Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3233362e302f32332d3234203d3e203437353833.roa
File: 3139352e3137392e3233362e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: riq6rvQOvdaKbZoaDIe1jEc6Cl54bGViHlXSIVQSnzo=
Subject key identifier: F5:72:02:2F:18:CA:86:69:48:EA:EA:F0:36:C7:48:93:8B:7D:5B:D5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6DDE358D1AE5AB60F05C9854F5BE50F9FA74F5DD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3233362e302f32332d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:45:12 +0000
ROA not before: Mon 27 Jan 2025 09:40:12 +0000
ROA not after: Mon 26 Jan 2026 09:45:12 +0000
asID: 47583
IP address blocks: 195.179.236.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:de:35:8d:1a:e5:ab:60:f0:5c:98:54:f5:be:50:f9:fa:74:f5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:12 2025 GMT
Not After : Jan 26 09:45:12 2026 GMT
Subject: CN=F572022F18CA866948EAEAF036C748938B7D5BD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:58:f4:22:53:76:97:20:06:96:a4:5a:08:
1c:9c:83:ae:11:82:a6:25:31:75:1d:a7:91:f9:3f:
5f:cb:c3:0a:33:ee:49:d9:58:c3:23:a1:79:08:cb:
c2:02:3f:d1:bf:fc:59:e1:f3:50:bc:5a:76:f1:7f:
5d:86:b1:2c:73:d8:5e:91:d1:0a:99:b8:cb:ce:62:
b1:9e:81:5c:03:2e:6d:af:03:4b:f2:d4:a7:91:ab:
e6:ea:b4:ae:a9:6c:bb:ff:82:8b:7b:76:89:0b:d7:
eb:a8:0e:72:b9:77:4b:09:62:72:57:40:46:10:1c:
04:e3:f8:b1:5b:fe:83:55:f7:45:0f:07:c6:61:15:
a8:e0:d7:78:01:56:41:ef:94:f9:19:75:6d:bf:64:
06:fb:20:cd:aa:92:9d:7a:89:d4:79:8e:1a:49:57:
62:a6:08:76:ed:08:f2:89:2c:c3:59:c2:45:e9:fa:
8c:2a:8d:dc:b3:5e:91:b1:29:5a:90:0c:01:fc:f3:
e5:9b:ec:e4:a1:3e:ed:9d:e7:02:58:19:50:32:ea:
a2:50:30:7a:4b:b4:ec:05:66:db:1f:1c:93:7a:d7:
d1:21:fd:56:9d:cb:db:20:98:89:79:d1:ed:6c:29:
01:c4:3f:02:c9:9e:9e:3f:a6:0c:31:26:80:1c:2a:
5c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:72:02:2F:18:CA:86:69:48:EA:EA:F0:36:C7:48:93:8B:7D:5B:D5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3233362e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.179.236.0/23
Signature Algorithm: sha256WithRSAEncryption
56:2f:e8:85:5c:05:f7:3d:d6:0a:31:da:36:1d:d8:b2:e5:7f:
19:21:c5:8b:7c:a4:ac:62:59:a0:f8:97:69:9b:20:bb:f0:9c:
c4:ab:3d:b8:a1:d5:4f:ff:26:37:5c:e5:76:b5:46:87:e2:9d:
56:e4:8e:d7:de:7c:51:d0:31:81:dc:16:ae:6b:8d:ae:b9:dd:
e5:0e:d8:b6:f5:81:93:27:a8:ba:38:f9:73:93:2e:29:f8:40:
6a:c4:7a:c0:e2:18:de:00:f9:87:43:ea:f3:7b:17:66:7d:3d:
ea:89:af:2c:83:51:86:af:0a:0a:f5:e2:b0:dc:f5:1c:3c:fe:
18:61:14:12:1e:a0:d1:55:b0:b8:53:ca:9a:11:c2:f0:5a:9b:
2b:ef:8e:90:0c:9d:cf:29:11:00:32:74:8f:ec:9b:54:ad:bb:
f2:1c:0e:9a:c6:b0:ba:3f:7b:59:6d:c9:a6:1e:9b:d9:98:69:
f9:64:ea:7e:e5:65:7c:3b:36:10:e0:ef:dc:fd:42:94:d0:47:
58:c7:17:4e:b4:ae:5a:55:64:aa:ca:22:f6:08:c1:2f:9f:19:
93:e5:ae:91:64:c8:9a:93:ac:78:f8:c2:45:a9:dc:16:e3:15:
4a:35:1e:23:a6:80:24:df:1f:eb:77:ea:e0:47:4b:e9:a0:92:
f2:a8:04:e0
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUbd41jRrlq2DwXJhU9b5Q+fp09d0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMjcwOTQwMTJaFw0yNjAxMjYwOTQ1MTJaMDMxMTAvBgNV
BAMTKEY1NzIwMjJGMThDQTg2Njk0OEVBRUFGMDM2Qzc0ODkzOEI3RDVCRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRNFj0IlN2lyAGlqRaCBycg64R
gqYlMXUdp5H5P1/Lwwoz7knZWMMjoXkIy8ICP9G//Fnh81C8Wnbxf12GsSxz2F6R
0QqZuMvOYrGegVwDLm2vA0vy1KeRq+bqtK6pbLv/got7dokL1+uoDnK5d0sJYnJX
QEYQHATj+LFb/oNV90UPB8ZhFajg13gBVkHvlPkZdW2/ZAb7IM2qkp16idR5jhpJ
V2KmCHbtCPKJLMNZwkXp+owqjdyzXpGxKVqQDAH88+Wb7OShPu2d5wJYGVAy6qJQ
MHpLtOwFZtsfHJN619Eh/Vady9sgmIl50e1sKQHEPwLJnp4/pgwxJoAcKlwfAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU9XICLxjKhmlI6urwNsdIk4t9W9UwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM1MmUzMTM3MzkyZTMy
MzMzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAHDs+wwDQYJKoZIhvcNAQELBQADggEBAFYv6IVcBfc91gox2jYd2LLlfxkhxYt8
pKxiWaD4l2mbILvwnMSrPbih1U//Jjdc5Xa1RofinVbkjtfefFHQMYHcFq5rja65
3eUO2Lb1gZMnqLo4+XOTLin4QGrEesDiGN4A+YdD6vN7F2Z9PeqJryyDUYavCgr1
4rDc9Rw8/hhhFBIeoNFVsLhTypoRwvBamyvvjpAMnc8pEQAydI/sm1Stu/IcDprG
sLo/e1ltyaYem9mYaflk6n7lZXw7NhDg79z9QpTQR1jHF060rlpVZKrKIvYIwS+f
GZPlrpFkyJqTrHj4wkWp3BbjFUo1HiOmgCTfH+t36uBHS+mgkvKoBOA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:06:49 2025 by rpki-client