Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3234392e302f32342d3332203d3e203531313637.roa
File: 3138352e3139372e3234392e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: vid2L5gptkG7yWbBmBRHltpuvn8mFauKkGK1umjnJH4=
Subject key identifier: 86:E5:19:A6:BB:96:A9:7E:F8:C5:2B:5D:F7:74:1A:8B:DE:C9:69:37
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6D3D58FC42DF4EB506EF22375EEAE19D1AB41860
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3234392e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Jan 2025 09:45:16 +0000
ROA not before: Mon 27 Jan 2025 09:40:16 +0000
ROA not after: Mon 26 Jan 2026 09:45:16 +0000
asID: 51167
IP address blocks: 185.197.249.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 15:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:3d:58:fc:42:df:4e:b5:06:ef:22:37:5e:ea:e1:9d:1a:b4:18:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:16 2025 GMT
Not After : Jan 26 09:45:16 2026 GMT
Subject: CN=86E519A6BB96A97EF8C52B5DF7741A8BDEC96937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:cb:cb:8a:b7:c2:3b:3d:cc:80:41:c7:3c:
de:c5:93:9c:70:8f:4b:9e:14:72:1d:20:5a:32:f5:
ba:25:5f:af:40:96:b8:87:c1:5b:2a:c0:36:48:30:
46:6e:49:6f:87:f1:06:61:5c:47:d5:be:2e:99:ec:
30:21:de:b6:39:eb:37:a7:58:a1:7c:98:d4:49:ed:
b9:1f:e4:a5:7c:75:2e:28:27:90:b2:75:3f:8e:64:
a8:a8:8a:aa:a3:c2:38:d5:7b:14:e1:8e:7d:c4:0d:
12:e5:2b:0b:55:0a:b4:b6:91:23:fd:cb:9d:ef:7d:
cd:b0:da:19:72:8b:be:41:32:43:ae:3c:fd:e5:5d:
28:b0:2a:77:d3:f9:8f:47:39:7b:93:8a:a7:02:00:
98:4e:5c:3f:01:c9:59:4d:98:77:91:bd:13:d3:ea:
a9:be:16:27:86:70:cf:22:73:22:a6:e3:36:56:3a:
3c:29:72:c4:cb:49:41:5d:84:bb:e9:54:f6:df:9d:
0b:8f:0f:d8:26:a2:da:e9:df:6a:7d:e7:15:e1:c9:
e2:4c:7c:12:9f:be:0b:98:b6:6a:5e:98:a6:8e:3d:
ad:53:2b:fa:96:21:2b:0c:2b:a7:3b:cc:ad:ea:bf:
8d:d1:d3:7d:11:8a:b6:d4:30:c6:a9:17:aa:88:5b:
d2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E5:19:A6:BB:96:A9:7E:F8:C5:2B:5D:F7:74:1A:8B:DE:C9:69:37
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3234392e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.249.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:86:41:cf:6e:8a:ac:68:51:72:75:19:2a:1b:5d:3b:af:8a:
a9:18:8e:c0:e3:cf:a7:43:28:ad:05:17:f3:92:83:0d:d8:f9:
9b:55:29:63:3b:93:71:86:79:76:87:12:3d:79:4e:95:2c:76:
31:10:3d:51:06:a0:7a:7b:6b:84:cf:dd:e6:bd:bf:17:21:f1:
92:1a:a8:b3:79:6d:ee:c4:af:1a:44:2d:41:23:39:7e:02:a3:
c8:50:bb:10:94:b9:04:ba:ee:e7:7b:59:f9:d2:40:ca:f8:6e:
bf:29:7a:b9:bd:0c:4b:32:5c:fa:3b:71:13:94:1e:77:55:dd:
39:3a:68:e4:ac:f3:b0:ff:f3:7f:ef:89:c6:c9:24:e9:59:2a:
19:99:e6:94:bf:9b:d8:d6:8f:41:98:20:2a:19:64:28:15:7a:
ee:4d:5e:fa:7c:7c:2c:af:2b:0e:e9:34:87:1b:f7:62:aa:79:
80:c4:bd:db:33:f8:d8:bb:47:38:1e:39:45:40:27:d0:b0:cf:
9b:59:fb:b8:c6:40:0c:db:d4:80:e8:22:ba:18:8f:8e:bb:ed:
cf:77:a3:2a:79:90:ca:d8:44:34:46:8a:aa:e7:cd:0e:d3:3f:
4e:1e:04:6b:9b:9d:6b:ff:f8:3b:81:5e:23:39:f2:20:e4:ce:
e3:22:9e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:24:56 2025 by rpki-client