Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39342e302f32342d3234203d3e20383334.roa
File: 3139342e3139352e39342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: mGp8OpsM5i6eRY6mvbzDo8/0v33UHtcEu5Pea90LTXo=
Subject key identifier: 1C:49:96:B7:92:DB:BA:A3:49:2A:DF:B6:46:09:01:C7:EA:2C:EB:C3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1537B64CBEA27CCE951F13D1885D95A5BF4F4470
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39342e302f32342d3234203d3e20383334.roa
Signing time: Wed 09 Apr 2025 11:54:27 +0000
ROA not before: Wed 09 Apr 2025 11:49:27 +0000
ROA not after: Wed 08 Apr 2026 11:54:27 +0000
asID: 834
IP address blocks: 194.195.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:37:b6:4c:be:a2:7c:ce:95:1f:13:d1:88:5d:95:a5:bf:4f:44:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 9 11:49:27 2025 GMT
Not After : Apr 8 11:54:27 2026 GMT
Subject: CN=1C4996B792DBBAA3492ADFB6460901C7EA2CEBC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:14:59:4b:79:c5:ed:94:1e:da:4e:42:61:
56:df:5d:b1:a3:2c:4f:c6:19:31:e2:d8:a2:4b:13:
b2:44:d9:de:f2:63:99:6f:73:6c:d0:78:a2:96:c0:
f0:84:81:a1:33:0e:f0:5c:ee:47:a6:20:c5:7a:35:
6e:f6:41:d4:39:c6:04:99:b1:49:04:10:5d:70:d3:
28:3b:37:8f:f9:01:1a:c3:ee:bf:83:b5:79:0d:f8:
a1:a3:1c:82:18:8c:82:df:ea:01:06:a8:a7:45:b5:
34:6b:09:88:87:46:7a:77:8f:3d:00:b0:b8:03:51:
e0:c0:3f:dd:f3:ac:9d:48:1d:06:b5:23:69:a0:ed:
c4:6c:ca:76:70:73:b4:ae:da:b7:bb:c3:56:37:9b:
32:eb:b5:5f:04:e5:e9:77:db:a2:d7:77:24:00:bc:
ce:4e:c5:bf:d8:cf:49:86:15:be:39:26:dc:77:4d:
9d:a4:f5:38:27:21:ab:b7:2b:36:f5:0f:1f:b6:10:
59:d5:32:6f:f1:ee:73:c5:cb:60:94:72:a7:40:4c:
94:c1:b7:bf:d7:3e:2f:e3:9e:28:a6:ce:b8:85:44:
74:c8:d1:74:22:72:c5:5a:72:1f:41:7e:29:57:96:
86:46:f7:b0:46:3e:cc:c7:74:8f:db:5a:6c:a1:d6:
18:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:49:96:B7:92:DB:BA:A3:49:2A:DF:B6:46:09:01:C7:EA:2C:EB:C3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.94.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:9b:de:5e:05:0a:83:dc:c1:65:df:b4:0e:9a:59:0f:6a:dd:
39:33:54:97:28:61:85:fd:41:03:85:d3:6c:11:91:2b:03:73:
f8:c9:d5:5f:bf:e9:ee:15:d1:c7:52:94:7a:73:06:f5:94:08:
82:84:c6:3e:a3:7b:f6:6e:98:67:95:d6:81:de:c6:34:00:bb:
e9:08:6d:c8:8f:52:2f:e0:88:2a:10:bf:0f:fe:8b:d4:f2:62:
0b:73:12:e6:c1:d5:37:4d:69:f0:72:2b:72:cc:0f:1b:ec:9d:
9f:a2:af:77:a4:9f:62:90:54:71:04:6e:e5:b6:49:95:3b:fa:
a2:f7:f2:3c:cd:da:d7:cd:ae:1a:1a:2c:85:e4:c5:56:74:57:
71:01:2d:9e:02:ae:28:d8:ff:1f:22:98:06:8f:f1:51:f3:d1:
ec:30:41:38:3f:2e:7b:84:c5:20:a3:31:53:1e:b4:ea:12:f1:
5c:da:08:33:57:f1:20:68:fe:b4:a0:c4:54:ec:9f:1c:80:00:
df:9a:0d:e0:a6:f0:a9:a9:d2:3b:27:f2:ac:56:29:36:75:66:
6b:7c:64:21:39:7a:bb:b9:5a:0f:47:65:9e:17:fd:07:f3:cf:
c9:02:c2:67:8f:5a:d0:26:a6:44:86:a9:b3:95:8d:76:f5:f5:
76:f9:ad:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:19:13 2025 by rpki-client