Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137392e302f32342d3234203d3e20313336373837.roa
File: 3137362e35332e3137392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: U+mG2KtP9bPRRPeONjdc9goUALTzpG9FDp7UOjWwUHs=
Subject key identifier: 55:F3:31:2F:1B:99:36:A7:30:05:54:65:F5:55:C2:0F:A3:6C:49:5E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 27566E755B3390D266E97910264F8E93D41AA22F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 19:44:37 +0000
ROA not before: Fri 27 Dec 2024 19:39:37 +0000
ROA not after: Fri 26 Dec 2025 19:44:37 +0000
asID: 136787
IP address blocks: 176.53.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:56:6e:75:5b:33:90:d2:66:e9:79:10:26:4f:8e:93:d4:1a:a2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 27 19:39:37 2024 GMT
Not After : Dec 26 19:44:37 2025 GMT
Subject: CN=55F3312F1B9936A730055465F555C20FA36C495E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7e:8b:64:93:b4:f3:ce:61:51:ca:7c:24:aa:
7c:7c:64:c2:f8:5a:70:26:54:d1:3f:e4:cb:18:7c:
ea:e2:89:c3:8e:b5:6f:70:04:90:8b:fd:7c:c9:05:
0f:38:4e:26:97:5c:4c:39:7c:68:f0:49:d0:6b:95:
cb:04:14:d2:a7:6c:14:85:bd:d6:34:31:5a:7c:1c:
f1:13:74:a8:7f:bc:93:9d:d2:ea:d9:ad:3f:e6:c3:
03:bb:f0:8b:19:56:5d:4f:56:03:d9:f2:db:ae:c9:
df:20:a5:81:16:d1:5c:5e:e2:82:4e:4d:2e:ff:0a:
0f:f0:22:72:51:ff:18:59:0b:62:6f:c4:6e:71:fa:
6c:45:2d:e2:80:4c:5a:5c:68:39:a5:8b:ea:c6:3f:
ac:a5:e1:bc:76:c5:07:c2:4c:d0:90:b7:dd:2a:16:
70:53:62:b9:91:b2:da:2c:cb:44:65:6e:e2:a9:69:
10:eb:66:61:f4:ac:25:5d:a2:77:52:51:c9:34:16:
5b:48:d5:ed:af:53:c4:a2:1b:96:0e:bb:db:86:5d:
be:ba:29:d2:55:a7:93:4c:da:6a:df:bb:7e:13:4e:
24:ab:0a:94:63:f4:5c:34:5c:11:8e:8f:24:fd:f8:
43:34:58:c1:b7:92:04:21:d1:11:e6:ec:d6:f8:1b:
24:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F3:31:2F:1B:99:36:A7:30:05:54:65:F5:55:C2:0F:A3:6C:49:5E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.179.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:4e:0f:f7:a0:5d:1c:4b:ae:4e:ab:6f:87:27:5b:f5:01:1d:
71:90:ba:5a:b9:db:b3:d2:fb:c4:fa:8f:fb:96:42:79:fb:a3:
42:8e:94:de:37:8e:bb:a5:51:39:20:f5:6a:57:a1:dc:41:36:
0f:9f:73:0c:04:5b:99:8e:74:7a:9d:1f:36:fc:e6:35:69:be:
d3:9f:f8:98:47:f1:4f:54:87:90:0b:e3:81:e2:bf:76:6f:26:
4e:bb:94:ae:7d:0a:94:8b:2a:ed:fb:13:88:b7:1d:5c:9d:79:
14:92:33:33:4e:e0:44:7d:50:6b:03:36:da:e6:91:81:7b:ef:
4f:69:d2:e4:cb:d4:58:d5:dc:86:ac:3e:57:7a:5d:d6:d2:1d:
d5:8e:86:1e:15:42:98:c2:18:2b:55:9d:fa:ce:d5:79:cc:9a:
9c:69:0c:ea:c8:2a:c1:2a:6d:8d:bd:ac:91:79:4a:55:61:dc:
f0:d4:67:ab:58:01:e9:3d:1e:d8:bd:fc:94:5b:4a:c7:b1:52:
dc:1e:46:7f:57:45:c0:01:2a:1b:27:f8:4b:df:e9:77:29:eb:
66:f8:cc:12:e4:16:d6:93:9b:3c:d9:ee:18:c8:67:f2:40:6e:
01:3f:f1:16:5b:f5:41:a6:94:c0:6a:98:be:fa:15:0e:05:7c:
6c:2e:55:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:13:27 2025 by rpki-client