Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e39382e302f32342d3332203d3e20313336373837.roa
File: 3139342e3233332e39382e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: vS8SEwkTG6OsWo4PwztGitHWffZpsQETwmoWcos+Qhw=
Subject key identifier: FC:F4:2E:74:EE:5E:D4:D7:EC:24:33:46:61:A4:E3:06:92:1E:C9:4E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3E4DF1941B583F8D377B43CF361270B54CD1E477
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e39382e302f32342d3332203d3e20313336373837.roa
Signing time: Mon 27 Jan 2025 09:45:27 +0000
ROA not before: Mon 27 Jan 2025 09:40:27 +0000
ROA not after: Mon 26 Jan 2026 09:45:27 +0000
asID: 136787
IP address blocks: 194.233.98.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:4d:f1:94:1b:58:3f:8d:37:7b:43:cf:36:12:70:b5:4c:d1:e4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:27 2025 GMT
Not After : Jan 26 09:45:27 2026 GMT
Subject: CN=FCF42E74EE5ED4D7EC24334661A4E306921EC94E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5d:68:a2:a6:1a:d4:9c:27:22:9f:76:84:af:
78:a0:d0:84:24:5b:4d:33:d8:3d:54:ec:92:f2:c7:
a8:a2:da:44:1b:98:10:4b:24:be:fc:16:bf:fa:32:
79:b1:af:f5:ab:9a:a5:7f:f2:d2:d9:b5:df:05:46:
64:48:60:30:4a:43:f0:3e:2f:fc:d8:8b:32:bf:ef:
15:d5:f8:b0:fa:57:7b:e5:7f:5e:b7:29:a3:ab:b8:
a5:c5:1c:d8:94:87:b7:e4:1c:ab:95:9e:0c:b3:8e:
53:4d:cf:a2:77:a9:9b:91:a9:5b:71:76:b3:80:d3:
78:55:ee:20:5e:09:8b:40:64:69:5b:a7:49:1b:c0:
ec:a5:52:4c:8c:2d:2d:b2:f8:5d:44:4f:e7:8e:63:
f1:91:da:d6:e8:f7:74:22:32:da:ae:81:b8:5a:97:
f7:2c:10:8c:5c:e2:54:83:5c:d2:1c:26:77:ee:15:
ba:ff:8c:79:c7:03:b5:8e:45:7f:32:7d:44:cb:6a:
d6:51:89:34:51:ba:2b:80:7b:b1:7d:c9:9f:6b:5b:
0f:3e:6c:9a:16:68:2b:7b:39:ab:83:8a:ef:46:9f:
a9:5d:14:e4:f6:cc:6a:11:11:e1:21:50:c8:80:67:
f8:a8:19:42:9f:f0:90:6c:3d:73:f8:0a:56:c4:95:
e0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F4:2E:74:EE:5E:D4:D7:EC:24:33:46:61:A4:E3:06:92:1E:C9:4E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e39382e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.98.0/24
Signature Algorithm: sha256WithRSAEncryption
72:16:a8:79:62:7d:a2:36:01:e5:ed:df:bc:c1:f1:90:cf:8f:
d0:ad:bf:83:c7:1c:9c:59:7a:79:81:f4:15:64:d3:31:60:af:
b4:c4:b5:73:64:d4:7f:58:84:3b:d7:3f:85:27:86:9e:16:e5:
7c:9f:09:d1:5f:e3:a9:76:95:3c:6b:76:a0:f5:be:12:a9:e1:
86:49:bf:ac:e4:58:c5:66:b2:7f:4d:3c:c9:01:1e:a5:1a:f7:
be:0e:d6:1b:36:12:e0:4c:f4:3d:b4:44:cc:9f:f3:07:e8:36:
b4:b7:f7:3c:de:43:73:16:8c:2d:7d:69:66:22:2f:ac:44:69:
e8:28:59:9e:78:2b:b3:7f:2c:18:02:3f:09:a7:9c:41:24:9f:
e6:ff:55:7e:c6:ca:89:d4:1b:c1:dd:86:c6:a7:f6:23:a1:00:
2d:2d:16:00:2f:04:72:50:ea:ef:2a:ff:dd:b1:b9:93:28:be:
a3:21:39:6a:c3:8b:f7:49:37:70:39:42:93:9b:ba:5f:c8:a1:
f2:96:94:d3:ba:c9:c2:46:63:0e:28:42:61:42:f3:c7:27:90:
28:b3:bc:d9:ba:4e:1f:00:25:20:1e:d3:57:f9:19:0f:5a:7d:
ab:67:bf:c4:a2:f3:0a:aa:3c:b3:63:a2:ab:dd:7d:38:c7:d3:
82:c3:35:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:48:29 2025 by rpki-client