Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34322e3133362e302f32342d3234203d3e203437353833.roa
File: 3139332e34322e3133362e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: zGvPsgoxkjFPP3nEPQR1IdzSDqg76z2zP+By6Mu2o9Y=
Subject key identifier: 4E:AE:99:F6:AC:41:7E:17:79:3A:D7:AE:DD:F9:82:95:BA:27:79:03
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2034E8C8C7F5B4308F9B07BDB60085987CEB077C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34322e3133362e302f32342d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:45:20 +0000
ROA not before: Mon 27 Jan 2025 09:40:20 +0000
ROA not after: Mon 26 Jan 2026 09:45:20 +0000
asID: 47583
IP address blocks: 193.42.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:34:e8:c8:c7:f5:b4:30:8f:9b:07:bd:b6:00:85:98:7c:eb:07:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:20 2025 GMT
Not After : Jan 26 09:45:20 2026 GMT
Subject: CN=4EAE99F6AC417E17793AD7AEDDF98295BA277903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:5f:53:19:06:83:2d:19:6b:e1:7b:52:78:
51:6c:db:b7:97:f0:f2:f6:2b:8b:4f:7c:ee:0f:8b:
ed:6b:18:6c:d8:6f:d6:d6:a4:6b:0a:e2:dd:5a:48:
ba:cf:22:c6:14:db:f8:1e:20:09:6f:dd:ce:a1:54:
b9:cf:d5:9c:cc:b4:79:bd:87:ef:04:c6:8c:27:e9:
e1:a4:22:b0:14:5d:9f:2c:04:82:3a:77:07:51:79:
1f:28:82:88:94:bc:f9:66:8e:8d:63:e3:00:e8:3f:
42:6a:10:0d:53:e0:c0:14:5d:7f:7b:77:0a:69:e0:
e0:8a:20:9d:87:c9:ca:9d:5f:5a:f4:c7:d0:79:7e:
d5:e8:94:5e:52:19:fe:27:81:ac:f9:9c:10:a9:3a:
07:0d:11:dd:c6:fb:0d:e1:cf:2f:da:3b:14:3d:9a:
1b:5a:89:a5:c5:57:bd:f5:52:fa:37:87:a4:60:9a:
d5:71:44:d9:33:b9:87:b1:12:89:73:99:52:de:ef:
69:9b:28:91:93:b6:2b:c8:bc:0c:bc:fd:ba:9c:b8:
8a:6c:62:6a:09:7c:b7:78:49:22:07:6b:59:de:92:
96:05:27:ee:6e:12:d2:80:70:65:f3:dc:ab:8d:6d:
66:cc:99:f5:be:d5:ce:6f:ea:8f:74:8a:f7:ae:f1:
b9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AE:99:F6:AC:41:7E:17:79:3A:D7:AE:DD:F9:82:95:BA:27:79:03
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34322e3133362e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.136.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a2:00:89:a7:9a:f2:45:71:cd:dc:14:e4:16:a3:08:bb:d5:
e7:12:51:fb:0e:13:19:14:67:85:d3:bb:88:ff:15:9e:17:ab:
cc:c6:8c:bf:ef:30:91:dc:11:84:8e:13:b6:68:2d:50:12:65:
db:ef:e9:10:ac:51:2c:a9:10:93:ea:ff:c0:e9:c4:6f:67:96:
75:3e:ec:ad:64:21:a8:48:5e:79:ea:01:76:ba:67:36:4a:34:
12:bf:40:46:24:5e:f6:16:c4:b0:6f:46:97:79:24:d9:e9:81:
8a:fa:46:cc:1f:24:a1:e5:69:29:ae:82:9f:10:bf:29:e4:ab:
f8:ea:9b:67:9c:49:21:90:de:3d:c8:b2:b5:34:c4:8a:f0:1d:
4f:af:5f:93:10:68:5a:6c:8d:15:19:49:4d:98:07:42:62:6e:
47:91:37:3b:8c:a5:3d:38:1e:14:2a:91:5f:b1:2e:8a:00:ea:
8b:a2:ea:13:07:a5:8e:f8:4f:f5:4d:e4:ed:e8:58:ef:ee:59:
9c:a5:9c:06:1f:cc:df:9a:ef:96:21:2a:9c:29:e6:75:0b:e0:
79:c4:65:75:c5:b0:58:57:62:a3:98:65:1f:0f:4c:48:e0:39:
ab:f6:aa:05:c0:06:98:4a:17:f4:ef:e8:42:45:6b:67:4e:27:
23:ce:5e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:03:26 2025 by rpki-client