Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e38302e302f32302d3332203d3e203531313637.roa
File: 3135382e3232302e38302e302f32302d3332203d3e203531313637.roa (raw, json)
Hash identifier: gPQ6I3WGsNzuBPBcEUrdkgltgbaE+gdmZy3dipw58KI=
Subject key identifier: 45:38:DE:90:45:D8:81:AD:D9:73:6A:AA:B9:4B:ED:7D:36:24:93:9D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4229CC7AA4040852B233977BE7D0520FE24D22F3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e38302e302f32302d3332203d3e203531313637.roa
Signing time: Fri 31 Jan 2025 09:45:33 +0000
ROA not before: Fri 31 Jan 2025 09:40:33 +0000
ROA not after: Fri 30 Jan 2026 09:45:33 +0000
asID: 51167
IP address blocks: 158.220.80.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:29:cc:7a:a4:04:08:52:b2:33:97:7b:e7:d0:52:0f:e2:4d:22:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 31 09:40:33 2025 GMT
Not After : Jan 30 09:45:33 2026 GMT
Subject: CN=4538DE9045D881ADD9736AAAB94BED7D3624939D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fb:ee:ee:6f:1b:8e:dd:62:74:35:e9:e6:29:
2b:0d:ec:85:0b:98:61:39:5c:65:5d:f8:c6:44:59:
30:67:fa:fb:8a:23:00:3d:a9:55:96:cf:c6:b4:3d:
d5:4c:52:bc:c4:f4:2b:ef:b3:bd:28:93:4d:7f:4e:
19:51:15:23:9a:6a:17:c3:ff:d7:36:81:91:de:f8:
b2:70:20:0d:36:a9:db:d9:2a:5c:dc:74:06:75:1f:
1a:93:57:b3:63:91:d7:71:54:56:8e:e8:99:4f:58:
99:27:35:87:e6:54:8d:27:3b:d9:27:34:b1:b6:e9:
05:2a:eb:2d:ce:99:1b:7a:79:ba:41:90:0d:55:b5:
b7:b5:5c:7d:30:35:0f:9c:89:1b:cb:94:34:f0:c1:
67:7f:14:9d:81:88:1f:b1:29:db:f4:d0:f9:eb:d7:
3d:9d:75:8f:89:85:8f:22:62:3f:d6:0a:8d:ea:96:
d2:ab:73:8b:f2:ba:5f:28:e5:f7:39:a7:c6:25:23:
d0:a0:29:b1:a8:b6:be:1c:43:f8:74:d1:6f:8e:64:
d0:07:6f:b8:7c:75:16:45:92:7b:e3:48:d3:49:8d:
34:56:73:99:e2:8f:73:13:59:0f:a3:a8:20:64:07:
25:f1:03:df:15:33:af:9d:0f:55:9d:b4:c0:3d:76:
69:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:38:DE:90:45:D8:81:AD:D9:73:6A:AA:B9:4B:ED:7D:36:24:93:9D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e38302e302f32302d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.80.0/20
Signature Algorithm: sha256WithRSAEncryption
9b:a8:a4:59:f4:0e:f6:39:81:24:b7:a9:e0:f0:d3:51:20:38:
a1:95:e5:9e:68:69:fe:39:09:a6:e6:e7:39:ec:77:5a:34:71:
66:8c:84:35:f7:ec:73:89:9d:95:97:e9:02:84:a0:89:a7:7a:
d6:94:60:a9:64:6b:ab:c4:9b:a2:44:80:7e:cd:9d:70:0b:5f:
11:47:bf:d5:b2:b4:ca:a2:ea:76:f5:94:b3:f4:d8:2e:96:35:
12:3c:5e:2e:a5:f8:9c:45:ec:d2:e0:64:78:e5:d0:08:55:e1:
ed:ba:a8:99:6b:f9:7a:7c:e2:c7:16:8c:89:d0:3f:4c:c8:3d:
59:4e:31:25:97:b6:5c:20:da:e0:a6:5f:bf:7c:64:16:5d:9e:
fd:cb:69:ab:d6:4b:83:06:6c:f2:14:a1:16:f6:8f:bb:95:45:
89:88:ab:04:d0:c3:c4:53:e7:d5:d2:12:ca:8d:f8:a7:2f:58:
a8:0f:19:9d:57:6c:70:79:15:1b:88:4a:c6:81:0d:a6:40:f5:
7c:6f:f9:b0:13:2e:e9:62:15:23:6c:ea:44:f1:e4:db:d0:2f:
bd:b8:aa:7e:40:1b:34:f8:67:22:95:d5:1c:22:ba:70:b3:16:
0b:f7:90:51:a9:9c:7b:0c:50:cc:99:58:2b:6b:65:64:5d:7c:
74:fa:e4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:50 2025 by rpki-client