Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e302e302f32322d3232203d3e20323031333431.roa
File: 3135362e36372e302e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier: 2ZlqbPB8qceacPls6QH34YjaGty9sDCwiPHS80MUMhk=
Subject key identifier: 04:CE:A9:5F:E2:96:E6:50:52:6B:BF:2E:0B:21:17:DD:F6:A6:CA:6C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 693B0BC8F7837FC84DF5769816938925ED2F71AD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e302e302f32322d3232203d3e20323031333431.roa
Signing time: Mon 27 Jan 2025 09:45:01 +0000
ROA not before: Mon 27 Jan 2025 09:40:01 +0000
ROA not after: Mon 26 Jan 2026 09:45:01 +0000
asID: 201341
IP address blocks: 156.67.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:3b:0b:c8:f7:83:7f:c8:4d:f5:76:98:16:93:89:25:ed:2f:71:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:01 2025 GMT
Not After : Jan 26 09:45:01 2026 GMT
Subject: CN=04CEA95FE296E650526BBF2E0B2117DDF6A6CA6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:20:dc:c5:7b:dd:01:b6:65:12:d0:13:5b:ed:
8f:84:56:32:e2:d8:a7:9c:78:60:2a:f4:d4:bc:6b:
45:ed:7f:5a:b9:ca:12:50:b6:96:cc:21:35:40:df:
b3:dd:67:f9:5f:09:b7:5b:b6:14:c4:1b:2e:6c:03:
9e:4a:78:83:20:78:6c:e4:2e:1a:33:8d:7b:fe:bf:
fa:f7:5d:48:5a:6c:fc:04:26:fe:2e:bc:80:e9:46:
0b:b4:18:7e:1f:de:8a:2f:b1:16:e7:0f:d6:26:24:
31:bf:51:94:7d:e8:ab:2a:06:e3:27:3d:2d:38:4f:
83:a4:7f:82:33:a6:0c:92:58:00:02:42:a1:fb:01:
69:44:ea:fa:e4:4f:2a:cd:60:76:ce:af:76:07:14:
97:50:25:34:1c:fd:aa:d1:91:b4:d2:30:68:15:dc:
f3:cd:38:05:e7:b4:11:a6:42:3c:aa:a4:15:a0:6e:
bc:c4:a8:62:71:82:30:81:c0:ea:d9:1b:f6:2b:8c:
0f:e5:07:ae:03:85:cd:76:9c:90:f7:c9:1a:55:15:
7e:5a:dd:75:10:c7:05:f5:b3:45:84:11:82:df:81:
30:e1:61:f6:fe:da:d7:08:0a:42:4f:5e:56:1e:69:
b8:2e:a8:a1:cc:e8:e1:d0:c8:f4:83:63:cb:bd:fa:
2a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CE:A9:5F:E2:96:E6:50:52:6B:BF:2E:0B:21:17:DD:F6:A6:CA:6C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e302e302f32322d3232203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.0.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:db:a6:44:bf:ff:0c:9a:97:eb:d7:6f:57:13:77:46:be:4e:
02:9c:d3:3a:77:d0:19:08:53:37:d6:1c:e4:31:df:33:bc:ab:
7d:07:0b:f2:f9:ef:a5:2c:05:46:2e:e8:0f:ec:84:3c:54:c9:
59:e1:21:3d:8d:6e:80:02:e9:48:67:69:a3:4b:94:26:d9:06:
ea:e9:75:68:24:f3:f3:e7:43:99:2d:b4:b4:9f:03:3f:d7:f3:
07:ea:3a:1b:43:6d:8f:22:8a:f8:10:52:a9:61:7f:29:58:40:
0f:a6:e2:01:bf:f8:f7:4a:60:7e:81:b7:8b:31:b0:d6:23:54:
4d:f2:0d:dd:00:dc:24:bd:5d:16:b8:ec:57:21:de:3f:6b:f8:
92:24:f6:29:e0:cc:ba:f4:59:0d:d2:b1:92:20:88:ba:6e:40:
50:34:44:b2:7b:fc:5c:46:24:62:fd:0d:79:c6:59:ff:32:81:
f9:88:c5:15:ff:12:fb:bd:64:72:95:5e:9d:19:3b:df:be:c1:
60:a1:22:35:85:ea:9d:6e:29:5c:8d:d8:78:2f:bf:f4:df:09:
6b:ef:f5:12:40:b1:47:de:89:f4:df:48:a3:f8:b8:b5:33:54:
36:24:47:59:ed:82:f8:8d:78:29:5c:49:a8:d0:5d:64:d3:a8:
70:51:60:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:02:02 2025 by rpki-client