Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3134302e3139362e302f32322d3332203d3e203531313637.roa
File: 3139342e3134302e3139362e302f32322d3332203d3e203531313637.roa (raw, json)
Hash identifier: VUcdmEgyiFPoyv0Pr5PY66PXTSG+muhOCfT/p3pV9SE=
Subject key identifier: 02:23:52:AA:74:0D:A7:40:D4:8E:49:54:0B:E6:E1:93:44:1A:FF:8D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 167587DBBE51F4EACBCCA4EED51F5D200B2F14DE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3134302e3139362e302f32322d3332203d3e203531313637.roa
Signing time: Fri 23 May 2025 08:46:27 +0000
ROA not before: Fri 23 May 2025 08:41:27 +0000
ROA not after: Fri 22 May 2026 08:46:27 +0000
asID: 51167
IP address blocks: 194.140.196.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:75:87:db:be:51:f4:ea:cb:cc:a4:ee:d5:1f:5d:20:0b:2f:14:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 23 08:41:27 2025 GMT
Not After : May 22 08:46:27 2026 GMT
Subject: CN=022352AA740DA740D48E49540BE6E193441AFF8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:14:33:6c:cb:49:47:3d:f0:49:28:c2:97:68:
af:34:e8:73:cd:28:cd:9c:8e:35:29:f1:cc:29:02:
80:90:d5:99:a3:bd:96:37:13:8a:93:10:73:cc:76:
e0:b2:4d:7d:b6:cc:33:f9:d4:66:01:24:58:87:ff:
bb:c9:e5:83:e3:a2:73:0c:25:f5:09:ed:7f:d5:75:
5f:c5:2f:54:8c:32:ea:48:40:4f:9e:11:cb:c2:dc:
29:02:76:42:a7:2d:70:69:fe:f5:c4:99:79:b8:d6:
7d:ba:8c:6c:95:3a:d3:1b:b4:96:1b:bd:3d:f4:fb:
02:93:3d:79:3b:dd:9f:7e:2e:f5:e4:4b:46:02:ce:
5f:c3:dc:d3:22:a9:88:d6:59:75:2e:eb:95:89:b9:
cf:5d:9f:b7:61:e6:df:5c:83:39:36:f5:3e:12:b0:
6a:ee:7e:f2:01:97:26:e5:1b:e0:c9:5b:14:ae:0d:
85:ba:81:91:42:cc:18:f9:2e:b4:80:f7:d2:d8:69:
96:b1:f9:3c:da:3a:53:53:c5:8f:dd:27:14:5c:78:
49:d4:6f:40:68:b1:29:37:7a:9f:7b:b4:93:0d:eb:
b9:de:28:36:c0:29:ba:01:65:18:87:43:15:3c:d3:
dd:58:0c:1c:07:5f:61:6c:6b:d1:6b:67:da:84:33:
e3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:23:52:AA:74:0D:A7:40:D4:8E:49:54:0B:E6:E1:93:44:1A:FF:8D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3134302e3139362e302f32322d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.140.196.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:f9:77:04:db:fd:f8:0f:15:d1:46:52:a4:d6:49:3b:02:72:
16:94:cc:00:97:a7:f0:29:da:a7:fb:75:e1:ca:c1:a7:98:37:
de:a5:78:61:93:df:64:92:e7:00:f7:22:06:d3:93:bb:90:cf:
89:c0:27:ba:00:d2:f2:3b:c7:be:e2:2b:0b:43:6e:1c:a8:d6:
52:e6:f0:47:e2:f3:0a:3b:fc:e1:6b:50:cc:f5:62:a5:3d:63:
57:20:04:59:37:90:a7:30:b5:cb:10:ca:cc:ac:cd:c9:10:eb:
22:32:3c:95:c5:98:7f:1a:01:de:6e:c1:86:67:23:54:98:a8:
61:ad:0e:2e:4d:c5:d9:dd:7c:6e:8b:dd:59:cc:5a:47:e0:af:
02:6b:14:ae:02:8d:6f:c4:b1:6b:38:97:85:d1:a1:14:53:8f:
8b:59:16:b7:3b:27:a5:44:44:02:3d:a7:09:87:ff:23:9b:9c:
34:0c:7e:01:a5:86:71:66:e1:6a:78:c2:96:b0:b8:76:18:5e:
4a:cd:08:71:b5:2e:65:eb:38:85:a9:e6:ec:a6:ba:41:d6:42:
5f:92:14:a4:50:76:3f:a5:93:29:b4:cd:72:d6:0c:63:9d:6f:
e9:90:a2:7d:ad:21:0a:73:d3:b0:50:50:db:79:0b:a7:24:de:
04:5e:93:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:45:36 2025 by rpki-client