Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3230342e302f32322d3234203d3e20323034313730.roa
File: 3139352e3137392e3230342e302f32322d3234203d3e20323034313730.roa (raw, json)
Hash identifier: lyzENdm3NlS56g9WAdn9nVZICnKyy6PX8H5z0qQFShE=
Subject key identifier: 6C:D4:C7:67:F7:DA:94:FF:CB:AB:9F:46:4E:DB:A5:64:63:86:61:0D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 66DFBE8DC659FBBCA6DA22CE033778CA734EA0C1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3230342e302f32322d3234203d3e20323034313730.roa
Signing time: Mon 27 Jan 2025 09:45:29 +0000
ROA not before: Mon 27 Jan 2025 09:40:29 +0000
ROA not after: Mon 26 Jan 2026 09:45:29 +0000
asID: 204170
IP address blocks: 195.179.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:df:be:8d:c6:59:fb:bc:a6:da:22:ce:03:37:78:ca:73:4e:a0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:29 2025 GMT
Not After : Jan 26 09:45:29 2026 GMT
Subject: CN=6CD4C767F7DA94FFCBAB9F464EDBA5646386610D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:da:62:15:4b:64:a6:45:c0:14:88:5a:b1:e1:
f1:68:2e:80:d3:aa:00:fe:9d:cb:02:79:ef:c3:37:
72:10:27:af:8f:33:ad:dd:66:5e:6c:f9:b4:f0:37:
30:4a:6c:b5:4b:96:20:0b:34:6e:88:7c:bc:39:75:
28:ab:89:89:85:ea:f6:9a:0d:44:c5:84:ef:9b:7e:
36:f6:67:80:02:fa:e9:90:0a:f1:62:1a:93:aa:b7:
3c:18:f6:59:7c:c6:60:02:9a:d4:dc:eb:de:03:94:
16:ca:de:9e:b5:81:58:16:c6:8d:33:36:0d:f2:3c:
02:b5:40:75:71:1e:c6:03:82:db:00:1e:6f:c1:66:
50:fc:72:6e:39:be:6c:a7:3b:eb:0a:68:f8:dd:17:
b5:cb:79:01:d1:0a:21:75:8c:e9:d2:5b:fd:1a:0a:
c5:69:20:cf:47:1d:e4:24:77:ce:e8:80:eb:5f:78:
24:ea:f4:a0:cf:c8:97:94:61:73:5f:1e:65:62:08:
01:e4:e1:3f:d0:69:b4:63:bb:5e:b1:fa:71:5a:8f:
78:2c:ed:ac:ea:dc:8f:b8:5e:b2:d6:63:d4:9a:36:
40:bd:da:92:02:17:fc:1d:22:8e:45:40:59:96:ee:
86:d4:4c:fb:32:2a:d8:4b:67:aa:e2:b2:31:f7:0f:
00:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D4:C7:67:F7:DA:94:FF:CB:AB:9F:46:4E:DB:A5:64:63:86:61:0D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3230342e302f32322d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.179.204.0/22
Signature Algorithm: sha256WithRSAEncryption
90:2a:2f:28:2e:12:a5:b3:cf:2f:46:18:3e:e5:79:4f:a4:58:
2d:44:ab:b0:f8:be:05:66:b2:17:41:3d:8b:ea:fe:53:0b:f4:
f4:a8:65:c5:cb:e5:8e:c4:58:88:64:73:bc:b6:9a:99:ad:23:
6e:e3:ab:a9:f1:9f:1b:54:1a:bb:a8:b5:11:95:d7:55:dd:66:
ba:52:b0:75:d9:da:8f:16:43:cf:cb:26:0e:69:3d:10:f0:f5:
e1:cc:74:0e:54:fa:0f:49:b7:3c:60:8f:50:24:32:98:9d:23:
ec:e5:56:b6:98:5f:19:da:ca:52:cb:12:f4:26:01:79:4e:e9:
b2:c5:fd:bb:8b:9d:35:52:27:8e:db:c2:95:1a:75:91:51:bf:
37:f5:54:dd:3c:1a:a1:ad:3c:7c:9a:67:69:c6:f7:cf:46:39:
81:d3:0b:0e:85:72:8a:4c:1b:8d:c1:3a:aa:a0:50:9d:5d:a1:
11:15:68:17:1a:b7:ea:e9:a8:06:79:80:e3:07:6a:08:f9:cc:
14:fe:68:cc:66:89:bf:56:ab:2f:24:af:21:ad:ac:46:1d:27:
66:31:ea:7c:91:a6:59:cd:a0:d1:6f:b9:ae:5e:8c:9e:fa:d6:
98:a0:a9:4a:ba:72:6e:13:21:9d:a5:dc:6c:fc:e9:13:86:f1:
42:40:99:1e
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUZt++jcZZ+7ym2iLOAzd4ynNOoMEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMjcwOTQwMjlaFw0yNjAxMjYwOTQ1MjlaMDMxMTAvBgNV
BAMTKDZDRDRDNzY3RjdEQTk0RkZDQkFCOUY0NjRFREJBNTY0NjM4NjYxMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ2mIVS2SmRcAUiFqx4fFoLoDT
qgD+ncsCee/DN3IQJ6+PM63dZl5s+bTwNzBKbLVLliALNG6IfLw5dSiriYmF6vaa
DUTFhO+bfjb2Z4AC+umQCvFiGpOqtzwY9ll8xmACmtTc694DlBbK3p61gVgWxo0z
Ng3yPAK1QHVxHsYDgtsAHm/BZlD8cm45vmynO+sKaPjdF7XLeQHRCiF1jOnSW/0a
CsVpIM9HHeQkd87ogOtfeCTq9KDPyJeUYXNfHmViCAHk4T/QabRju16x+nFaj3gs
7azq3I+4XrLWY9SaNkC92pICF/wdIo5FQFmW7obUTPsyKthLZ6risjH3DwCnAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUbNTHZ/falP/Lq59GTtulZGOGYQ0wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM1MmUzMTM3MzkyZTMy
MzAzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDMxMzczMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAsOzzDANBgkqhkiG9w0BAQsFAAOCAQEAkCovKC4SpbPPL0YYPuV5T6RYLUSr
sPi+BWayF0E9i+r+Uwv09KhlxcvljsRYiGRzvLaama0jbuOrqfGfG1Qau6i1EZXX
Vd1mulKwddnajxZDz8smDmk9EPD14cx0DlT6D0m3PGCPUCQymJ0j7OVWtphfGdrK
UssS9CYBeU7pssX9u4udNVInjtvClRp1kVG/N/VU3Twaoa08fJpnacb3z0Y5gdML
DoVyikwbjcE6qqBQnV2hERVoFxq36umoBnmA4wdqCPnMFP5ozGaJv1arLySvIa2s
Rh0nZjHqfJGmWc2g0W+5rl6MnvrWmKCpSrpybhMhnaXcbPzpE4bxQkCZHg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:40:39 2025 by rpki-client