Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38392e302f32342d3234203d3e203630363935.roa
File: 3135362e36372e38392e302f32342d3234203d3e203630363935.roa (raw, json)
Hash identifier: jT96XK2aK/SefHLGMOaiKkFQ2pZbQdHtojrGTj5IhT0=
Subject key identifier: 84:63:A6:84:61:44:77:00:87:56:EC:EF:29:52:58:2F:F9:7C:08:BF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 047C8C1F2D5FF84D2733A92BFC5E783E5A18DEA6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38392e302f32342d3234203d3e203630363935.roa
Signing time: Mon 27 Jan 2025 09:45:10 +0000
ROA not before: Mon 27 Jan 2025 09:40:10 +0000
ROA not after: Mon 26 Jan 2026 09:45:10 +0000
asID: 60695
IP address blocks: 156.67.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:7c:8c:1f:2d:5f:f8:4d:27:33:a9:2b:fc:5e:78:3e:5a:18:de:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:10 2025 GMT
Not After : Jan 26 09:45:10 2026 GMT
Subject: CN=8463A684614477008756ECEF2952582FF97C08BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b1:c5:92:b7:70:88:c5:29:f7:c9:5c:75:c7:
d3:0b:8d:5f:4d:97:69:ed:cc:ae:ea:44:54:e0:df:
e0:e4:05:cd:1f:91:f6:9b:29:df:4c:3f:0d:75:9e:
ef:68:58:56:3e:f0:79:31:15:1e:8f:5a:70:95:1f:
9f:25:13:4b:37:09:19:0a:56:b5:a4:f4:bc:a2:fc:
74:af:be:ad:3c:35:25:c6:26:73:9d:fe:60:50:56:
02:8a:2b:d4:98:44:9c:03:09:5c:45:ff:da:ba:ba:
35:24:64:8b:c0:1b:2a:9e:69:de:73:db:35:8c:44:
8d:99:d1:18:04:7d:0b:f2:33:1d:67:4b:55:8b:e4:
51:8d:b4:dd:9a:c8:65:8b:22:2c:15:b3:a2:73:c7:
62:ae:33:be:aa:d5:52:61:16:5b:a4:88:d0:c6:ca:
5f:ac:ec:68:51:83:51:d8:1f:ad:54:a7:2d:6c:43:
44:a6:2c:e1:25:4c:92:0d:20:47:d2:14:61:a1:46:
a1:5f:c4:38:dd:17:49:78:c8:a7:25:da:0d:3c:33:
43:6e:e5:d3:0a:64:87:6c:33:91:60:b2:e6:e2:cb:
5f:e1:5b:bc:9c:68:5b:b2:92:71:98:31:ce:06:e1:
f6:e7:ea:6c:3f:b3:8c:eb:54:a5:cf:6c:f7:f6:c7:
1e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:63:A6:84:61:44:77:00:87:56:EC:EF:29:52:58:2F:F9:7C:08:BF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38392e302f32342d3234203d3e203630363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.89.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ef:b1:bb:42:1e:b9:e5:26:01:06:fb:66:b0:62:16:e2:e5:
09:fd:9c:57:64:b4:f4:2e:78:e4:d9:d7:e9:29:af:74:5b:d6:
99:25:ac:88:80:e5:d4:0a:81:ce:0a:12:f9:5a:8a:5d:19:33:
c5:15:f0:9e:5f:ee:1b:0c:c4:7a:77:5a:3d:ff:d7:63:80:85:
4e:a3:ba:5a:76:bf:f5:c1:e7:20:4d:fc:ab:40:e9:92:bb:50:
7e:89:79:a3:b6:49:2f:89:c3:25:b7:d8:72:ac:31:c2:6e:30:
dd:ad:2c:e7:30:69:5c:65:cf:cb:a5:ca:20:56:68:a4:f0:5d:
39:f7:16:25:46:8f:ab:27:17:cb:cd:aa:cd:77:d0:00:e9:e1:
07:2c:25:a8:06:0b:f0:a1:7c:f8:71:b1:90:b1:63:1d:e8:e4:
23:f6:b8:01:b2:2b:b0:63:4a:82:c0:ec:91:bd:83:16:db:e2:
c4:fd:46:56:ca:10:fa:8e:25:b4:6d:83:c6:bd:bc:1d:34:b6:
4a:ee:33:ee:41:a2:b6:c3:38:5d:30:e7:4e:28:5a:87:ec:1d:
a1:1f:e5:61:78:50:db:67:59:22:81:8d:7c:2b:cd:9f:36:b8:
31:90:07:3d:96:09:4a:de:64:d6:9c:97:c4:26:47:f9:00:82:
c7:67:af:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:03:21 2025 by rpki-client