Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234302e302f32342d3234203d3e20323136313531.roa
File: 3139352e3234322e3234302e302f32342d3234203d3e20323136313531.roa (raw, json)
Hash identifier: qgedimZBoNBJ1lMMUzs5TGU4e2lYr/hYIcitkyFeXLk=
Subject key identifier: DB:8C:23:EF:F3:67:82:B9:CF:47:2C:1C:AE:1C:5C:04:E6:CC:03:11
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5F30FE16321EF56ACD9908E1B84CA8B5E4B5669C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234302e302f32342d3234203d3e20323136313531.roa
Signing time: Tue 04 Feb 2025 08:34:01 +0000
ROA not before: Tue 04 Feb 2025 08:29:01 +0000
ROA not after: Tue 03 Feb 2026 08:34:01 +0000
asID: 216151
IP address blocks: 195.242.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:30:fe:16:32:1e:f5:6a:cd:99:08:e1:b8:4c:a8:b5:e4:b5:66:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 4 08:29:01 2025 GMT
Not After : Feb 3 08:34:01 2026 GMT
Subject: CN=DB8C23EFF36782B9CF472C1CAE1C5C04E6CC0311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1e:4f:67:fa:49:74:d1:1e:2a:58:ff:b5:34:
84:95:05:c9:50:3d:0e:93:4e:a2:d5:8f:5d:d4:62:
c8:9c:de:4a:89:6c:d4:d7:6f:af:c1:af:1d:78:22:
8c:ca:d1:bb:bc:7d:64:3b:91:41:be:8f:12:06:7c:
28:79:83:a2:cb:16:08:4a:31:5f:a2:34:6c:64:69:
d5:ac:f9:f0:8f:9a:58:05:38:6b:ab:12:a4:ae:96:
be:7a:42:36:71:59:05:b9:93:3f:4c:47:22:f5:c0:
2e:78:1a:4a:5a:e1:3c:07:d2:6a:f5:57:b8:34:9d:
cc:e3:c1:49:ef:16:3d:f2:05:d3:26:22:48:6e:7f:
c6:ba:fb:92:32:8b:3e:25:fa:69:47:88:2f:23:78:
14:1b:ea:9a:f6:68:cf:dd:0d:49:52:f2:e9:e0:57:
05:0e:0f:6e:19:bc:b7:1d:97:52:03:ee:9d:27:19:
33:16:e6:64:4b:ca:d4:87:a5:07:68:e3:03:60:72:
ce:4e:b8:75:d3:d8:8b:0e:d0:8f:93:7a:4b:56:9e:
08:82:43:79:4d:88:a7:6d:b1:53:34:f8:02:d9:49:
92:5d:69:29:ca:8b:06:fe:26:b1:1d:f1:a9:02:40:
54:c3:67:93:fd:37:c6:39:48:a2:fb:16:b8:4c:ca:
b4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8C:23:EF:F3:67:82:B9:CF:47:2C:1C:AE:1C:5C:04:E6:CC:03:11
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234302e302f32342d3234203d3e20323136313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.240.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:70:7e:17:96:45:12:1a:7c:50:eb:e0:8e:6f:fe:33:f7:52:
75:36:81:2c:b3:fd:98:00:05:37:d2:67:79:fe:0c:5a:cb:0f:
0f:8a:ec:54:80:e6:88:fa:86:9d:92:16:6d:aa:a9:20:62:16:
c1:b8:47:10:99:23:be:bb:6d:78:1c:5a:7d:47:6f:09:14:50:
7a:0b:62:33:cd:16:90:16:5f:c3:95:1e:47:74:f0:c8:63:57:
10:d5:95:ff:d3:d8:7d:ed:56:3a:c6:a1:fe:33:51:d3:23:dd:
31:6b:01:29:2e:fb:9c:a9:e6:83:d2:1f:a7:b5:87:eb:c6:5d:
0d:97:4e:fa:b1:23:44:86:c7:ef:70:f6:59:11:a9:1e:24:cf:
e9:7b:dc:7b:bf:ba:dd:bb:dd:7f:fd:95:dc:0d:54:0f:25:48:
9c:d3:61:b2:df:90:56:6f:8c:04:91:d2:a1:14:77:4b:73:af:
40:a6:b3:4d:dd:4a:e5:e9:5a:b3:45:c7:be:b2:a4:f8:fa:88:
c5:d4:e5:f3:4a:3d:c5:27:32:01:3c:a6:00:5e:9f:11:23:e8:
31:ed:11:c2:e0:84:12:dc:ef:11:ad:78:94:97:49:b3:54:ea:
8a:ab:03:76:e1:79:34:93:97:03:5a:a4:06:da:0a:9d:7e:ef:
14:7c:35:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:48 2025 by rpki-client