Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3139322e302f32342d3234203d3e20313336373837.roa
File: 3139352e3137392e3139322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: zd3zQtMVt2OA6iYc5Y3V8hGpKwewo3v2YTJV1TGM77o=
Subject key identifier: C0:F4:4B:94:5D:63:BB:99:68:5F:0A:D8:5A:81:1D:6A:2F:4C:8E:FD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2F6C4977D134AA005A7DBE227DB291E559CAEDAC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3139322e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 27 Jan 2025 09:45:21 +0000
ROA not before: Mon 27 Jan 2025 09:40:21 +0000
ROA not after: Mon 26 Jan 2026 09:45:21 +0000
asID: 136787
IP address blocks: 195.179.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:6c:49:77:d1:34:aa:00:5a:7d:be:22:7d:b2:91:e5:59:ca:ed:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:21 2025 GMT
Not After : Jan 26 09:45:21 2026 GMT
Subject: CN=C0F44B945D63BB99685F0AD85A811D6A2F4C8EFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:32:30:fc:f7:24:5f:b0:b3:91:6e:4d:7d:
54:73:ba:07:7f:d8:60:1b:de:1b:71:46:8d:54:86:
62:2e:27:91:d5:23:e9:80:8e:9d:79:fa:f7:1b:a7:
67:29:77:9b:f4:d6:d5:a3:1f:83:cc:f8:7e:0a:b1:
3f:d2:49:3e:5f:01:fb:3b:5f:45:63:c4:da:f5:1a:
95:e1:c7:d1:36:12:db:e5:72:66:07:ce:24:50:68:
f0:80:3c:05:0b:bf:8e:29:f4:d0:d5:77:58:57:2a:
e8:3b:85:f8:14:fe:39:8d:5e:e7:7c:56:28:b9:f4:
c8:a6:8f:a2:64:bb:ec:a1:52:12:57:b7:16:ff:81:
ce:c5:23:a9:43:20:12:cd:64:97:cb:5b:2b:9d:64:
9d:e4:35:9b:72:c0:b3:93:6d:9e:94:a5:8f:30:ad:
83:7f:84:c8:f5:00:90:3e:86:e0:92:72:05:c4:b9:
82:2d:bd:99:02:a1:dd:79:86:03:14:c4:db:cd:2a:
24:13:39:9e:fd:ff:a7:45:42:4a:a4:ea:f0:5f:64:
49:58:0c:0f:c4:ea:61:7e:ba:58:be:22:2b:5a:1f:
b8:87:26:32:20:fc:e6:9e:43:58:d8:55:8b:fc:b9:
2a:5b:9f:ab:d0:33:49:e9:78:9a:52:ab:92:19:64:
6b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F4:4B:94:5D:63:BB:99:68:5F:0A:D8:5A:81:1D:6A:2F:4C:8E:FD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3139322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.179.192.0/24
Signature Algorithm: sha256WithRSAEncryption
67:75:0d:c6:01:67:0b:28:6b:6d:d8:bb:ad:63:50:56:9c:d8:
b5:cd:b9:10:56:8f:09:1e:74:c6:c6:17:ad:2d:ae:f3:49:01:
6a:f6:1d:ac:62:39:93:81:ca:7f:32:c1:ff:b1:8d:2b:f9:e9:
35:ee:14:3b:cb:c6:02:f2:86:c7:75:c1:fa:c0:20:8b:b6:41:
ed:25:ae:2d:f3:f3:4e:6c:ac:12:1a:ca:2e:78:56:69:6d:bf:
dc:ed:22:d6:69:1b:97:29:f6:f4:97:00:bb:4c:06:99:8b:8f:
34:51:fa:30:41:fe:28:42:9a:59:a1:77:af:0c:20:6f:e7:3c:
e8:94:d0:53:9b:52:8d:5b:c7:9a:c4:0e:68:75:1a:9a:72:06:
d2:4e:41:7b:13:94:53:53:30:ae:f0:1d:22:e9:72:1c:3a:c1:
61:8b:d8:06:38:15:37:59:16:26:58:77:4c:a5:83:2d:4f:2a:
e1:3c:83:57:54:e0:f0:e0:6d:76:72:1b:64:67:47:bf:78:0e:
0a:b9:25:00:6f:78:65:5d:5b:49:8e:9b:0b:80:be:49:f5:9e:
53:51:a0:3f:e3:17:82:24:1d:9b:a3:2e:4d:40:9c:ea:5c:48:
19:c1:7b:12:b9:61:67:da:c8:4c:d9:f1:a6:b9:fd:e2:40:b7:
f0:5e:57:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:15:29 2025 by rpki-client