76:0c:c6:81:4e:
99:57:9b:59:b3:bc:3f:10:af:9d:8f:b8:57:b6:ec:
a1:d3:83:a5:8c:c0:b7:dd:3c:a0:0c:77:5d:1c:15:
73:36:e5:df:d4:04:0e:68:5a:5b:b0:73:24:1f:e8:
01:4f:cd:a0:f3:42:cc:e3:da:62:a8:00:dd:08:0c:
2d:2b:e7:fa:a0:8c:59:a7:0e:a7:bd:c9:79:21:1d:
20:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:76:A1:0E:23:DD:27:CA:67:A8:9D:09:87:4E:C8:FE:67:5B:69:7E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e302e302f32342d3234203d3e203536383736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.0.0/24
Signature Algorithm: sha256WithRSAEncryption
25:de:54:22:e7:cd:ff:5a:35:1c:d6:7a:58:7f:8b:10:bb:92:
2b:ef:a8:8e:44:cb:ff:94:ad:ac:68:ae:44:24:6d:3e:a4:a2:
b9:9e:63:61:bc:2d:ed:70:4d:74:ee:3b:e8:6f:04:e3:3c:01:
df:40:19:30:96:22:d7:18:63:bb:aa:c5:e3:a9:82:fc:62:7f:
bf:a8:58:44:a6:94:7d:9a:3e:79:d1:5c:e5:dd:c7:39:d0:fd:
ac:9c:88:29:de:4f:fb:57:a3:ee:4b:93:34:f5:5b:90:4e:d3:
ab:4b:d3:c7:fe:46:3b:37:45:db:07:3b:b1:aa:0b:d4:b8:57:
ad:7a:9c:88:49:83:e0:03:41:2b:de:48:4d:01:15:53:2c:b4:
05:c0:da:7a:4e:43:5c:76:d1:e0:bc:c3:f2:33:c7:c7:d7:59:
3a:48:9a:af:47:ec:30:b7:15:69:07:06:3b:ce:9f:18:8c:f1:
46:ad:c0:12:c6:c2:86:8e:dc:39:64:e8:52:d8:99:96:e7:f5:
7c:c7:60:85:72:c7:e9:3e:30:65:18:86:31:2b:cd:dc:f3:f6:
c3:ee:32:da:0c:2f:b5:b0:e8:16:be:85:79:23:36:da:c7:bd:
41:30:46:83:cb:ca:3c:b4:57:8a:46:d9:2c:6f:8b:56:8f:a6:
db:91:97:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:08 2025 by rpki-client