Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38302e302f32342d3234203d3e20313437303439.roa
File: 3231322e31352e38302e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: 9tkmIU7rgMke+oKNoAWe+IaHSFk3KVSI648SBKOlvs4=
Subject key identifier: 3E:13:DB:1E:8B:29:95:F8:54:C7:BC:77:50:FC:D1:34:1A:71:B3:DC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 63C0321F0FC2D2ED9B3010AAB0F600FC4B829ACF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38302e302f32342d3234203d3e20313437303439.roa
Signing time: Thu 16 Jan 2025 10:03:24 +0000
ROA not before: Thu 16 Jan 2025 09:58:24 +0000
ROA not after: Thu 15 Jan 2026 10:03:24 +0000
asID: 147049
IP address blocks: 212.15.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:c0:32:1f:0f:c2:d2:ed:9b:30:10:aa:b0:f6:00:fc:4b:82:9a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 16 09:58:24 2025 GMT
Not After : Jan 15 10:03:24 2026 GMT
Subject: CN=3E13DB1E8B2995F854C7BC7750FCD1341A71B3DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:98:e6:1a:84:27:2f:3c:8d:7f:03:98:4a:
4c:41:06:df:a5:68:3a:04:06:53:63:1e:27:7e:a4:
d5:89:2f:cb:40:ed:e7:7e:3a:06:85:51:1b:92:ce:
15:da:5c:4b:73:88:73:4a:51:ed:0d:63:77:8b:0b:
d9:d2:28:6a:61:e3:2b:73:61:91:1d:a0:b3:26:15:
55:80:ee:f1:b7:ae:33:d1:5c:b5:d5:e8:23:4d:2b:
45:77:48:46:4b:69:b9:9b:00:5d:8f:7f:f5:96:43:
b1:6e:1f:91:f7:6b:1b:63:0c:f3:94:fd:00:5c:d1:
7b:41:f9:90:9f:ba:8e:ae:42:88:96:f6:66:01:6b:
1d:02:12:94:e9:d1:1d:d7:ab:71:46:30:30:09:2c:
66:60:a3:dd:d8:37:a5:4c:e4:02:d1:6f:89:ce:33:
1c:df:40:42:94:9d:7f:a5:b7:03:49:0a:26:51:63:
14:31:db:57:34:41:2a:a2:bf:cd:0c:34:75:20:92:
8f:ff:0e:7e:ed:09:d8:8b:29:6e:e8:19:90:a2:68:
2a:01:ce:b3:78:46:0f:47:9d:29:ee:be:63:59:f7:
29:ba:ce:dc:c5:5b:4a:46:a2:ff:7c:c1:24:3f:5e:
4a:85:84:71:73:16:a6:ef:be:b8:21:10:f8:ce:d1:
15:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:13:DB:1E:8B:29:95:F8:54:C7:BC:77:50:FC:D1:34:1A:71:B3:DC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38302e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.80.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:0f:7b:29:65:7b:81:a3:62:74:f3:8c:21:f3:46:f2:10:02:
73:b0:08:a8:3e:e2:5a:09:97:a8:b4:fe:88:c6:d0:69:57:5f:
e3:46:1e:07:8d:fd:00:7f:89:64:de:2a:5d:e6:ee:b8:23:c2:
56:e5:1c:4e:74:0e:fd:96:2b:ff:cd:6a:1b:36:27:f1:aa:87:
cc:cc:fe:cc:b2:39:bd:42:60:08:81:33:26:f0:25:3a:d5:80:
69:37:f6:c8:7b:a2:3b:41:55:eb:8b:72:9c:5d:a2:59:53:af:
8e:db:2e:9e:64:0e:31:2a:80:f3:f3:07:dc:c6:9d:b4:16:74:
9c:98:2d:b8:2a:0d:d7:67:ed:72:43:ba:54:0d:dc:84:0c:8a:
11:fa:5a:73:d0:31:b7:55:7b:a5:42:a8:f5:f6:b3:e1:b9:d0:
1c:a9:c9:38:bb:d7:84:fa:70:13:90:1a:b9:a4:b4:78:56:ef:
9b:23:3d:df:8d:31:1a:6c:2f:28:c4:f8:64:0b:11:74:17:cb:
ac:2d:18:aa:db:a1:a2:d1:85:0d:9b:b8:96:89:ce:ff:6c:61:
33:80:97:18:a2:81:e2:6c:a3:c7:48:14:72:9a:40:15:90:5f:
ba:93:a0:6b:06:bb:21:da:df:0d:55:48:94:65:51:6d:55:7a:
dd:b8:00:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:29:48 2025 by rpki-client