Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3137302e302f32342d3332203d3e203531313637.roa
File: 3138352e3138372e3137302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: 4Rvw6xdwaZt2TRZUkryCAoyxyFTOH7GRZhayQKST93w=
Subject key identifier: 4E:46:4D:C7:8E:14:13:CF:E3:EC:44:82:5F:35:B3:FC:45:A2:B9:D9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 70933BABE40F0A278258690BEE61A96D063A4350
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3137302e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Jan 2025 09:45:18 +0000
ROA not before: Mon 27 Jan 2025 09:40:18 +0000
ROA not after: Mon 26 Jan 2026 09:45:18 +0000
asID: 51167
IP address blocks: 185.187.170.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 15:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:93:3b:ab:e4:0f:0a:27:82:58:69:0b:ee:61:a9:6d:06:3a:43:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:18 2025 GMT
Not After : Jan 26 09:45:18 2026 GMT
Subject: CN=4E464DC78E1413CFE3EC44825F35B3FC45A2B9D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:f9:78:0c:e8:e3:c4:1e:87:fe:ee:53:cd:
fa:a3:bd:a1:95:aa:c4:4f:cb:3f:68:6c:1e:64:37:
32:38:ce:5b:e2:98:2b:da:e7:29:91:d5:06:94:6f:
37:78:82:df:72:51:d8:17:43:cb:ed:68:a4:1c:6a:
0c:99:9d:37:36:b9:02:c9:a7:36:ea:2a:cf:d9:b7:
8d:e5:0f:24:22:75:78:e8:09:88:6b:fd:37:f9:88:
57:01:bf:26:67:5b:9c:25:fe:63:16:b2:41:43:12:
97:89:e4:c8:9b:96:02:f9:46:02:ef:be:5d:81:83:
71:70:7e:89:6b:af:ef:1f:15:f2:bd:0c:c9:f7:8b:
17:be:4c:17:40:f1:3c:c6:6c:d7:bb:4c:30:a7:ac:
b1:13:2e:99:3c:db:2e:91:a9:bc:5a:8b:93:9e:d1:
bc:50:36:d7:c7:3c:1b:ff:46:15:ea:cf:ff:35:b9:
df:bd:f2:29:01:64:4d:af:e5:0c:a0:ad:b8:98:06:
2c:9c:02:35:f4:da:fc:4d:ff:2e:ed:e9:d8:f8:76:
95:c6:bf:32:10:90:3b:fe:83:6f:a5:0d:5b:ce:a5:
e5:10:fb:4f:ee:7e:b4:77:85:89:36:8b:ae:0e:0f:
9c:b3:aa:8a:58:1c:22:bf:39:65:df:43:80:cc:83:
bf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:46:4D:C7:8E:14:13:CF:E3:EC:44:82:5F:35:B3:FC:45:A2:B9:D9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3137302e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.170.0/24
Signature Algorithm: sha256WithRSAEncryption
56:75:e0:f7:d0:e1:50:e9:f7:3f:82:a0:78:ca:c9:72:e3:02:
a8:44:70:e8:a4:34:89:dd:14:43:03:37:dc:52:08:c6:20:c4:
0f:fc:6a:3e:90:d0:b6:39:5c:8b:4a:f5:54:98:51:dd:00:ec:
9a:63:7e:8f:33:2f:3b:10:df:70:5a:48:15:56:41:e7:c2:8d:
42:6c:43:7e:2c:7b:e9:65:7f:1b:fd:50:b9:cf:8b:af:3a:65:
8a:4f:dd:cb:6f:ac:7e:79:cc:8e:4b:87:e2:51:16:85:4f:ba:
6d:59:54:ca:43:70:2d:8c:94:85:23:95:c5:32:8f:d4:77:04:
70:6f:3a:bd:9c:01:c8:ae:f0:6c:55:c1:69:88:6e:73:d9:72:
31:21:0f:85:d4:1d:e1:07:b6:a2:a7:d4:2e:e0:82:ed:e8:0c:
36:5c:ae:ca:94:38:d6:c1:9b:b2:a3:49:fc:74:ae:b3:80:56:
8c:bb:1e:1a:9d:e2:b7:2b:cb:60:a9:08:18:45:98:36:88:ba:
da:b1:2e:fc:37:a5:60:6f:77:1c:89:2c:f6:a8:91:d5:fe:dd:
fe:7d:d7:6d:cd:b4:8b:95:b3:f0:d8:a5:05:bb:c4:03:7d:4c:
cf:29:07:f6:5a:5d:cb:cd:9f:d3:6e:1d:13:dd:0c:59:f2:35:
1d:8f:0a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:11:31 2025 by rpki-client