Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3136332e34302e302f32322d3234203d3e203437353833.roa
File: 3139342e3136332e34302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: xAkWLnvS3+jEsZW6qTAgsjV/7zpJhJySwvTHQYticQc=
Subject key identifier: F7:2A:12:D9:01:20:91:70:B2:A8:21:88:49:E2:0C:32:00:96:4A:79
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 494A04B380F59FA8B81F10CB2F948A4E714F2C69
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3136332e34302e302f32322d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:45:12 +0000
ROA not before: Mon 27 Jan 2025 09:40:12 +0000
ROA not after: Mon 26 Jan 2026 09:45:12 +0000
asID: 47583
IP address blocks: 194.163.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:4a:04:b3:80:f5:9f:a8:b8:1f:10:cb:2f:94:8a:4e:71:4f:2c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:12 2025 GMT
Not After : Jan 26 09:45:12 2026 GMT
Subject: CN=F72A12D901209170B2A8218849E20C3200964A79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:92:96:0a:c3:3f:c7:f1:1f:72:02:73:ef:
94:58:7f:6e:77:e8:e5:4a:24:6a:1e:90:f7:ae:dc:
f8:7a:8f:54:2b:87:0e:bd:a7:65:04:5a:e8:4b:3c:
a8:3f:21:6e:db:33:d1:16:15:3d:4f:ac:f1:ac:de:
b7:f3:d9:25:04:19:8a:0c:38:e5:6b:13:28:a7:ef:
77:b0:1d:c9:8d:f6:63:3a:30:ad:5e:38:8c:a3:04:
42:34:ec:a8:0e:e4:b3:d4:37:ae:70:39:a1:9d:c5:
97:b6:09:e6:1c:28:55:23:8f:24:0d:d9:d1:20:d1:
fe:7b:0a:1e:72:96:23:11:5e:e3:d1:37:73:a1:ac:
96:41:a9:1e:ce:b5:5d:8c:41:d5:d8:1b:4d:47:6d:
3b:39:c7:75:1b:d0:7c:e6:dc:a9:a3:30:ee:84:a2:
3a:25:f4:e7:85:57:ca:22:e7:14:7a:7d:dd:f3:8e:
ca:54:d7:ce:f1:e2:c7:e5:04:ef:d8:08:ea:12:d0:
58:ec:ca:13:7c:da:dc:cf:a4:ec:8b:4b:29:0a:65:
e2:b5:e3:da:08:b7:0d:2f:c9:24:86:cf:c8:8e:12:
86:b4:1d:9e:a6:2e:d5:e1:f9:8c:97:34:1e:61:f2:
7f:97:2c:33:2b:c5:4a:4f:97:30:73:a4:37:3e:ab:
71:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2A:12:D9:01:20:91:70:B2:A8:21:88:49:E2:0C:32:00:96:4A:79
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3136332e34302e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.40.0/22
Signature Algorithm: sha256WithRSAEncryption
81:44:ef:f7:a3:8f:e1:1e:f7:b5:d6:e9:98:a8:da:65:5b:1c:
41:5b:e9:e0:63:a0:4e:73:15:8b:e1:bb:b4:59:ee:ed:32:fb:
bf:c8:bc:93:86:34:4f:ca:fa:26:d1:04:c1:c8:4e:9d:c4:86:
6c:55:9e:08:ba:bf:e8:51:bb:27:44:94:64:04:65:2e:2b:68:
e1:12:68:d0:d2:9d:65:28:b7:84:e7:f3:48:b7:5f:7a:93:49:
d5:9a:b3:33:05:01:83:5e:56:f6:a3:7b:35:1a:9a:2e:c7:6c:
9a:1d:a3:d1:8a:50:c2:6f:38:a5:ed:1e:ac:20:ba:a2:64:04:
11:e4:87:72:eb:29:f3:e4:c8:09:e8:25:15:32:54:90:05:77:
46:af:2a:7f:19:30:21:74:25:21:b5:fc:b2:e9:20:cc:77:0e:
e7:d5:47:cf:f2:8c:23:7c:a5:56:a4:b8:62:45:6e:2d:33:dd:
de:6b:f0:4e:92:af:93:81:8e:84:6b:f3:1e:1c:84:0a:a7:94:
09:9f:ae:7c:0a:62:7a:a9:fd:57:04:45:74:9e:14:ee:86:77:
ee:ac:53:3d:6c:46:93:9b:a2:60:f2:55:1b:73:40:8d:ce:55:
5c:47:f5:73:31:ba:a7:6a:57:08:83:30:4c:71:c0:71:af:39:
e6:e2:fd:79
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUSUoEs4D1n6i4HxDLL5SKTnFPLGkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMjcwOTQwMTJaFw0yNjAxMjYwOTQ1MTJaMDMxMTAvBgNV
BAMTKEY3MkExMkQ5MDEyMDkxNzBCMkE4MjE4ODQ5RTIwQzMyMDA5NjRBNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIqpKWCsM/x/EfcgJz75RYf253
6OVKJGoekPeu3Ph6j1Qrhw69p2UEWuhLPKg/IW7bM9EWFT1PrPGs3rfz2SUEGYoM
OOVrEyin73ewHcmN9mM6MK1eOIyjBEI07KgO5LPUN65wOaGdxZe2CeYcKFUjjyQN
2dEg0f57Ch5yliMRXuPRN3OhrJZBqR7OtV2MQdXYG01HbTs5x3Ub0Hzm3KmjMO6E
ojol9OeFV8oi5xR6fd3zjspU187x4sflBO/YCOoS0FjsyhN82tzPpOyLSykKZeK1
49oItw0vySSGz8iOEoa0HZ6mLtXh+YyXNB5h8n+XLDMrxUpPlzBzpDc+q3GDAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU9yoS2QEgkXCyqCGISeIMMgCWSnkwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM0MmUzMTM2MzMyZTM0
MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
wqMoMA0GCSqGSIb3DQEBCwUAA4IBAQCBRO/3o4/hHve11umYqNplWxxBW+ngY6BO
cxWL4bu0We7tMvu/yLyThjRPyvom0QTByE6dxIZsVZ4Iur/oUbsnRJRkBGUuK2jh
EmjQ0p1lKLeE5/NIt196k0nVmrMzBQGDXlb2o3s1Gpoux2yaHaPRilDCbzil7R6s
ILqiZAQR5Idy6ynz5MgJ6CUVMlSQBXdGryp/GTAhdCUhtfyy6SDMdw7n1UfP8owj
fKVWpLhiRW4tM93ea/BOkq+TgY6Ea/MeHIQKp5QJn658CmJ6qf1XBEV0nhTuhnfu
rFM9bEaTm6Jg8lUbc0CNzlVcR/VzMbqnalcIgzBMccBxrznm4v15
-----END CERTIFICATE-----
Generated at Fri Apr 4 15:58:50 2025 by rpki-client