Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132372e302f32342d3234203d3e20313337343039.roa
File: 3138352e38312e3132372e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier: 4GvgK+PC9ChvUsjZsXZ3dfKdHFsQXajGbtTKF7qiU44=
Subject key identifier: C8:72:A8:70:3D:97:A9:00:04:FE:FC:93:BC:69:A5:92:A3:6B:1A:B0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 10E37AF7ADFCB4ED3F8B547BD9B76BA2A97A96C5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132372e302f32342d3234203d3e20313337343039.roa
Signing time: Thu 30 Jan 2025 18:39:54 +0000
ROA not before: Thu 30 Jan 2025 18:34:54 +0000
ROA not after: Thu 29 Jan 2026 18:39:54 +0000
asID: 137409
IP address blocks: 185.81.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e3:7a:f7:ad:fc:b4:ed:3f:8b:54:7b:d9:b7:6b:a2:a9:7a:96:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 30 18:34:54 2025 GMT
Not After : Jan 29 18:39:54 2026 GMT
Subject: CN=C872A8703D97A90004FEFC93BC69A592A36B1AB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bb:33:b5:9d:85:1d:e6:77:42:1e:d2:01:18:
1f:9b:4c:60:ed:61:7e:cb:50:9e:ea:5d:9b:72:fc:
59:ae:ad:d7:cd:67:08:b3:33:5a:f7:86:15:97:20:
f7:0c:cf:10:16:00:6e:22:8e:ba:8b:fb:58:fa:7e:
9e:e1:43:e1:59:b4:c5:ad:af:57:e2:45:96:3a:04:
14:f6:64:f8:cc:ac:4b:20:56:d0:85:42:e1:6b:ca:
33:68:a5:13:c3:3d:0e:fa:86:00:15:99:90:e8:84:
d7:1d:92:3c:95:89:51:54:2e:18:eb:1c:4a:29:60:
cf:11:90:9e:df:cd:a5:b4:ff:16:fa:68:1a:1c:30:
54:d9:b7:e9:6b:4d:13:67:da:e1:f0:99:24:fa:e4:
eb:5c:73:bf:98:69:76:06:67:91:d8:50:e5:2c:89:
7a:22:ba:40:63:2c:f4:d3:c4:d3:b4:c1:6d:40:c7:
60:c9:6e:1b:57:0f:4d:89:e1:1d:5f:e7:68:fe:a8:
f5:2b:fe:ad:31:5b:12:42:4f:37:fa:96:b1:4a:f8:
9e:4d:7b:57:89:03:74:68:4a:e7:a0:98:8d:cc:e8:
b3:29:c4:e5:06:12:0a:09:f4:31:7b:69:cf:b3:ca:
ed:c3:50:b6:07:e4:c7:22:18:04:48:02:a8:7a:21:
82:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:72:A8:70:3D:97:A9:00:04:FE:FC:93:BC:69:A5:92:A3:6B:1A:B0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132372e302f32342d3234203d3e20313337343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.127.0/24
Signature Algorithm: sha256WithRSAEncryption
56:4a:d5:45:b7:b3:59:e4:bf:af:3e:3e:17:c9:71:c8:60:64:
3c:2b:fd:78:1c:0c:8c:d5:38:1e:8f:08:c3:97:15:7d:37:b5:
a1:ee:13:4e:c7:33:36:b2:62:38:bb:cc:99:ef:92:fa:e5:4b:
58:e5:b8:f0:c3:fe:e5:22:e9:ef:b3:2e:66:af:1f:d0:a1:e8:
b9:c0:8b:ea:40:df:e7:00:01:f7:d9:6d:ec:f8:70:ff:c6:f9:
87:7c:6b:83:ce:98:cb:3d:a2:be:07:b9:a4:ec:30:34:28:ff:
83:86:a4:a8:2d:76:0a:e3:7a:c6:ec:5d:bb:e3:ae:ca:5d:f8:
68:55:0f:99:65:aa:1e:6b:5d:d6:02:4f:b8:6f:5e:7f:46:6f:
05:05:fa:01:f8:ab:49:56:5e:39:18:0a:82:50:82:8e:12:0b:
77:a1:1b:e6:bb:e2:0f:84:b6:e7:72:a2:0d:6c:4e:78:4c:43:
04:8c:ef:95:c8:ba:9d:d1:53:0b:69:df:b0:2c:19:22:bb:51:
42:3c:8a:4f:fc:bf:7e:46:c5:0b:d0:36:87:67:25:33:1e:40:
00:7a:6e:ab:4c:ca:16:bf:74:77:a9:15:1f:43:3a:8d:c3:6e:
41:12:33:9d:55:95:2d:6e:fa:25:e5:96:7f:55:d1:53:a5:3b:
9a:65:88:82
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUEON69638tO0/i1R72bdroql6lsUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMzAxODM0NTRaFw0yNjAxMjkxODM5NTRaMDMxMTAvBgNV
BAMTKEM4NzJBODcwM0Q5N0E5MDAwNEZFRkM5M0JDNjlBNTkyQTM2QjFBQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiuzO1nYUd5ndCHtIBGB+bTGDt
YX7LUJ7qXZty/FmurdfNZwizM1r3hhWXIPcMzxAWAG4ijrqL+1j6fp7hQ+FZtMWt
r1fiRZY6BBT2ZPjMrEsgVtCFQuFryjNopRPDPQ76hgAVmZDohNcdkjyViVFULhjr
HEopYM8RkJ7fzaW0/xb6aBocMFTZt+lrTRNn2uHwmST65Otcc7+YaXYGZ5HYUOUs
iXoiukBjLPTTxNO0wW1Ax2DJbhtXD02J4R1f52j+qPUr/q0xWxJCTzf6lrFK+J5N
e1eJA3RoSuegmI3M6LMpxOUGEgoJ9DF7ac+zyu3DULYH5MciGARIAqh6IYI9AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUyHKocD2XqQAE/vyTvGmlkqNrGrAwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzODMxMmUzMTMy
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczNDMwMzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5UX8wDQYJKoZIhvcNAQELBQADggEBAFZK1UW3s1nkv68+PhfJcchgZDwr/Xgc
DIzVOB6PCMOXFX03taHuE07HMzayYji7zJnvkvrlS1jluPDD/uUi6e+zLmavH9Ch
6LnAi+pA3+cAAffZbez4cP/G+Yd8a4POmMs9or4HuaTsMDQo/4OGpKgtdgrjesbs
Xbvjrspd+GhVD5llqh5rXdYCT7hvXn9GbwUF+gH4q0lWXjkYCoJQgo4SC3ehG+a7
4g+Etudyog1sTnhMQwSM75XIup3RUwtp37AsGSK7UUI8ik/8v35GxQvQNodnJTMe
QAB6bqtMyha/dHepFR9DOo3DbkESM51VlS1u+iXlln9V0VOlO5pliII=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:08:15 2025 by rpki-client