Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3139332e302f32342d3234203d3e203437353833.roa
File: 3139352e3137392e3139332e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: HI/l9W6oUASlAf4k+wcu7rydMpiarqef5OcPYDpJCH8=
Subject key identifier: 3C:31:45:7B:E9:74:D1:FC:89:23:77:65:3C:3A:C7:3D:78:D2:4C:E0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2B2C2454093DF3828EAC93D076A886832985D639
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3139332e302f32342d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:45:09 +0000
ROA not before: Mon 27 Jan 2025 09:40:09 +0000
ROA not after: Mon 26 Jan 2026 09:45:09 +0000
asID: 47583
IP address blocks: 195.179.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:2c:24:54:09:3d:f3:82:8e:ac:93:d0:76:a8:86:83:29:85:d6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:09 2025 GMT
Not After : Jan 26 09:45:09 2026 GMT
Subject: CN=3C31457BE974D1FC892377653C3AC73D78D24CE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:13:4f:dc:92:75:5d:f7:a2:de:60:b2:87:bc:
53:fa:7a:a7:f4:7f:af:c0:33:3b:e1:f5:eb:9a:86:
d0:26:8c:62:e1:bf:1e:7a:8a:92:6f:29:ab:7a:e9:
e5:b0:5d:1a:55:ad:ef:a7:33:85:0d:b9:35:de:85:
bf:ca:c4:78:7f:54:8d:28:12:25:6c:f1:bd:4f:37:
05:17:da:cb:6a:fc:b3:29:a4:6c:7e:27:87:f4:99:
68:21:03:8a:54:99:79:8a:6a:23:ff:1e:22:b2:db:
f3:21:d3:10:55:6e:1f:9b:5e:3a:bf:8a:91:90:50:
9e:5f:d3:32:9e:7a:17:1f:ba:13:c8:f3:a6:08:89:
c0:d6:b7:2a:66:32:ef:74:41:39:a8:72:69:ca:c0:
38:75:5a:5b:db:9c:c3:b5:32:97:1b:f1:e5:b4:61:
3b:55:28:21:ab:47:dc:ec:6c:bf:84:fc:88:3b:33:
0b:1e:c0:f2:04:6f:f5:f9:8c:d8:00:cc:9f:db:fc:
c2:e1:c3:d5:2a:2f:fd:df:1a:14:ea:ed:2a:95:a9:
77:6f:70:7c:65:dd:85:3c:69:72:80:f4:20:e0:ab:
75:ef:b3:14:dc:bd:ff:e5:f4:4c:d6:fc:38:2e:0c:
f4:5b:f3:c3:e8:6d:ce:10:c4:3b:b4:90:b5:c8:5c:
54:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:31:45:7B:E9:74:D1:FC:89:23:77:65:3C:3A:C7:3D:78:D2:4C:E0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3139332e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.179.193.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:03:27:11:60:c6:c1:99:19:65:2b:78:fe:a4:7b:16:1b:fb:
e1:48:49:0d:59:c3:74:7d:66:eb:6a:2c:0d:ec:6d:b2:e9:f5:
34:fd:86:7c:9a:f4:c8:8f:61:20:50:73:2f:73:5b:b9:65:92:
5a:bc:47:a1:35:28:e5:18:75:d3:fa:2f:52:d6:89:42:08:20:
69:75:eb:3d:82:b3:bc:37:35:8b:78:37:70:30:ac:47:74:5d:
8c:dd:e7:93:dd:54:3f:61:99:ed:bb:de:02:3d:52:35:14:12:
88:a3:c3:8a:95:f6:73:e5:30:14:5e:48:64:d0:c3:9b:17:26:
d5:02:c8:e2:f0:f1:dc:78:67:0d:be:30:df:61:68:80:71:14:
cc:2c:38:f5:fa:ba:cd:fb:b7:f3:66:75:41:38:dc:e9:25:9c:
73:a8:77:24:dd:fa:81:d4:03:83:ce:6a:52:43:d9:ca:57:3c:
25:98:f1:37:d2:06:5e:96:10:79:66:02:c0:95:50:70:86:ba:
62:9c:55:25:63:03:21:bc:46:66:35:c0:04:f0:3a:1e:a2:ab:
e7:19:0f:95:80:51:1d:db:f9:49:8a:0c:15:7c:f9:3b:35:7c:
db:59:e5:2d:05:9d:0e:b1:c5:74:ec:3e:43:93:4b:a1:39:45:
7c:d2:58:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:13:53 2025 by rpki-client