Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135372e3137332e3231362e302f32312d3234203d3e203437353833.roa
File: 3135372e3137332e3231362e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: py/Vf8QtqROCv7IZBsu08fx2E00dUMq0ygOOBC91IGw=
Subject key identifier: D3:5F:3A:D8:12:3A:4D:99:FD:C3:2A:A0:EF:41:D4:9E:A5:86:A3:8C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4B3368A045AF31BB244AB537FCC974494D959E92
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135372e3137332e3231362e302f32312d3234203d3e203437353833.roa
Signing time: Thu 15 May 2025 10:46:17 +0000
ROA not before: Thu 15 May 2025 10:41:17 +0000
ROA not after: Thu 14 May 2026 10:46:17 +0000
asID: 47583
IP address blocks: 157.173.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 12:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:33:68:a0:45:af:31:bb:24:4a:b5:37:fc:c9:74:49:4d:95:9e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 15 10:41:17 2025 GMT
Not After : May 14 10:46:17 2026 GMT
Subject: CN=D35F3AD8123A4D99FDC32AA0EF41D49EA586A38C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:06:54:d6:5a:c0:7d:d5:b8:c0:12:b6:89:
68:84:e5:9a:20:02:22:1c:24:87:18:0d:38:ae:a1:
0d:2f:de:5b:ca:32:87:b0:77:ab:a9:32:40:b5:7d:
1e:2e:34:03:db:1d:8a:e5:96:7f:ac:6e:5d:a9:14:
c8:39:25:8a:a3:29:87:b3:39:84:ef:a9:5f:bb:f4:
37:f6:cc:ab:37:31:5d:8b:f3:e5:09:35:a5:33:21:
98:f0:33:f8:32:62:cc:6b:fb:82:ab:ad:94:af:49:
31:e6:94:fc:cb:77:46:a2:46:e1:2c:ba:0c:29:77:
3b:c0:b3:18:57:a9:79:91:01:6e:27:51:8c:86:54:
2a:d0:53:9f:41:90:e6:7b:2b:14:60:9f:af:64:3f:
b8:1d:34:38:2f:f2:22:63:a6:2c:53:ce:5c:3b:d3:
e5:7d:e5:07:2f:b0:b5:c8:5a:3e:c7:ca:7a:9b:6c:
11:39:93:ef:85:6f:8a:89:5c:52:81:24:9d:14:90:
1e:e8:0e:6f:2d:7d:26:c8:17:b4:78:81:9b:ec:a1:
5d:2b:e0:ab:9d:74:9a:c0:6e:be:ff:c6:6d:15:f1:
19:a0:77:df:5e:e9:b4:ac:f5:9e:ee:12:22:d0:32:
11:a0:75:54:a4:0c:7a:18:de:69:df:69:6a:a1:59:
59:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5F:3A:D8:12:3A:4D:99:FD:C3:2A:A0:EF:41:D4:9E:A5:86:A3:8C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135372e3137332e3231362e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.173.216.0/21
Signature Algorithm: sha256WithRSAEncryption
89:ba:ad:c5:16:85:ce:53:dc:38:4b:54:f8:f8:90:49:bd:70:
d2:b9:43:e7:f2:e6:ba:e2:34:f0:5c:e5:3c:96:40:d1:1d:02:
3d:a8:98:5e:6a:d8:2d:1e:32:28:c4:34:b9:7c:02:64:7d:65:
1c:18:c8:d9:b4:25:d8:a6:98:0e:ed:94:c8:a9:45:c4:ca:81:
d6:57:67:f8:da:d2:91:a4:f7:6d:06:5d:81:db:60:53:eb:ee:
c8:cb:7f:bf:af:30:2d:8d:73:a3:a8:f6:eb:c0:19:18:bb:4a:
47:6d:12:eb:6d:7b:11:4e:cd:f0:65:95:54:14:d3:1d:42:f5:
a4:49:d6:3b:b8:e0:53:fd:6c:46:c4:3c:6f:90:22:75:98:26:
80:67:5a:af:12:f1:26:b8:6c:7a:34:f4:3f:ec:b7:c3:f2:c8:
7e:48:a2:a3:f1:99:37:e7:46:65:f6:c4:f6:ad:44:09:97:d0:
3f:2c:96:0e:ef:33:f0:61:48:98:0c:d2:39:9e:f4:a5:6e:41:
65:fa:e7:a9:69:d4:51:c8:a3:ae:42:9e:3a:08:6e:68:a0:f4:
19:be:0b:4b:4e:6d:fe:95:f2:b0:39:1d:e3:0c:c2:f7:5f:24:
44:b2:28:46:10:ca:f2:24:c3:37:73:f3:7a:ba:49:21:9f:21:
5c:34:ca:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:07:34 2025 by rpki-client