Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e38392e302f32342d3234203d3e20313337343039.roa
File: 3139342e3139352e38392e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier: tmzThCYgqGHFoH2T6u8xmXSs2rOM1XFTvw9dNO2Vx3s=
Subject key identifier: 53:41:93:89:E3:B0:FA:D3:C9:F7:16:30:5B:5E:D9:46:E4:D3:AD:D5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 514F7E90E4F25D26523E7E723FB642E9F10F26A8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e38392e302f32342d3234203d3e20313337343039.roa
Signing time: Mon 27 Jan 2025 09:45:11 +0000
ROA not before: Mon 27 Jan 2025 09:40:11 +0000
ROA not after: Mon 26 Jan 2026 09:45:11 +0000
asID: 137409
IP address blocks: 194.195.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:4f:7e:90:e4:f2:5d:26:52:3e:7e:72:3f:b6:42:e9:f1:0f:26:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:11 2025 GMT
Not After : Jan 26 09:45:11 2026 GMT
Subject: CN=53419389E3B0FAD3C9F716305B5ED946E4D3ADD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5f:6e:72:cc:a0:a0:cb:6c:2a:99:c1:6d:16:
3c:34:7a:e8:bd:92:b2:fa:3b:cb:44:a9:86:41:d8:
e6:28:2f:d5:6a:5f:25:48:b1:a3:3c:b4:38:ac:a8:
bb:a2:29:9f:33:64:8c:37:24:ac:5f:c2:28:d8:2d:
0d:4f:62:85:91:eb:3a:97:1a:4d:c0:bc:df:03:ed:
8b:0a:df:ad:01:67:d6:be:74:f8:cd:51:e3:f3:60:
05:ab:0d:5f:ee:45:4d:0c:21:84:1c:77:97:18:dc:
53:98:6f:ab:22:38:c9:18:d9:28:ed:13:e9:70:ff:
16:c0:f8:38:a8:1d:76:cb:86:0d:cd:c4:8d:81:0c:
47:86:a5:86:6c:b2:60:8f:57:a0:81:b4:0d:13:60:
d3:a9:7c:ea:7a:3f:3a:8d:bf:c0:2a:a2:a6:37:8c:
fc:51:70:6a:60:bd:f7:4d:ff:0b:e1:ee:d7:41:cd:
cf:fb:6d:9f:3f:ea:a4:f7:e0:67:13:eb:59:f2:36:
fc:b2:19:8b:8c:21:25:5c:f3:58:40:2b:7c:7f:27:
05:f3:04:99:59:39:7f:80:4c:66:c8:1f:96:d7:e3:
04:26:35:4a:6a:a2:0b:35:ba:9b:75:42:a1:93:59:
b1:3d:de:5a:37:97:86:51:6b:5e:7d:d5:f3:1a:f9:
f6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:41:93:89:E3:B0:FA:D3:C9:F7:16:30:5B:5E:D9:46:E4:D3:AD:D5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e38392e302f32342d3234203d3e20313337343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.89.0/24
Signature Algorithm: sha256WithRSAEncryption
93:56:67:b1:f0:0b:13:ee:2b:23:4b:9d:4f:7c:f7:eb:0d:03:
00:46:76:f1:91:4d:1b:ba:21:be:e8:0b:9a:64:34:1a:dd:29:
9e:0a:64:c3:3c:e0:21:00:18:42:34:b0:99:96:c0:ca:8b:20:
eb:20:33:b6:15:70:70:28:4f:f4:89:ee:cf:ce:64:99:03:85:
80:59:03:87:ff:aa:4f:78:43:21:5c:44:cf:9c:02:48:d4:f4:
3d:47:a8:5c:79:a4:0d:f8:c3:44:b6:96:d7:dc:5c:5b:58:85:
b5:28:93:2d:45:6c:e7:e6:87:17:c3:91:50:e1:3f:d6:73:c9:
0c:33:f3:32:a7:ed:60:21:ad:fe:e7:f9:96:ab:55:15:e1:99:
32:df:9e:b5:97:c3:13:82:de:f3:ec:21:ca:e6:bf:7f:eb:0d:
e9:d7:6a:c8:9f:20:cc:32:90:7c:80:29:07:fa:1f:ae:8f:33:
83:27:c4:13:aa:da:7a:97:d6:0a:c4:2a:d7:00:69:14:d1:d2:
97:9d:88:f6:d9:36:c8:3f:65:4d:00:16:42:06:f2:7a:7d:08:
4e:ed:0f:78:bd:b8:89:ea:fc:b1:95:1f:53:2e:98:1d:83:9e:
e0:23:ca:ac:d7:51:19:e8:98:ca:b7:c2:ed:f1:8f:ba:fd:ca:
94:ca:f4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:12:03 2025 by rpki-client