Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e35322e302f32342d3332203d3e20313336373837.roa
File: 3135392e34382e35322e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: TqvvktDHdjeKpUHT1+HI0wthw8GqHKlvTIM3NB2LnCs=
Subject key identifier: C4:EA:3F:0B:F7:46:79:BF:69:10:48:D6:42:18:DF:4C:01:29:9F:76
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2B8CEEFFBA2625F38CA057CFED361F6AEFA75FAC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e35322e302f32342d3332203d3e20313336373837.roa
Signing time: Mon 27 Jan 2025 09:45:10 +0000
ROA not before: Mon 27 Jan 2025 09:40:10 +0000
ROA not after: Mon 26 Jan 2026 09:45:10 +0000
asID: 136787
IP address blocks: 159.48.52.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:8c:ee:ff:ba:26:25:f3:8c:a0:57:cf:ed:36:1f:6a:ef:a7:5f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:10 2025 GMT
Not After : Jan 26 09:45:10 2026 GMT
Subject: CN=C4EA3F0BF74679BF691048D64218DF4C01299F76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:da:60:46:80:38:c9:04:f5:72:36:8d:9a:57:
8d:a3:49:24:3a:bc:ea:68:4e:31:6e:cc:27:e0:40:
cf:fb:cb:39:48:00:00:b9:b7:f9:81:8c:6d:5a:40:
e5:f2:ff:5f:dc:7e:60:2d:69:15:6e:7a:2e:f3:0d:
cc:46:3a:da:a2:53:ab:db:fa:05:a3:20:97:ec:ce:
05:63:5a:87:11:65:67:3b:f4:77:05:eb:aa:76:3b:
23:9e:f4:85:8f:91:17:1a:8c:ee:e8:aa:3c:40:3c:
f5:2d:33:21:7c:ea:3d:b0:7a:b2:7c:9a:6e:55:a9:
1e:4c:05:f4:6f:1d:05:3e:27:99:c3:65:0b:e7:2c:
ad:2f:57:4e:f2:e4:75:1e:27:8c:58:03:02:f6:53:
9d:ca:55:e8:4d:7e:2b:6e:b6:53:bc:e5:ba:ce:f0:
24:ed:69:cf:6a:60:33:c0:d0:76:49:74:f1:78:52:
14:06:75:5b:ac:2a:76:cb:9f:cd:f0:43:24:5f:3d:
70:da:f8:10:16:e2:e5:9b:d4:9d:ef:54:5b:f5:46:
e8:54:f2:6e:ed:85:9e:84:cd:55:3e:69:fe:8b:1c:
48:a0:38:41:2d:b5:5c:33:1a:1d:73:d1:15:94:48:
d3:68:1c:99:bf:a5:db:53:07:60:09:42:14:eb:8c:
92:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EA:3F:0B:F7:46:79:BF:69:10:48:D6:42:18:DF:4C:01:29:9F:76
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e35322e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.48.52.0/24
Signature Algorithm: sha256WithRSAEncryption
50:a8:ce:3d:72:6c:a5:6c:90:33:fc:62:3c:1d:c5:fd:c9:f3:
81:c8:5a:f3:c3:1b:76:a4:20:66:46:4e:cb:49:27:f8:be:5d:
55:e6:3a:aa:53:11:7e:6a:86:1b:02:79:a0:fb:2c:0b:b1:98:
f7:56:ec:ad:ce:38:88:64:31:32:48:7a:1a:7a:d7:c8:1f:57:
ab:d0:85:5d:12:93:0f:a1:75:39:2b:7a:93:5c:97:d3:e4:1f:
56:d8:89:d0:71:c9:9f:8e:46:95:bc:1a:bc:01:af:9f:28:01:
81:e8:eb:69:b8:55:8b:22:46:a3:f0:8b:f7:b8:d8:2f:71:4b:
89:56:01:d8:f3:5e:e9:a4:5e:53:b7:72:58:13:8a:c5:c0:5a:
5e:ff:82:f0:82:df:9b:80:b3:68:25:cd:d3:45:11:b1:aa:ed:
e2:b3:25:a7:86:21:e5:14:6d:af:05:10:4f:62:60:23:a2:9c:
89:7e:98:34:c4:1e:f4:b6:69:2d:78:13:f4:c9:47:c6:6b:e9:
c3:af:75:9a:43:e0:ad:4a:54:18:76:e8:4c:36:a2:fe:d8:bf:
a0:43:5e:52:5e:fe:cc:45:3d:e4:47:1e:2a:8c:13:5a:aa:a6:
43:bb:10:d4:ec:58:28:7e:0d:e9:29:21:ae:2e:1e:ea:4d:03:
be:b3:27:6f
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUK4zu/7omJfOMoFfP7TYfau+nX6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMjcwOTQwMTBaFw0yNjAxMjYwOTQ1MTBaMDMxMTAvBgNV
BAMTKEM0RUEzRjBCRjc0Njc5QkY2OTEwNDhENjQyMThERjRDMDEyOTlGNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv2mBGgDjJBPVyNo2aV42jSSQ6
vOpoTjFuzCfgQM/7yzlIAAC5t/mBjG1aQOXy/1/cfmAtaRVuei7zDcxGOtqiU6vb
+gWjIJfszgVjWocRZWc79HcF66p2OyOe9IWPkRcajO7oqjxAPPUtMyF86j2werJ8
mm5VqR5MBfRvHQU+J5nDZQvnLK0vV07y5HUeJ4xYAwL2U53KVehNfitutlO85brO
8CTtac9qYDPA0HZJdPF4UhQGdVusKnbLn83wQyRfPXDa+BAW4uWb1J3vVFv1RuhU
8m7thZ6EzVU+af6LHEigOEEttVwzGh1z0RWUSNNoHJm/pdtTB2AJQhTrjJLdAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUxOo/C/dGeb9pEEjWQhjfTAEpn3YwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNTM5MmUzNDM4MmUzNTMy
MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
nzA0MA0GCSqGSIb3DQEBCwUAA4IBAQBQqM49cmylbJAz/GI8HcX9yfOByFrzwxt2
pCBmRk7LSSf4vl1V5jqqUxF+aoYbAnmg+ywLsZj3VuytzjiIZDEySHoaetfIH1er
0IVdEpMPoXU5K3qTXJfT5B9W2InQccmfjkaVvBq8Aa+fKAGB6OtpuFWLIkaj8Iv3
uNgvcUuJVgHY817ppF5Tt3JYE4rFwFpe/4Lwgt+bgLNoJc3TRRGxqu3isyWnhiHl
FG2vBRBPYmAjopyJfpg0xB70tmkteBP0yUfGa+nDr3WaQ+CtSlQYduhMNqL+2L+g
Q15SXv7MRT3kRx4qjBNaqqZDuxDU7Fgofg3pKSGuLh7qTQO+sydv
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:22 2025 by rpki-client