Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130332e302f32342d3234203d3e20313336373837.roa
File: 3135362e36372e3130332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Ic81nji2q0Ta7NQxzCDfzY+rO579MtIYT55FWT7Ixvg=
Subject key identifier: 81:1F:D4:20:F8:29:82:44:DA:3C:F4:5F:E4:B9:E8:91:FC:EA:ED:8A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6FD83940B9E01F2C90599E93ECB1EDA45ABEE78E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130332e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 01 Feb 2025 22:45:36 +0000
ROA not before: Sat 01 Feb 2025 22:40:36 +0000
ROA not after: Sat 31 Jan 2026 22:45:36 +0000
asID: 136787
IP address blocks: 156.67.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:d8:39:40:b9:e0:1f:2c:90:59:9e:93:ec:b1:ed:a4:5a:be:e7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 1 22:40:36 2025 GMT
Not After : Jan 31 22:45:36 2026 GMT
Subject: CN=811FD420F8298244DA3CF45FE4B9E891FCEAED8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:50:87:6a:48:61:7c:89:d3:d3:8b:30:bb:
70:9d:d4:20:a2:ee:bb:8a:9d:d2:30:7c:34:57:9e:
0e:1e:92:ad:d1:f6:79:1a:f8:93:09:9f:95:36:53:
7f:14:7b:9e:bb:9b:40:6e:40:fc:08:a0:ab:0f:34:
43:2a:2a:e4:55:19:b4:db:d1:04:6f:d2:a3:2a:93:
96:2e:6e:0b:27:e2:b3:36:b7:a1:72:88:3d:03:80:
33:39:e5:a3:55:b3:8c:88:7e:7b:93:96:2b:5c:07:
5c:0c:0e:16:e0:3c:cb:f1:ad:eb:b6:a7:bb:4a:43:
ce:d8:89:8d:65:a3:3d:77:49:fc:17:bc:2d:ac:c1:
ea:f8:a1:4a:8d:44:23:c4:8c:aa:64:42:78:dc:2f:
74:2a:48:52:b9:a7:51:0d:af:ba:65:b7:e3:c1:9e:
ec:5d:93:93:61:e6:52:05:69:b1:44:55:3f:a6:b1:
22:87:9a:a3:a9:7d:8d:10:fc:52:c6:8b:95:2b:b6:
03:04:83:a1:93:3c:f2:c3:2e:ef:d1:de:0e:0b:06:
c2:36:90:48:ef:03:53:6c:9a:5e:03:de:f5:48:a5:
b0:cd:48:f5:22:5f:16:3a:ed:dd:55:03:94:3b:0d:
12:ab:a1:04:f6:c2:c2:49:dc:02:3a:ca:c6:87:c2:
49:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1F:D4:20:F8:29:82:44:DA:3C:F4:5F:E4:B9:E8:91:FC:EA:ED:8A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.103.0/24
Signature Algorithm: sha256WithRSAEncryption
11:06:dd:fa:75:30:2d:c5:f5:b1:25:c1:27:01:a5:4d:c3:34:
4b:9a:42:ed:79:96:b6:f7:1d:f9:1c:41:57:06:41:8c:de:be:
ca:0d:dc:cb:f1:e8:e8:26:73:d0:61:20:00:f0:96:2d:c3:9b:
41:86:bb:f0:79:4d:2c:fc:82:71:2b:60:49:f2:f7:78:86:1d:
54:01:1b:e3:b7:47:5f:17:1d:a6:80:3f:0d:d4:36:1a:af:9c:
d6:d9:61:b5:87:06:8e:05:f8:86:1e:95:90:f3:ea:84:7c:a2:
f7:03:13:f3:69:c7:39:ff:9e:ae:69:b0:5a:7d:49:85:21:cf:
88:22:5b:41:dc:63:b1:5d:e1:aa:80:2d:38:43:cd:7f:ba:f3:
65:1b:db:75:46:dd:7c:e5:44:b0:2a:94:41:c9:1b:00:e7:82:
5d:2a:79:7a:53:7e:0d:76:eb:bd:b0:a0:1a:a6:62:97:3c:0f:
78:65:1b:e6:29:2d:5b:4b:79:31:3d:5b:19:93:b9:0e:39:98:
49:e2:ec:ce:9b:41:be:f5:16:7c:e6:4e:cb:5e:64:06:08:87:
02:01:2c:b2:7d:61:2a:c6:76:ca:2a:b6:a0:c7:8d:bf:7c:31:
93:cf:05:a3:e6:3f:83:80:cc:b2:46:5f:b4:e8:c0:82:f5:1d:
40:e0:ba:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:10:15 2025 by rpki-client