Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133372e302f32342d3332203d3e203531313637.roa
File: 3138352e3133352e3133372e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: LXYz3Isboi/Ppp5C3dnLRX6EwTvm+OjivmX2b+BZ50w=
Subject key identifier: 3F:4F:87:84:A9:23:8D:28:4D:0A:3E:D0:B4:10:AD:4B:CD:7B:05:E9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7C8832FFC5184A0EBD851F74C6A12250A9529251
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133372e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Jan 2025 09:45:27 +0000
ROA not before: Mon 27 Jan 2025 09:40:27 +0000
ROA not after: Mon 26 Jan 2026 09:45:27 +0000
asID: 51167
IP address blocks: 185.135.137.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 15:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:88:32:ff:c5:18:4a:0e:bd:85:1f:74:c6:a1:22:50:a9:52:92:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:27 2025 GMT
Not After : Jan 26 09:45:27 2026 GMT
Subject: CN=3F4F8784A9238D284D0A3ED0B410AD4BCD7B05E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:50:81:d6:19:71:45:96:6e:2b:1e:16:3f:37:
97:d4:2a:a7:52:c8:3d:b4:7e:9d:6e:47:f4:66:f2:
8d:73:b7:70:5d:a4:49:14:ca:a3:f8:5e:1d:37:df:
e9:2a:4d:9c:73:c1:59:d2:38:5c:26:92:1e:19:e8:
df:f7:35:04:01:58:45:2e:8b:3d:cd:47:7a:08:2c:
8e:6e:2f:7f:bf:2e:69:43:39:39:da:9a:63:bd:8e:
db:4e:50:da:25:39:3f:3c:0e:98:58:c5:20:44:28:
91:c1:50:ad:0f:e0:3d:2c:cb:70:87:27:ec:79:e9:
75:97:22:61:b4:9b:65:c7:e8:5b:69:a3:1f:07:4a:
5e:18:bd:b9:90:35:65:c0:14:30:1d:cd:ff:3e:8b:
20:aa:9f:23:7c:8d:d0:57:cb:8a:be:bc:1e:7a:9d:
54:69:8b:39:c3:b2:1c:8d:a1:12:da:77:64:ec:b7:
77:2f:08:2f:f5:d9:1d:9a:a6:7a:61:dc:b5:fa:e8:
dc:08:0d:c7:bc:78:45:da:41:43:c5:b6:46:6f:15:
1f:f6:09:ed:db:d8:0a:55:c2:50:f8:c6:9f:b1:84:
ea:36:22:5b:67:99:f2:52:1d:20:34:5d:c3:7d:79:
a6:9f:20:f3:81:28:92:57:41:ab:96:d6:16:d1:72:
02:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4F:87:84:A9:23:8D:28:4D:0A:3E:D0:B4:10:AD:4B:CD:7B:05:E9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133372e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.137.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:da:0d:6f:aa:1e:2f:61:21:f1:55:28:06:3a:85:8c:3b:e9:
0f:a3:3c:3b:45:75:5f:66:9d:24:9c:40:22:4d:32:76:96:44:
54:97:ca:40:e2:d9:a3:4f:87:83:24:c0:48:d4:5d:32:c4:37:
47:c2:b9:98:48:49:a8:1f:b8:29:58:32:dc:76:a8:ea:1e:14:
a9:bf:54:30:78:4c:e1:0e:4d:17:e0:42:6d:69:57:21:a2:b2:
14:f7:a7:9d:4c:89:96:67:9e:32:e8:33:df:c6:d8:bc:d8:f2:
78:10:24:0d:e5:34:0b:af:4c:15:e7:b1:65:a2:e9:78:32:70:
23:a5:93:16:a3:a8:80:0c:6e:69:18:a5:3a:82:dc:45:bf:2f:
68:f1:f6:78:5b:54:89:34:ec:c4:06:bb:32:f9:a2:02:0d:49:
2c:98:b2:96:79:b7:45:3d:cb:3c:24:9b:2c:89:a7:ae:0f:fa:
d8:de:f1:4a:23:a0:e7:72:d4:cb:1e:e6:5e:98:b2:95:07:3c:
ab:5f:f1:17:88:cd:fd:43:f8:ce:7c:a8:75:24:67:4d:98:d7:
22:b2:07:35:dd:0b:09:16:66:61:cf:3b:d1:71:1b:c6:9e:c9:
3e:ae:db:48:c3:db:74:a0:ff:bd:bc:a9:2a:99:58:03:60:e1:
6c:b1:88:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:17:13 2025 by rpki-client