Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3136302e3131382e302f32342d3234203d3e20313336373837.roa
File: 3139332e3136302e3131382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 4waDiEfLshTCc8J1/WGlWPSTHJTbcVToLY+cOiQDkPg=
Subject key identifier: FE:54:E9:D2:5D:8D:74:52:93:9A:6A:1C:D5:1B:1A:20:5A:10:68:B0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3D1FF18BC518801A1FB23555E919E5924B786469
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3136302e3131382e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 02 Apr 2025 12:45:57 +0000
ROA not before: Wed 02 Apr 2025 12:40:57 +0000
ROA not after: Wed 01 Apr 2026 12:45:57 +0000
asID: 136787
IP address blocks: 193.160.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:1f:f1:8b:c5:18:80:1a:1f:b2:35:55:e9:19:e5:92:4b:78:64:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 2 12:40:57 2025 GMT
Not After : Apr 1 12:45:57 2026 GMT
Subject: CN=FE54E9D25D8D7452939A6A1CD51B1A205A1068B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:22:7d:97:87:b3:76:e5:30:58:b8:b4:f9:
51:4f:ab:9b:1f:e1:71:7b:13:bf:72:a4:c3:b7:7f:
48:ca:15:f1:22:9a:cf:ab:99:a8:19:fc:bf:56:4c:
9d:c4:bf:c1:31:66:82:54:93:de:d9:2c:68:cf:97:
d0:f6:7c:e3:29:f4:b5:fc:fa:29:68:07:94:a9:12:
34:5f:41:16:88:48:18:1e:34:44:60:f7:51:d0:14:
c5:46:50:b1:58:29:26:c8:38:aa:a2:20:3a:4f:22:
e5:54:e6:35:ba:4a:23:b4:ab:fd:f9:aa:e1:75:03:
a8:71:0a:dd:af:e7:3a:13:2b:7b:ee:10:51:ae:e3:
d7:0e:28:bc:c6:f8:6f:b6:71:d3:b7:50:cb:a6:68:
79:85:ea:6e:9d:92:aa:54:61:a0:b2:92:c6:88:d4:
b3:e9:e7:b6:4a:8f:1b:79:54:d5:9f:8e:46:a8:f2:
c2:b4:36:e1:4c:7e:76:a0:03:07:2d:bb:6a:37:14:
4a:2c:b2:3e:4c:39:15:88:b9:01:b0:14:2d:c9:e1:
07:03:52:e8:6f:ae:eb:1a:fc:fb:7f:30:03:36:13:
b3:a1:10:0a:96:2e:2a:5e:fe:48:0c:e9:01:b9:52:
51:3d:90:58:d7:8b:eb:d6:3c:84:ea:96:5c:d4:ee:
77:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:54:E9:D2:5D:8D:74:52:93:9A:6A:1C:D5:1B:1A:20:5A:10:68:B0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3136302e3131382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.118.0/24
Signature Algorithm: sha256WithRSAEncryption
25:a2:02:06:48:41:a3:09:85:af:b8:96:18:d0:64:66:a6:1c:
de:62:f9:f6:ed:d4:23:ec:c4:ad:0a:a3:f7:03:24:d5:48:2c:
89:e0:21:a8:fb:ed:e5:04:16:6b:30:26:a7:81:9e:4b:47:e2:
56:0f:fa:0a:fb:74:db:b8:72:ee:52:dc:40:31:d1:55:0d:23:
c0:ef:ac:12:23:10:a7:09:32:a7:d7:df:cc:bb:9c:7d:6f:47:
a2:1f:5e:2c:cb:c7:79:81:ca:18:cc:58:59:61:cc:9f:19:e7:
76:7c:97:5e:08:4c:bb:d6:c8:e7:6a:6f:03:c1:01:79:56:fb:
3e:fa:8e:b7:fc:b7:8e:11:c3:f1:54:8b:5e:b6:35:8e:b6:96:
15:a6:70:8b:42:af:25:da:26:dd:8a:9f:ac:2c:06:cb:50:c7:
8e:f9:30:0c:8f:b7:5f:36:08:4b:04:61:03:e8:53:4a:84:bf:
ac:9d:98:d5:1f:fd:a9:b7:ac:4e:7f:50:e1:c4:06:21:47:41:
ab:27:ba:eb:47:66:d0:9c:ab:9a:69:48:9f:97:ea:d8:06:d9:
1c:64:bd:dd:f8:3f:ff:b6:ab:f9:e0:07:d7:70:db:46:d8:60:
da:b2:28:41:89:c8:0b:a0:b2:f8:26:ed:ee:cf:67:8e:2b:b3:
db:b1:7d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:03 2025 by rpki-client