Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38332e302f32342d3234203d3e20313437303439.roa
File: 3231322e31352e38332e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: gn5zLGq/71DO8NrSkCXAOKzOcPwxRUeLK8sp5xUaaqA=
Subject key identifier: A7:36:0F:AD:55:94:09:02:3C:6E:B2:B8:81:24:A1:F7:5E:C4:2A:19
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6BE92E5CE62D341110E9F7FA0268067194413628
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38332e302f32342d3234203d3e20313437303439.roa
Signing time: Thu 16 Jan 2025 10:04:42 +0000
ROA not before: Thu 16 Jan 2025 09:59:42 +0000
ROA not after: Thu 15 Jan 2026 10:04:42 +0000
asID: 147049
IP address blocks: 212.15.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:e9:2e:5c:e6:2d:34:11:10:e9:f7:fa:02:68:06:71:94:41:36:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 16 09:59:42 2025 GMT
Not After : Jan 15 10:04:42 2026 GMT
Subject: CN=A7360FAD559409023C6EB2B88124A1F75EC42A19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:91:f3:7a:f3:2d:21:63:05:b5:a0:2b:21:50:
84:83:db:d9:00:c0:84:9d:59:19:e6:3c:a5:80:fa:
4a:f9:d0:51:b3:84:ca:a6:f3:bd:d5:71:4b:22:f1:
c6:33:77:70:ed:58:01:65:e1:8e:f4:23:d8:35:2a:
08:6e:f8:00:5e:13:33:62:fc:80:ca:0c:52:4f:3a:
0c:98:19:e2:44:b7:ef:df:3e:bb:a9:f4:1f:4d:ae:
00:e3:87:8c:2d:40:b9:e0:dc:cd:6b:6b:04:47:25:
b6:1f:9d:b6:45:52:81:31:d4:fd:d5:7f:a6:bb:d6:
d9:4e:33:aa:1d:01:ae:a2:6e:56:8e:89:f2:18:c9:
8f:db:32:a4:6a:7b:1c:14:3b:b9:38:40:26:91:6f:
bd:76:89:6b:7c:a6:6e:08:9d:ea:2a:78:d4:e0:79:
6e:50:4f:71:c6:cb:6d:a6:d2:b2:f8:b5:91:60:be:
30:4a:90:03:01:89:81:30:72:8e:9d:d0:35:9f:c2:
f0:16:75:f5:43:e9:ce:23:a4:8d:fb:04:41:b4:2b:
f1:12:8a:d8:2c:41:32:d9:03:53:2e:6a:ce:8c:a9:
5e:84:f7:02:b7:a6:27:98:2f:c8:04:7d:58:fa:b5:
e5:56:a5:a5:c7:97:23:7e:c4:a5:d2:07:04:7f:8a:
e7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:36:0F:AD:55:94:09:02:3C:6E:B2:B8:81:24:A1:F7:5E:C4:2A:19
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38332e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.83.0/24
Signature Algorithm: sha256WithRSAEncryption
26:c8:f3:75:0a:28:51:0d:c8:52:e3:55:2d:0c:26:4a:ae:22:
5d:a4:4d:18:80:9c:f8:cc:ac:b1:ff:6f:6d:fe:f6:f2:7c:a6:
9a:c6:90:fa:c5:11:b2:37:f2:a8:77:b3:e6:33:8a:6e:c9:ea:
22:ad:67:86:40:4e:6b:d4:cc:37:2b:ab:55:95:9c:0b:3e:7f:
9a:f5:d8:6f:7e:b1:30:01:da:74:6a:58:16:aa:85:8f:68:7d:
20:54:c8:ac:e1:1f:65:95:bb:67:f7:f2:96:0e:82:7c:cd:63:
53:ae:21:a9:92:f0:41:f9:51:43:e9:37:b1:c3:cd:20:bd:58:
58:35:8b:1b:47:b1:c7:01:1d:79:20:76:33:55:e2:6c:fc:40:
6b:64:fa:8b:77:c0:29:53:6d:8e:17:b5:8f:19:61:8c:53:25:
9b:a5:f8:a7:eb:f7:53:16:d3:68:00:24:dc:b0:37:55:77:4a:
e4:ce:e1:30:3b:00:a5:9d:33:c8:4b:b2:04:fa:38:bd:76:6e:
5b:01:ef:00:73:fb:15:f4:1f:01:9b:86:be:de:32:9b:08:4c:
87:80:50:47:dd:a8:55:33:05:f2:b4:58:85:61:a1:14:2d:c8:
2c:96:34:57:1f:34:d2:b7:c1:c9:50:76:00:fc:4d:f1:08:9a:
24:a2:ef:98
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUa+kuXOYtNBEQ6ff6AmgGcZRBNigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMTYwOTU5NDJaFw0yNjAxMTUxMDA0NDJaMDMxMTAvBgNV
BAMTKEE3MzYwRkFENTU5NDA5MDIzQzZFQjJCODgxMjRBMUY3NUVDNDJBMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2kfN68y0hYwW1oCshUISD29kA
wISdWRnmPKWA+kr50FGzhMqm873VcUsi8cYzd3DtWAFl4Y70I9g1Kghu+ABeEzNi
/IDKDFJPOgyYGeJEt+/fPrup9B9NrgDjh4wtQLng3M1rawRHJbYfnbZFUoEx1P3V
f6a71tlOM6odAa6iblaOifIYyY/bMqRqexwUO7k4QCaRb712iWt8pm4IneoqeNTg
eW5QT3HGy22m0rL4tZFgvjBKkAMBiYEwco6d0DWfwvAWdfVD6c4jpI37BEG0K/ES
itgsQTLZA1Muas6MqV6E9wK3pieYL8gEfVj6teVWpaXHlyN+xKXSBwR/iuctAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUpzYPrVWUCQI8brK4gSSh917EKhkwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzMTM1MmUzODMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDM3MzAzNDM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
1A9TMA0GCSqGSIb3DQEBCwUAA4IBAQAmyPN1CihRDchS41UtDCZKriJdpE0YgJz4
zKyx/29t/vbyfKaaxpD6xRGyN/Kod7PmM4puyeoirWeGQE5r1Mw3K6tVlZwLPn+a
9dhvfrEwAdp0algWqoWPaH0gVMis4R9llbtn9/KWDoJ8zWNTriGpkvBB+VFD6Tex
w80gvVhYNYsbR7HHAR15IHYzVeJs/EBrZPqLd8ApU22OF7WPGWGMUyWbpfin6/dT
FtNoACTcsDdVd0rkzuEwOwClnTPIS7IE+ji9dm5bAe8Ac/sV9B8Bm4a+3jKbCEyH
gFBH3ahVMwXytFiFYaEULcgsljRXHzTSt8HJUHYA/E3xCJokou+Y
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:26 2025 by rpki-client