Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3139362e35362e302f32312d3234203d3e203437353833.roa
File: 3231372e3139362e35362e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: IP68OubA6xwi7nc3jrSZPK4jfoAkt2CNpBL2gV7q3io=
Subject key identifier: 5F:A6:6E:16:35:00:CB:66:DC:1D:1C:3C:79:FB:80:41:08:74:AF:EE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 23E981AEF86A05731EE1F6E56AE582702BFCE272
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3139362e35362e302f32312d3234203d3e203437353833.roa
Signing time: Thu 15 May 2025 10:46:18 +0000
ROA not before: Thu 15 May 2025 10:41:18 +0000
ROA not after: Thu 14 May 2026 10:46:18 +0000
asID: 47583
IP address blocks: 217.196.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 12:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:e9:81:ae:f8:6a:05:73:1e:e1:f6:e5:6a:e5:82:70:2b:fc:e2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 15 10:41:18 2025 GMT
Not After : May 14 10:46:18 2026 GMT
Subject: CN=5FA66E163500CB66DC1D1C3C79FB80410874AFEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:73:97:eb:f5:33:ab:1e:dc:61:da:4a:41:22:
29:6b:bb:74:a1:4f:f6:01:9e:76:f7:ae:e7:dd:3c:
aa:11:f3:df:9f:c4:d8:ce:53:9d:06:fa:68:31:82:
0b:b2:b0:01:62:4e:9d:af:77:3b:df:68:8c:34:03:
8c:10:99:33:a6:bd:b0:54:d9:1e:1e:35:73:9a:d9:
6e:39:8e:2b:b0:f7:4b:76:1b:f1:0d:cd:6a:2d:19:
f1:39:40:8a:54:52:d5:6f:27:8a:ff:f6:fe:a5:be:
eb:3c:17:ce:16:76:fd:46:ed:4f:7a:26:65:d5:e5:
08:be:c0:43:06:4d:aa:e6:8d:35:4a:5e:fe:1b:79:
a8:6e:4c:6c:d9:74:aa:2c:0c:2e:82:71:a3:9c:5b:
6f:6c:2f:d6:ef:29:71:79:05:66:e3:60:77:b0:9a:
70:d5:96:8a:40:b0:0c:12:37:1f:37:56:60:87:df:
3c:7f:78:08:c9:91:32:29:96:b8:ae:d5:19:43:8d:
60:bd:51:df:62:ae:38:ea:8e:a2:32:b9:77:d3:71:
50:8e:4d:2b:c4:cb:7c:44:d1:48:40:00:0d:e1:15:
65:c1:a7:6b:f7:f3:cd:8d:ff:08:ef:95:8b:8a:d8:
22:d5:6a:79:eb:d3:22:79:1b:f1:50:a8:9a:e1:2b:
23:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A6:6E:16:35:00:CB:66:DC:1D:1C:3C:79:FB:80:41:08:74:AF:EE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3139362e35362e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.196.56.0/21
Signature Algorithm: sha256WithRSAEncryption
57:9f:e7:b6:9e:80:4f:59:dc:c4:66:b1:a4:fc:37:11:94:d8:
28:e5:94:dd:02:91:74:54:5d:75:0b:49:4e:37:cd:17:34:22:
9b:64:10:41:02:e0:3e:71:c0:7b:a7:95:cc:8b:a8:6f:76:9b:
ed:0f:e5:c1:2d:7b:e8:e6:24:c3:52:32:b2:16:ad:a8:82:20:
b2:4e:63:6a:e0:04:59:77:2d:73:db:de:0c:9e:3c:f8:7e:45:
18:9c:87:ae:5a:75:b2:dd:af:c2:7e:8a:bc:10:ca:d3:5c:a8:
80:b6:dd:72:26:70:4f:a6:d7:59:c4:87:d4:43:cf:b4:d2:e9:
e8:f0:a8:85:14:d8:7b:a8:1f:b8:fc:e7:d0:6c:33:df:34:cb:
e8:d2:20:ce:d1:af:40:96:de:b2:4b:03:8a:ec:1a:d7:2c:79:
0a:90:59:7a:e8:da:39:f2:64:45:a1:54:4e:8b:a6:81:b1:86:
e0:a4:4c:78:d6:06:6d:4b:86:b6:8c:cb:fb:1b:96:07:bf:f0:
9e:b5:ed:79:6e:48:e6:86:fb:af:c8:ef:27:97:30:40:a0:c7:
11:d0:d9:fa:2f:cd:d9:98:84:47:eb:87:9c:b0:95:d1:61:c1:
6a:1d:73:68:ff:53:93:06:60:fc:8d:4c:78:3a:a1:a4:5c:61:
d1:23:0c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:23:22 2025 by rpki-client