Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135372e3137332e39362e302f32302d3332203d3e203531313637.roa
File: 3135372e3137332e39362e302f32302d3332203d3e203531313637.roa (raw, json)
Hash identifier: xI/rkfogl/TiUUyY4PXWrre5Yr7XQ4/Cp6BcELVoBEQ=
Subject key identifier: DC:17:73:9E:F4:98:24:6F:D7:E6:05:D3:CA:B5:BB:DB:A0:47:9F:A9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 43BAAE200FFC70FCC4F217B4E870E7B68B49E6E5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135372e3137332e39362e302f32302d3332203d3e203531313637.roa
Signing time: Fri 16 May 2025 18:46:23 +0000
ROA not before: Fri 16 May 2025 18:41:23 +0000
ROA not after: Fri 15 May 2026 18:46:23 +0000
asID: 51167
IP address blocks: 157.173.96.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 12:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ba:ae:20:0f:fc:70:fc:c4:f2:17:b4:e8:70:e7:b6:8b:49:e6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 16 18:41:23 2025 GMT
Not After : May 15 18:46:23 2026 GMT
Subject: CN=DC17739EF498246FD7E605D3CAB5BBDBA0479FA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:97:da:f1:0a:fc:94:fe:0f:bf:f9:bb:80:
ac:e9:12:f4:f2:66:b9:c2:97:42:a2:82:1a:d6:0c:
b3:c3:d8:6d:7a:70:a2:49:28:27:43:b1:3d:b3:10:
f3:10:4e:ca:a0:35:38:ee:8f:c4:63:ed:d7:db:2a:
10:50:59:47:8f:34:5f:e3:18:d6:22:da:aa:04:36:
86:56:ea:9c:d2:4a:af:23:5e:fb:63:75:52:ac:de:
a3:93:4e:b6:3d:f2:8b:8a:77:33:ee:14:80:c8:b4:
d7:07:7c:fb:ea:e5:1f:4a:9d:34:c7:43:10:0d:38:
23:8a:73:b9:07:5f:53:20:3b:ee:3e:20:6c:c2:54:
bf:8c:c2:29:ab:3e:99:98:02:40:fe:a0:66:03:e9:
f3:9d:92:a5:70:f2:67:f1:cd:49:a4:23:53:80:dc:
c2:58:20:22:7f:0e:9c:ac:19:43:2b:6e:a1:0d:cd:
a8:d1:4e:81:29:a7:2d:ed:a9:00:84:84:18:16:23:
2f:17:1c:63:0a:cc:8c:ba:8c:05:96:ac:b9:22:c2:
dc:31:54:d2:9a:8b:0e:2d:19:9d:0d:b0:60:ca:15:
a7:60:8b:fc:7a:aa:b7:0d:3b:22:a1:10:d4:68:2f:
be:80:f1:29:a0:7d:1b:d1:47:03:17:eb:20:6f:aa:
a7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:17:73:9E:F4:98:24:6F:D7:E6:05:D3:CA:B5:BB:DB:A0:47:9F:A9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135372e3137332e39362e302f32302d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.173.96.0/20
Signature Algorithm: sha256WithRSAEncryption
66:de:2e:0c:e6:b6:52:4b:9a:d5:09:a7:d4:08:e6:2c:ed:70:
62:c5:e9:18:e8:ee:e9:67:80:9d:58:61:9e:e3:05:5a:ea:0e:
05:3a:2d:ff:03:4c:8c:f0:51:51:e6:2a:f8:04:4f:60:ec:88:
e4:77:aa:62:87:d1:2a:33:26:6b:e9:5a:0b:e4:5f:91:fa:fa:
ad:e5:22:f6:66:66:aa:20:7e:0f:6a:f4:0f:57:59:d8:11:ff:
a5:cc:0f:35:b8:ee:c0:15:cd:af:b1:31:a3:dc:25:85:2a:fe:
bc:a0:1a:ae:8b:b8:70:ca:dd:de:3a:36:c5:dc:8b:2e:7b:05:
d4:c6:d4:48:ef:a1:82:c1:a5:13:e6:50:ed:ec:f6:c3:ee:af:
45:6b:ab:82:39:25:c9:59:14:a0:3d:ab:00:4e:5e:aa:21:7f:
d6:e3:c7:04:dc:dd:1a:e8:6a:ad:4d:ee:f4:cb:83:48:b1:f8:
df:e2:51:72:89:52:56:95:41:da:bb:3b:4e:e3:0b:33:64:a4:
bb:c1:2c:e5:3b:23:30:dd:c3:47:b1:9e:06:20:95:93:4e:fe:
1d:1a:83:7a:1f:e2:3e:16:19:8e:bf:76:cc:48:60:05:d2:0b:
bf:64:e3:83:15:a2:29:a7:08:c7:49:6d:b1:31:5d:1a:08:59:
21:b1:dd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:04:05 2025 by rpki-client