Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e35392e302f32342d3234203d3e20313437303439.roa
File: 3138352e3232392e35392e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: NL0MmOtgWTGLxPxqkfaOp70KmDLcurABMY7KOBnw93g=
Subject key identifier: 42:50:75:53:E3:20:08:45:69:3D:A3:36:BF:3E:51:23:1B:E9:7D:49
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5C6244A4ADC4E1FEEFB5C7A01B9A962040C9899E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e35392e302f32342d3234203d3e20313437303439.roa
Signing time: Mon 27 Jan 2025 09:45:18 +0000
ROA not before: Mon 27 Jan 2025 09:40:18 +0000
ROA not after: Mon 26 Jan 2026 09:45:18 +0000
asID: 147049
IP address blocks: 185.229.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:62:44:a4:ad:c4:e1:fe:ef:b5:c7:a0:1b:9a:96:20:40:c9:89:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:18 2025 GMT
Not After : Jan 26 09:45:18 2026 GMT
Subject: CN=42507553E3200845693DA336BF3E51231BE97D49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:f9:05:22:1c:89:cd:a8:c4:e6:df:f7:23:
61:a2:3a:5d:a1:25:26:7b:36:a0:1e:cc:3a:7a:4b:
c9:c0:3f:e7:65:2a:74:59:51:90:d3:83:2a:dc:4c:
d9:14:55:bd:46:d9:9d:d2:70:cb:e2:29:40:b5:f2:
7d:1f:57:f3:73:69:5f:38:b0:ed:d2:80:ed:6f:98:
9b:8e:f6:c0:42:37:de:d4:86:30:03:37:8b:19:8c:
09:af:1e:e0:a7:ee:0d:a6:dc:7d:a1:c7:69:ee:a7:
72:15:af:4e:18:5b:9c:fa:7b:ef:f6:f3:ed:09:08:
24:60:6d:d3:01:f9:27:b3:aa:90:0e:56:8c:d0:81:
12:5e:16:57:0e:c7:40:27:c7:c6:f6:e7:50:fa:b8:
0e:cc:fa:ff:7f:17:b7:02:f7:2f:c4:59:e2:3f:55:
a7:16:6b:0d:eb:af:de:46:ca:bf:88:68:73:71:fd:
1d:24:bb:f9:05:5c:ce:b0:3b:7a:91:b5:f4:01:9b:
80:45:d3:60:85:d2:91:67:f7:e6:aa:9f:44:3f:13:
b4:9a:be:b6:64:8d:fc:47:ea:99:5c:0d:c7:c7:37:
2e:25:0f:48:57:ae:b7:e0:83:f0:d0:8b:df:51:41:
7b:9a:1f:b4:22:c4:eb:70:56:d8:e3:00:21:f7:8b:
aa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:50:75:53:E3:20:08:45:69:3D:A3:36:BF:3E:51:23:1B:E9:7D:49
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e35392e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.59.0/24
Signature Algorithm: sha256WithRSAEncryption
05:9b:10:38:28:ed:a8:0b:2a:3d:c4:18:7e:cf:7b:40:4f:6a:
c9:46:25:62:b2:5f:90:cb:65:3b:5b:5d:88:61:a4:cb:9b:17:
dc:51:df:99:86:ad:68:4e:1c:f5:18:19:e1:bc:45:37:5c:bc:
ac:43:2f:c4:ac:d6:26:83:3c:b4:cc:9c:e1:7e:4a:9f:2a:59:
2f:f4:2f:2e:ba:7b:8a:fd:05:7d:b3:a8:f7:0e:26:93:22:4f:
13:bd:64:f3:7c:49:4f:48:c1:a1:e5:67:23:5d:f0:7a:01:2f:
c6:30:56:31:83:da:b9:23:58:54:16:10:66:73:0c:68:f6:70:
16:43:3b:9a:b5:59:8b:6c:63:16:65:c2:6f:a3:f5:ef:5b:99:
1b:40:16:2e:10:f2:3a:7d:da:25:63:75:ca:b4:d5:41:fc:e4:
b9:c8:e5:d1:f0:a2:78:27:d9:ee:f4:21:77:2c:f3:35:b4:ec:
00:5a:c7:bd:98:44:36:bb:c5:b8:0c:85:21:e7:19:9c:1a:42:
df:77:0d:42:6b:9a:04:a7:3b:1a:7b:f6:ce:cb:2d:d8:bf:d4:
e1:23:dc:97:cd:2f:67:fe:9c:8f:e2:54:72:c5:78:c7:02:7c:
e3:1f:f0:ff:4b:05:15:c3:01:db:48:95:f6:00:cb:c9:fc:34:
d2:20:6b:d0
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUXGJEpK3E4f7vtcegG5qWIEDJiZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMjcwOTQwMThaFw0yNjAxMjYwOTQ1MThaMDMxMTAvBgNV
BAMTKDQyNTA3NTUzRTMyMDA4NDU2OTNEQTMzNkJGM0U1MTIzMUJFOTdENDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFNfkFIhyJzajE5t/3I2GiOl2h
JSZ7NqAezDp6S8nAP+dlKnRZUZDTgyrcTNkUVb1G2Z3ScMviKUC18n0fV/NzaV84
sO3SgO1vmJuO9sBCN97UhjADN4sZjAmvHuCn7g2m3H2hx2nup3IVr04YW5z6e+/2
8+0JCCRgbdMB+SezqpAOVozQgRJeFlcOx0Anx8b251D6uA7M+v9/F7cC9y/EWeI/
VacWaw3rr95Gyr+IaHNx/R0ku/kFXM6wO3qRtfQBm4BF02CF0pFn9+aqn0Q/E7Sa
vrZkjfxH6plcDcfHNy4lD0hXrrfgg/DQi99RQXuaH7QixOtwVtjjACH3i6qHAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUQlB1U+MgCEVpPaM2vz5RIxvpfUkwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMyMzkyZTM1
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMDM0Mzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC55TswDQYJKoZIhvcNAQELBQADggEBAAWbEDgo7agLKj3EGH7Pe0BPaslGJWKy
X5DLZTtbXYhhpMubF9xR35mGrWhOHPUYGeG8RTdcvKxDL8Ss1iaDPLTMnOF+Sp8q
WS/0Ly66e4r9BX2zqPcOJpMiTxO9ZPN8SU9IwaHlZyNd8HoBL8YwVjGD2rkjWFQW
EGZzDGj2cBZDO5q1WYtsYxZlwm+j9e9bmRtAFi4Q8jp92iVjdcq01UH85LnI5dHw
ongn2e70IXcs8zW07ABax72YRDa7xbgMhSHnGZwaQt93DUJrmgSnOxp79s7LLdi/
1OEj3JfNL2f+nI/iVHLFeMcCfOMf8P9LBRXDAdtIlfYAy8n8NNIga9A=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:14:15 2025 by rpki-client