Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e31362e3133362e302f32322d3234203d3e203437353833.roa
File: 3137382e31362e3133362e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: QDRnq0coglNJ4oEmp9woFS/XCxRU7tk/MJkxrFVtyTA=
Subject key identifier: F0:31:2D:82:33:5E:EF:10:B5:BE:C6:FC:E2:30:99:38:CC:FC:9B:C5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 390E567D2469F1BBBC33162E199E69E9AB1D9EDE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e31362e3133362e302f32322d3234203d3e203437353833.roa
Signing time: Thu 15 May 2025 10:46:18 +0000
ROA not before: Thu 15 May 2025 10:41:18 +0000
ROA not after: Thu 14 May 2026 10:46:18 +0000
asID: 47583
IP address blocks: 178.16.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 17:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:0e:56:7d:24:69:f1:bb:bc:33:16:2e:19:9e:69:e9:ab:1d:9e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 15 10:41:18 2025 GMT
Not After : May 14 10:46:18 2026 GMT
Subject: CN=F0312D82335EEF10B5BEC6FCE2309938CCFC9BC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:0e:41:4d:99:37:da:0e:62:4e:00:94:0d:
38:cf:d6:a2:48:33:97:e8:be:d8:d5:80:fd:7e:0c:
ad:8f:f2:ee:6e:8c:15:31:75:63:ff:4a:1c:db:32:
7b:e5:ce:03:c3:f9:0e:ea:b5:8a:e4:17:7e:4e:c9:
7d:c0:a2:66:5b:77:16:54:2b:3f:09:b2:5a:f3:0d:
c4:c1:01:a3:f4:fb:a5:24:4e:4f:37:4d:9e:73:4e:
91:14:aa:1b:67:69:b0:9d:3f:a1:4d:40:be:a1:c4:
7a:41:b4:8f:c0:6d:47:8b:4f:c3:f1:01:cb:c9:ff:
ba:33:28:75:ef:84:12:3c:2b:70:2e:32:89:07:1d:
84:90:3e:d3:30:b7:4c:b2:3c:f5:07:7e:c9:95:18:
8e:09:3b:fc:1b:60:71:52:cc:26:48:54:05:40:66:
93:42:01:64:da:f8:4c:cc:d7:1d:b5:98:eb:56:f0:
b2:33:11:08:7b:56:d1:d3:a6:a7:39:8e:48:8a:c9:
11:c2:c7:d2:cc:28:be:b2:5f:ec:73:60:b2:fe:ba:
e5:34:08:66:4f:00:ae:c8:44:2f:c3:0d:23:44:1a:
a6:b6:36:9e:e7:4c:a0:ab:bf:aa:e0:ef:55:3d:66:
13:10:09:47:9e:a8:d9:07:46:f2:29:8d:29:3b:3a:
b5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:31:2D:82:33:5E:EF:10:B5:BE:C6:FC:E2:30:99:38:CC:FC:9B:C5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e31362e3133362e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.136.0/22
Signature Algorithm: sha256WithRSAEncryption
00:33:76:b9:f8:87:38:13:35:1c:3b:ac:11:0c:0e:e8:2a:fa:
b6:5c:23:02:5f:46:57:8c:44:40:ac:d4:cd:af:73:2b:2d:ae:
de:8e:16:eb:57:e7:2f:18:a2:4e:26:48:31:93:fb:92:67:ea:
30:96:4e:4b:34:1d:91:0f:fa:f9:bb:19:8b:73:1b:3a:2b:4f:
ef:9d:b0:d4:72:98:42:4c:ca:5e:c3:51:6c:63:69:1b:2f:44:
de:84:e5:60:37:8c:56:76:57:ce:72:73:12:7b:45:1a:00:d2:
d7:d0:39:ad:f3:50:4d:a8:31:81:cf:99:fe:dd:56:ff:2a:e4:
d8:8c:9e:29:a0:90:c2:fd:45:85:ee:69:f3:79:0b:97:ac:d9:
93:43:c7:9e:7f:20:da:ba:4f:24:e3:9f:8f:67:f4:0f:fb:bd:
34:59:7e:96:59:e5:6f:ff:ca:af:76:63:0b:2b:7c:3c:0d:9b:
7d:cf:8a:14:33:14:e3:df:57:34:04:97:1d:b5:f5:10:34:55:
08:d2:50:df:f7:48:93:db:be:54:84:d3:d1:37:da:3f:b7:f1:
2d:c3:17:55:fd:7f:68:33:99:75:c9:ce:f1:0f:4c:41:47:ff:
3f:fb:92:cf:7c:b1:6e:63:41:0c:c5:ce:8b:f5:b5:a3:08:0d:
cd:aa:05:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:22:06 2025 by rpki-client