Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e32382e32312e302f32342d3234203d3e20323031333431.roa
File: 3139352e32382e32312e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: o5ZmITapnciDTEVus/smULJMfmr/CrA1xFqyhE3WiFE=
Subject key identifier: EE:E9:C1:BF:9F:C3:68:2F:38:D3:4D:73:EC:FC:2C:4E:07:16:0E:D3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 42CCDFDFE04C8F6D52C1AC6D0C14B5799CDF1C20
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e32382e32312e302f32342d3234203d3e20323031333431.roa
Signing time: Mon 27 Jan 2025 09:45:26 +0000
ROA not before: Mon 27 Jan 2025 09:40:26 +0000
ROA not after: Mon 26 Jan 2026 09:45:26 +0000
asID: 201341
IP address blocks: 195.28.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:cc:df:df:e0:4c:8f:6d:52:c1:ac:6d:0c:14:b5:79:9c:df:1c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:26 2025 GMT
Not After : Jan 26 09:45:26 2026 GMT
Subject: CN=EEE9C1BF9FC3682F38D34D73ECFC2C4E07160ED3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1f:6e:c6:b5:46:c3:ef:8f:ac:1d:c6:99:69:
b0:03:48:ff:9e:46:ee:70:3e:95:1d:00:57:ca:aa:
5d:c9:1e:ec:ee:62:e0:12:14:6b:ef:92:e5:82:e8:
56:44:c0:ed:7f:5d:7a:49:9b:ce:79:04:5a:99:ad:
a0:aa:be:e5:c5:31:11:ff:5a:ae:c7:46:5f:63:6e:
de:2a:c7:a0:7a:96:99:8f:13:1d:9b:38:f3:19:49:
1c:c8:d4:6a:d8:b1:39:8c:85:0e:b1:e2:0d:82:ba:
f7:ec:17:e9:83:ef:54:ae:96:e4:f2:c0:f9:52:76:
7d:4b:ce:d5:be:46:04:6e:84:12:49:0f:85:73:77:
eb:c5:8a:b7:0e:1e:21:40:5f:04:68:d0:7c:0c:1c:
f1:fd:15:c1:8b:77:ed:a2:08:3f:61:66:fe:f8:b7:
ad:dc:4b:cb:aa:d1:8b:af:29:0e:d3:20:7e:34:cf:
96:a9:e4:99:10:70:9a:de:9e:d3:44:69:cb:fb:04:
5f:df:da:e6:eb:ce:2d:46:a4:15:e4:ac:c4:5c:6b:
01:1e:65:63:1e:ed:bc:cc:f5:56:26:71:fd:33:68:
85:b0:c5:3e:67:65:70:0f:74:3d:5c:83:ae:e9:73:
1a:d6:b4:3e:59:8b:3c:e7:d9:4e:b9:a0:8c:51:be:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E9:C1:BF:9F:C3:68:2F:38:D3:4D:73:EC:FC:2C:4E:07:16:0E:D3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e32382e32312e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.28.21.0/24
Signature Algorithm: sha256WithRSAEncryption
76:89:cd:4d:1f:b9:d9:df:89:f1:5e:68:b1:12:ad:02:c5:46:
01:66:d1:29:df:82:86:ed:95:88:e5:74:d0:ab:20:7c:6f:46:
35:9c:dd:7b:3d:b8:b2:04:71:b5:6c:ed:53:7d:85:58:b3:0f:
06:cc:2a:08:d7:89:65:e7:30:85:b9:11:98:e9:2f:4f:06:34:
c4:43:e0:7e:fa:68:7a:da:cc:e9:90:b3:9f:6c:82:6e:1c:fa:
c6:7f:ac:48:1c:11:77:c5:a9:15:47:24:73:00:6b:ca:b3:75:
16:a6:15:19:5b:c4:90:43:36:db:5a:e7:62:d5:f2:ea:61:37:
52:d0:76:20:d5:3c:49:ba:d2:d5:d7:c3:65:64:59:b3:a6:fe:
9d:aa:ba:72:76:c6:5b:17:ef:1f:ab:b9:f1:2f:6b:35:c8:86:
a1:f4:e9:39:3e:6a:62:a7:11:18:8a:31:da:36:9a:af:21:04:
6d:c7:42:cb:75:5e:7c:be:86:3b:b9:88:3c:68:f4:94:0b:25:
21:6b:e2:fd:79:d1:c9:80:88:c3:f6:00:d4:5b:a5:bc:be:de:
64:b7:ee:52:98:41:74:e9:eb:11:b6:67:e0:a3:2a:30:84:fe:
e0:5e:1d:79:02:15:0e:b7:04:df:b4:7b:33:ae:51:2f:bc:79:
65:42:b7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:13:45 2025 by rpki-client