Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e3130382e302f32322d3234203d3e20323034313730.roa
File: 3139342e3233332e3130382e302f32322d3234203d3e20323034313730.roa (raw, json)
Hash identifier: NUVrMFoQfHn7phRHpFIA/hjxX2EbnJbdbhqcp6kKaNE=
Subject key identifier: 16:CE:95:EF:53:62:12:7F:38:53:B8:CA:E2:9D:EF:79:16:66:19:5B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 46C46620A9FB90D798B6061E48FDCB90D50B6EFC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e3130382e302f32322d3234203d3e20323034313730.roa
Signing time: Mon 27 Jan 2025 09:45:10 +0000
ROA not before: Mon 27 Jan 2025 09:40:10 +0000
ROA not after: Mon 26 Jan 2026 09:45:10 +0000
asID: 204170
IP address blocks: 194.233.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:c4:66:20:a9:fb:90:d7:98:b6:06:1e:48:fd:cb:90:d5:0b:6e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:10 2025 GMT
Not After : Jan 26 09:45:10 2026 GMT
Subject: CN=16CE95EF5362127F3853B8CAE29DEF791666195B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7b:e8:c1:82:fd:23:23:1c:1b:2c:d8:80:76:
db:84:9e:20:81:ce:96:34:90:42:ca:92:3e:65:11:
b3:d7:77:00:43:6c:6d:3f:08:df:f3:9f:ea:65:7b:
7a:e7:2b:85:b7:dc:31:9d:de:31:4d:6c:5a:dc:6b:
4b:e9:0f:a7:58:1d:40:ac:08:46:c4:2c:33:7f:52:
fa:b2:2a:5c:a1:10:58:2c:a9:f2:ba:ff:e5:d4:0b:
5c:dd:c2:a5:4a:82:43:cc:3a:9f:3c:57:aa:81:4b:
34:ac:85:21:f9:da:90:a6:91:dd:36:2c:85:31:a1:
85:70:87:26:b6:de:ac:75:66:ac:d3:6c:e6:f2:c4:
6f:44:d3:46:07:da:f6:09:4a:f6:5b:81:80:fa:ce:
58:ae:af:95:3c:0e:3c:f1:66:9a:07:2b:4f:a2:32:
aa:01:cc:8d:03:77:32:43:5b:56:55:99:2f:21:f5:
cd:0a:90:46:9b:0c:4c:83:eb:a3:d6:ab:eb:c4:cc:
78:40:34:38:66:a3:63:ec:7b:b8:af:f7:e4:56:f2:
05:5a:ba:52:53:d7:3c:2c:ab:33:5f:e8:7d:83:12:
e1:a3:0e:19:4d:70:0a:aa:38:da:12:22:68:5f:b1:
aa:ed:b6:08:1d:15:c5:be:d6:ab:d7:5a:95:fc:71:
9d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CE:95:EF:53:62:12:7F:38:53:B8:CA:E2:9D:EF:79:16:66:19:5B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e3130382e302f32322d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.108.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:4a:17:2c:57:b1:e7:47:8c:40:b9:02:94:da:a2:c1:09:04:
11:cd:77:88:e0:f1:92:82:80:9c:55:ed:90:43:b7:13:1f:77:
51:ad:b8:43:a2:90:9d:09:4c:ad:34:c9:9a:e1:c3:4a:b4:4b:
82:bf:ba:a1:36:63:6c:a6:18:55:21:05:17:6c:ca:54:63:92:
08:7b:ef:1c:c2:1e:bf:e3:9f:ee:b0:9e:44:28:77:9f:20:7e:
f2:a4:52:1a:c3:b2:2e:5f:91:bb:31:c4:65:a7:89:8a:05:32:
9e:61:14:0e:7b:8f:09:db:dc:aa:3f:05:cc:85:79:2a:2e:58:
a2:8e:de:25:42:ff:1c:15:6b:f5:b3:cc:cd:65:81:52:4c:12:
85:b7:95:37:fe:eb:93:23:29:47:e0:86:3c:86:7a:66:2c:1d:
6e:39:16:6a:93:3b:fd:08:31:6b:a3:65:4d:f5:fd:00:92:36:
52:1f:55:2d:fc:4e:2d:0b:86:0b:8d:c0:61:68:16:07:b3:2c:
a0:1c:19:8f:50:3b:04:6d:23:b9:98:29:c0:d8:a3:e9:96:6b:
d3:ee:50:ea:27:aa:67:72:a5:2c:c6:ee:26:dc:58:dd:2e:65:
11:16:87:fa:75:1d:28:e9:23:90:c6:38:b3:45:a1:06:00:4f:
ef:b1:a5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:18:36 2025 by rpki-client