Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e372e302f32342d3332203d3e20313431393935.roa
File: 3135352e3133332e372e302f32342d3332203d3e20313431393935.roa (raw, json)
Hash identifier: m3K9vTMgzPyhBFmdNobO5NA1z66oxC2bcsrEOq8ut14=
Subject key identifier: E5:2A:7B:82:5A:2B:38:E4:92:4B:A0:27:86:7F:4D:24:2B:B7:E7:9F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 50BF5ACCF953AA13D2D7131DB026CF98A2F24908
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e372e302f32342d3332203d3e20313431393935.roa
Signing time: Mon 27 Jan 2025 09:45:30 +0000
ROA not before: Mon 27 Jan 2025 09:40:30 +0000
ROA not after: Mon 26 Jan 2026 09:45:30 +0000
asID: 141995
IP address blocks: 155.133.7.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 15:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:bf:5a:cc:f9:53:aa:13:d2:d7:13:1d:b0:26:cf:98:a2:f2:49:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:30 2025 GMT
Not After : Jan 26 09:45:30 2026 GMT
Subject: CN=E52A7B825A2B38E4924BA027867F4D242BB7E79F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ae:03:07:ee:58:6a:80:a9:03:64:de:dc:ea:
fe:e8:06:9d:b5:76:bf:c6:3a:86:93:44:ae:ad:b3:
57:71:35:23:f9:5e:54:77:b7:bb:ce:ed:91:0e:8f:
79:a9:ea:45:fb:a2:e4:90:46:0a:3b:f2:84:2d:4b:
c0:30:ec:31:62:cf:4e:19:39:10:73:7f:32:b0:12:
68:4b:ea:3b:1a:fc:46:38:16:a8:72:21:f3:9f:c4:
73:a1:4c:44:33:62:20:01:c2:2b:69:31:89:b6:93:
9c:a7:7e:09:6b:f4:71:26:f7:5c:1a:44:ce:66:f1:
b2:c9:b5:8e:3c:30:1c:f4:1c:94:2a:7f:b4:41:88:
12:78:89:88:30:97:49:3a:a3:78:d7:d7:af:cb:cb:
2a:c5:d5:f5:19:66:42:7b:ad:9f:5e:dd:0d:69:ef:
69:03:af:2d:73:de:95:05:a1:00:2b:46:cb:e4:f7:
c7:44:1e:29:b3:54:66:cd:80:b1:d3:d7:3f:13:e2:
32:ce:9b:ab:a1:5b:70:25:1a:3e:7c:88:73:32:f6:
7a:74:72:9e:f0:d3:ee:b0:14:26:1d:44:69:96:0f:
62:a6:a6:5f:e0:cc:4f:af:6d:22:50:43:52:fd:b2:
57:5b:3d:f7:40:47:38:4e:54:53:e8:6b:ff:47:6a:
18:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2A:7B:82:5A:2B:38:E4:92:4B:A0:27:86:7F:4D:24:2B:B7:E7:9F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e372e302f32342d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.7.0/24
Signature Algorithm: sha256WithRSAEncryption
24:84:5a:02:ae:c8:25:91:ae:5d:fa:03:68:51:15:7e:ed:d6:
25:22:e7:a0:2c:fd:7c:9d:e9:53:f5:16:43:a1:99:aa:d6:b6:
7a:78:72:d2:d5:61:27:67:19:9e:60:a5:f0:c3:7d:a6:f1:5a:
9c:38:ef:34:6c:d6:33:54:e7:d6:74:4c:c5:03:09:52:fe:e0:
9e:50:5d:28:01:71:17:59:c2:9f:c6:bc:bb:cf:44:e6:d0:9a:
31:8b:35:2f:7d:d9:fa:c1:9b:f7:40:0f:62:3e:06:16:e4:fa:
f6:16:0f:f7:0a:6a:2a:1a:73:4a:97:14:2e:f5:26:61:4e:6c:
22:ef:11:31:29:c3:a5:6f:7a:57:2a:50:8a:98:2b:a1:f5:a6:
29:e9:1b:8e:6f:3b:05:c8:29:50:fa:f2:f7:9b:81:18:2b:54:
37:17:d3:f9:ac:9b:0d:6a:f0:fd:15:c8:92:84:27:de:27:45:
dc:48:bb:6b:bb:f0:e4:c6:4f:b7:06:a8:d4:c8:8b:31:37:d8:
29:bf:f7:74:65:ab:16:3a:ee:62:ae:14:32:58:7b:01:4e:40:
61:37:60:3f:73:61:51:3a:3d:4e:04:6f:08:22:1e:2f:5e:2d:
ff:18:7a:df:28:71:48:a0:0f:a0:55:e3:ba:37:8d:1e:09:8f:
eb:11:36:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 03:39:44 2025 by rpki-client