Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3231302e35382e302f32342d3234203d3e20313336373837.roa
File: 3139352e3231302e35382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 1Zi2KDS5yecvIR1xDhduUnLCnhw2L/Fpy9w1W4awGNM=
Subject key identifier: AB:08:BB:A2:87:CA:BE:33:59:AE:30:D3:BF:BD:1D:53:BD:28:C0:BC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 69D0B23A14F8621C111EB50F1DD69DAE7D3C044A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3231302e35382e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 01 Feb 2025 22:45:37 +0000
ROA not before: Sat 01 Feb 2025 22:40:37 +0000
ROA not after: Sat 31 Jan 2026 22:45:37 +0000
asID: 136787
IP address blocks: 195.210.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:d0:b2:3a:14:f8:62:1c:11:1e:b5:0f:1d:d6:9d:ae:7d:3c:04:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 1 22:40:37 2025 GMT
Not After : Jan 31 22:45:37 2026 GMT
Subject: CN=AB08BBA287CABE3359AE30D3BFBD1D53BD28C0BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:71:12:bf:df:ae:4a:97:66:e6:be:dc:3a:
0f:12:a2:22:87:08:19:ee:5e:03:48:b1:b3:09:6f:
7f:e6:d0:8f:ec:42:36:d1:79:92:89:56:bf:59:ae:
93:a0:8d:1b:a2:77:26:c4:5b:1a:e9:bf:b3:4c:83:
ca:ba:34:ec:62:1d:97:50:2c:6a:b9:c4:2f:f5:7c:
c6:2d:62:ae:b3:a8:b8:57:34:14:ad:ed:94:05:56:
2f:9e:47:31:fc:42:74:28:f6:a0:dc:47:f5:e7:c2:
6a:d4:23:89:f8:c4:67:f1:08:74:88:31:d2:b2:b8:
59:3b:b4:52:7e:2a:07:45:df:24:09:f3:4e:ad:da:
e8:af:33:cb:bc:70:f8:70:9e:e2:f0:7f:1d:2d:19:
c1:8c:61:be:b4:e2:87:99:d2:1a:85:35:bf:7e:08:
18:6a:44:5b:b3:e2:38:82:01:a9:49:23:78:03:af:
d1:94:f6:72:d5:8d:59:62:3e:52:ba:8d:7b:fe:f1:
46:75:59:5b:f2:dc:26:54:97:18:c7:e6:5e:21:72:
5f:f9:0e:60:2a:3c:36:c6:ae:f3:1a:62:0e:4e:8f:
04:94:90:45:de:24:9e:99:46:a2:67:18:38:80:05:
2c:43:45:20:84:d7:7b:e0:4d:53:50:78:55:b8:b4:
8b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:08:BB:A2:87:CA:BE:33:59:AE:30:D3:BF:BD:1D:53:BD:28:C0:BC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3231302e35382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.58.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:aa:52:3d:d4:83:62:2e:d7:27:4f:9a:08:14:52:df:84:15:
a8:50:73:26:7e:46:73:06:6b:23:d6:02:7d:55:1a:25:4a:7a:
57:3e:b3:a7:2c:4f:5f:c2:d6:ca:bd:71:71:82:63:0f:28:bb:
1c:58:ae:a9:b6:83:78:53:04:7b:22:70:e0:95:46:bd:a7:de:
70:7e:1f:4c:96:12:fc:a3:eb:20:49:c8:6c:87:fe:91:48:4c:
1e:b6:92:18:f4:87:1c:1b:e6:ab:53:d6:48:26:fb:59:ab:5f:
a9:8a:61:b2:85:f6:66:96:44:5d:0f:b9:24:f9:03:88:5e:08:
2b:d4:c7:b0:8f:34:45:4a:97:38:7d:b4:0c:36:bd:11:7e:71:
7a:f4:c3:57:d4:a3:06:5b:54:a6:81:91:f2:f7:f2:09:67:e2:
fa:2a:ae:56:a9:86:c5:87:ca:b4:6c:12:96:11:b8:bd:cc:b7:
d0:3f:b4:e1:aa:28:45:f3:2c:d4:18:4d:54:c1:bf:89:14:a4:
01:53:f5:7c:9c:53:0b:29:d2:f2:08:f9:5e:50:d9:a1:d6:69:
9a:fd:a1:81:ac:49:a2:43:78:d7:d3:0f:1e:d5:b3:ca:7a:b0:
1a:36:6a:54:52:47:34:1b:56:fe:7c:2f:d3:6c:f4:39:35:b3:
83:3e:ad:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:31:38 2025 by rpki-client