Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3234362e302f32342d3332203d3e203531313637.roa
File: 3138352e3230352e3234362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: WjKrJqPtuAdc/NYiwkNdgSt47QDdWo+2RjzUJ4lKdHQ=
Subject key identifier: 27:B5:25:E5:C8:C3:54:54:BB:2E:69:5E:2A:52:00:72:75:FF:14:A2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1E93E39CBE974F696F54639503F95F58250D1F13
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3234362e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Jan 2025 09:44:56 +0000
ROA not before: Mon 27 Jan 2025 09:39:56 +0000
ROA not after: Mon 26 Jan 2026 09:44:56 +0000
asID: 51167
IP address blocks: 185.205.246.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 15:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:93:e3:9c:be:97:4f:69:6f:54:63:95:03:f9:5f:58:25:0d:1f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:39:56 2025 GMT
Not After : Jan 26 09:44:56 2026 GMT
Subject: CN=27B525E5C8C35454BB2E695E2A52007275FF14A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fc:e1:07:00:17:86:35:9f:b1:ba:a2:1e:ff:
45:1f:96:f0:31:f1:fe:fe:3a:de:2d:bd:c7:f8:82:
8e:ad:6b:e4:ab:f2:70:4e:e7:26:7b:65:8e:09:2e:
ca:b6:ce:bb:1e:4e:af:70:54:39:38:1e:b8:83:ba:
ef:4d:bf:5a:17:20:a4:d7:5d:bc:e1:12:4c:d4:e1:
53:28:4a:9b:7a:08:6d:70:23:8a:09:fe:d4:72:4c:
80:4c:47:d2:92:ce:a6:2b:c5:a5:9a:ef:7d:f5:e7:
43:1d:d6:62:cf:c4:e3:76:e3:67:1b:77:40:5a:f8:
88:e0:34:e5:0d:03:a7:ae:b6:0c:95:32:bd:0b:36:
09:9a:1c:55:58:df:f0:bf:ac:a6:15:96:44:85:eb:
37:ff:72:eb:3a:a3:d9:1e:9c:d3:e6:14:36:69:1d:
53:9c:40:17:33:21:1c:d5:f6:77:76:48:62:54:c2:
a8:e6:bf:31:0f:23:5c:48:ae:4d:98:8b:94:c2:a0:
f5:98:04:51:a3:6d:e0:df:25:b2:3e:f9:4e:25:ef:
26:41:d3:1f:55:f4:0b:04:cf:99:f4:2b:ca:ee:32:
50:db:9f:e6:c4:44:ac:f8:6d:9b:ab:33:85:c3:ef:
83:2b:96:90:cc:cc:30:f5:30:50:68:63:9c:dd:50:
1f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B5:25:E5:C8:C3:54:54:BB:2E:69:5E:2A:52:00:72:75:FF:14:A2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3234362e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.246.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:e6:27:7f:8f:ba:dd:dc:fb:c5:fb:ee:01:fd:95:93:41:e5:
7e:8f:5a:a8:ad:0b:4d:4b:e3:23:19:8c:2c:6b:3f:bf:c5:93:
9f:b1:16:a7:cf:b3:d8:82:ed:61:32:4b:96:8a:ba:8f:65:ad:
da:aa:d6:01:28:41:02:a1:26:4b:82:9e:aa:04:7e:c4:b2:d8:
22:0a:55:09:8f:e3:93:71:4c:fe:51:bf:11:ff:1e:ec:de:db:
16:3d:52:99:2f:84:fb:9e:93:25:20:c1:c6:eb:ec:4b:43:76:
d5:bd:13:fb:97:c6:fe:58:20:19:9a:e7:ab:ff:ad:25:9f:c6:
2d:59:7c:bb:0b:d3:ab:c6:64:2f:fb:42:70:70:85:8b:27:d2:
ab:91:9c:5e:1a:41:d4:53:b1:61:5a:bf:7c:9d:e4:84:78:cd:
43:75:21:26:d6:df:49:0a:66:98:48:e2:d8:bc:a9:72:9e:57:
36:7b:37:ae:5d:b6:94:76:be:7c:a7:34:97:e3:e0:e6:48:0b:
9c:67:89:f5:3f:7d:e1:f8:d7:57:eb:0c:11:7a:81:3d:02:f1:
92:36:a7:70:f9:40:4d:93:08:de:fc:87:5e:b3:99:72:ac:7b:
1d:54:4c:dc:84:6a:f3:d8:45:55:92:b5:ed:72:fe:65:30:88:
a0:57:d4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:27:53 2025 by rpki-client