Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39302e302f32342d3332203d3e20313431393935.roa
File: 3139342e3139352e39302e302f32342d3332203d3e20313431393935.roa (raw, json)
Hash identifier: fFYNpOdGqkgkLFMAdsfrz52IT81/ZqljqUyDZysre0k=
Subject key identifier: 42:EF:C2:F8:DC:B3:5A:0E:9D:C5:DB:63:05:46:DF:90:F3:23:FC:63
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 47F9C06F05F07C9C049663D1EBA7DA5601762F91
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39302e302f32342d3332203d3e20313431393935.roa
Signing time: Mon 27 Jan 2025 09:45:01 +0000
ROA not before: Mon 27 Jan 2025 09:40:01 +0000
ROA not after: Mon 26 Jan 2026 09:45:01 +0000
asID: 141995
IP address blocks: 194.195.90.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:f9:c0:6f:05:f0:7c:9c:04:96:63:d1:eb:a7:da:56:01:76:2f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:01 2025 GMT
Not After : Jan 26 09:45:01 2026 GMT
Subject: CN=42EFC2F8DCB35A0E9DC5DB630546DF90F323FC63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2a:eb:82:b9:a4:1c:57:35:de:9e:86:8d:5d:
04:ae:5f:d4:c7:dc:a5:64:9e:8c:5c:51:a3:5f:21:
ce:36:77:a5:9f:f3:6a:ba:1a:0b:e9:af:9d:b8:21:
fe:7d:07:99:0a:34:d7:b7:06:76:b1:84:69:d5:2e:
2f:c0:2a:9b:ba:53:58:91:d6:e0:bc:92:b2:91:9b:
ee:2b:8f:13:42:78:75:59:d7:4b:7c:ca:a4:20:e0:
c1:ec:2f:e6:0f:b6:f8:bc:9b:ea:5f:48:a5:36:67:
3f:27:29:90:16:68:e9:70:4b:16:2a:11:04:19:62:
f9:a8:1c:ba:e3:4b:52:94:19:7a:48:6b:8d:72:09:
fe:c3:f9:d4:b8:39:72:dd:6c:9b:9c:5a:44:73:b3:
a0:c7:1e:e4:23:5b:01:2a:7c:48:29:6c:cb:ab:fe:
93:5d:e2:d6:31:23:2f:bb:d4:b1:0a:4f:ca:aa:69:
a7:ec:4e:a4:62:95:37:0e:6e:14:65:1d:0c:01:89:
f7:69:08:d8:e7:95:6e:3d:64:b2:d4:74:ab:f0:6c:
ed:1e:ec:6a:75:10:21:b3:ae:ce:17:82:7d:09:0b:
b8:08:18:6a:95:5e:c9:b8:70:71:8b:88:a2:8f:a2:
c4:6b:fb:89:53:a6:97:4f:bf:f9:ba:00:16:e5:be:
4e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EF:C2:F8:DC:B3:5A:0E:9D:C5:DB:63:05:46:DF:90:F3:23:FC:63
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39302e302f32342d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.90.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:f6:91:37:06:3b:0e:93:96:69:1d:8b:8d:ba:16:de:42:cb:
33:a3:9f:34:42:16:c8:70:00:6c:d7:bf:01:12:5d:f0:99:ec:
ab:a6:10:41:bd:fd:b0:96:1e:20:b6:f4:63:af:8f:2a:61:09:
9b:d4:c1:cb:48:89:b9:f6:b6:3f:68:71:02:93:3c:ce:70:f1:
58:6f:92:29:69:de:e1:c2:98:1f:46:78:e3:c7:3d:45:bc:f5:
52:61:dc:81:79:71:d8:28:30:30:db:57:d7:9f:ea:64:44:65:
69:ce:f8:ee:20:b6:3a:bd:b3:5a:6d:3e:4d:d8:6f:3d:6e:4e:
7f:0a:b6:4b:21:88:9c:62:1d:3c:37:d9:fd:20:b4:a5:0e:b7:
48:48:85:a5:01:1d:ea:c9:c4:38:ae:58:2b:ab:e0:12:43:6f:
23:78:a3:08:f6:41:88:d6:e1:e2:ea:f7:46:31:aa:bf:90:3c:
dc:b6:6f:e2:b4:19:70:30:19:f7:a0:4e:15:07:19:5e:36:22:
ad:3d:0a:35:24:be:27:c4:f0:ec:81:43:99:b1:f4:55:8c:46:
64:18:93:25:0f:31:33:61:a3:36:80:ae:87:22:44:30:76:90:
66:cb:3e:81:64:f8:62:e4:6e:e8:55:0e:06:bc:b5:4a:e9:51:
1b:8f:67:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:15:55 2025 by rpki-client