Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39302e3132332e302f32342d3234203d3e20313336373837.roa
File: 3231322e39302e3132332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: U9MY4Pa67oKvcRoWDf9Mb/gafWn+wHGzbKE2SX+qhAw=
Subject key identifier: E4:05:B9:E9:B0:3D:8B:61:48:A2:13:38:6F:87:00:5D:67:0F:F9:06
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1959B310086BBE403B979BADC67D4EA360E9C541
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39302e3132332e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 15 Dec 2024 18:44:29 +0000
ROA not before: Sun 15 Dec 2024 18:39:29 +0000
ROA not after: Sun 14 Dec 2025 18:44:29 +0000
asID: 136787
IP address blocks: 212.90.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:59:b3:10:08:6b:be:40:3b:97:9b:ad:c6:7d:4e:a3:60:e9:c5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 15 18:39:29 2024 GMT
Not After : Dec 14 18:44:29 2025 GMT
Subject: CN=E405B9E9B03D8B6148A213386F87005D670FF906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:f4:f1:5e:e2:10:63:eb:cf:6c:ec:4c:4c:
59:dd:b7:1c:42:e8:32:1a:4f:e9:5a:16:26:a7:4d:
44:71:32:45:25:0e:b1:70:49:8f:6d:a9:18:75:2f:
a4:74:7d:ed:69:94:9c:24:b6:74:d7:43:f7:77:1a:
c3:b7:e6:e5:e9:7e:63:13:6a:13:0c:5f:3d:6b:00:
ad:d2:76:07:8f:63:e2:97:8f:00:58:73:ac:ef:36:
f7:44:64:70:80:6e:79:f3:be:2c:0d:e4:10:a3:e1:
13:b2:ff:b4:61:a3:2c:e2:d1:8f:b7:2f:0f:89:63:
a6:72:e7:d0:43:3b:72:72:24:d2:e8:1a:5a:82:8f:
45:4d:89:41:3d:95:ac:e8:29:4a:b6:e3:46:56:ac:
87:22:9a:54:b2:77:e8:40:0c:01:23:81:30:80:48:
78:38:d7:44:57:f1:69:32:73:e0:bd:81:ee:ec:ed:
bf:2d:51:ad:40:f6:ab:49:d5:1e:b2:e6:ef:2a:19:
2c:1c:e5:d3:5a:55:a7:87:07:d8:62:db:b3:36:1c:
ce:ce:f9:fc:a8:8d:b2:31:64:f9:aa:ea:d8:d1:32:
85:5f:79:c9:b3:66:c5:ed:75:4f:0e:f9:4e:97:21:
2f:59:ab:01:e2:ef:f5:ea:35:18:37:35:e1:4a:a2:
2f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:05:B9:E9:B0:3D:8B:61:48:A2:13:38:6F:87:00:5D:67:0F:F9:06
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39302e3132332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.90.123.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:3a:ec:1c:78:8d:e8:de:8a:d7:5a:d8:91:98:5e:16:2c:20:
17:ba:90:cd:71:bd:3d:56:40:6e:7b:c0:d7:ec:3c:f5:98:57:
fb:2e:59:a3:82:9a:7e:4b:a7:36:1b:6d:bb:d1:2f:b4:0d:9c:
ee:9e:4d:17:36:d0:ac:84:f8:dd:3c:12:78:0b:98:d3:63:75:
a4:3d:17:38:36:49:cd:79:55:e6:e3:59:7f:56:93:b0:13:7f:
d5:89:ed:79:20:53:49:5a:ec:6d:66:cc:eb:92:87:71:92:6a:
8e:0a:37:73:7b:80:c6:ff:b5:d0:e9:07:0f:f8:a5:de:eb:14:
d9:a4:37:50:bc:99:3b:3c:b2:09:3e:aa:8f:66:1f:e6:96:85:
91:53:37:c3:55:d9:51:f0:99:ac:0a:99:70:88:bc:33:8c:01:
b0:b2:59:47:18:ac:19:83:1e:e0:67:d0:bc:4e:5f:e1:b7:b2:
9e:57:6e:97:da:0f:19:cd:95:c2:08:c9:39:c8:c7:7b:7a:da:
13:6c:20:d9:46:12:44:1e:fe:e2:8b:4f:53:8a:50:dc:69:bf:
df:6f:f6:95:45:8e:fa:4a:71:30:e7:68:60:3a:27:10:94:bd:
ed:ff:62:93:54:d0:41:17:d6:99:7e:3c:df:c8:a2:ca:bc:71:
f2:38:29:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:14:14 2025 by rpki-client