Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e32312e36382e302f32322d3234203d3e203437353833.roa
File: 3231372e32312e36382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: CxG80diK/z4elj/KVpBIWqrhTMmNWUBUPES/ndjoKXM=
Subject key identifier: D9:AE:E0:43:63:A5:B6:D9:86:53:AC:5A:F2:4F:72:25:C3:DC:F0:FF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6E7644542788F905009CC3B9458134C828B4C516
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e32312e36382e302f32322d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:45:13 +0000
ROA not before: Mon 27 Jan 2025 09:40:13 +0000
ROA not after: Mon 26 Jan 2026 09:45:13 +0000
asID: 47583
IP address blocks: 217.21.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:76:44:54:27:88:f9:05:00:9c:c3:b9:45:81:34:c8:28:b4:c5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:13 2025 GMT
Not After : Jan 26 09:45:13 2026 GMT
Subject: CN=D9AEE04363A5B6D98653AC5AF24F7225C3DCF0FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:92:3b:af:79:5b:85:cb:09:52:d5:79:46:35:
f4:2b:d8:aa:3d:67:cf:a8:e7:d3:db:c3:97:33:66:
76:6d:63:71:88:a2:c7:0a:f5:e5:18:de:8f:da:20:
1b:43:30:f7:d4:3f:70:7d:f0:78:6a:8f:eb:e6:c8:
97:c4:28:c1:01:28:fb:79:a0:d2:48:a9:e1:da:53:
f6:b4:a2:5b:eb:30:f8:18:e7:c1:52:1f:ab:9b:6a:
26:f5:3a:32:df:1b:c2:79:3f:ad:b5:18:94:5f:b7:
13:4c:0a:a6:2e:48:d4:c2:06:a1:be:ce:0e:ec:97:
aa:aa:80:46:ba:34:1f:63:ce:e1:17:25:6b:42:85:
e4:8d:b8:cf:26:d2:05:96:92:1e:7d:52:ec:1f:c5:
bf:9e:c1:80:30:0a:32:c8:6c:46:53:bc:6e:73:ee:
b5:6e:a4:10:37:02:df:31:fb:9b:95:b6:ce:4c:f7:
ed:ea:c5:14:2d:fb:b0:2d:55:d9:6e:51:4e:e4:7b:
4f:96:23:b9:aa:ed:b2:f9:81:05:1c:cd:5c:b4:8b:
8f:1f:52:3b:be:74:af:55:41:35:fb:6e:a7:99:39:
92:01:09:e8:2b:9c:db:fe:fa:2f:b3:df:71:f0:90:
51:7f:6c:71:cf:6b:f4:b3:34:01:10:36:cc:8f:f9:
77:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AE:E0:43:63:A5:B6:D9:86:53:AC:5A:F2:4F:72:25:C3:DC:F0:FF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e32312e36382e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.21.68.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:5c:b3:1d:23:0f:f3:3d:d3:e4:4d:1e:20:ba:02:6b:43:2a:
6c:5c:69:cb:25:b6:74:89:e1:9f:b6:33:ed:f9:3f:0f:a3:aa:
e4:0f:50:46:ad:0c:25:ec:e8:42:7a:cf:33:45:35:d4:ac:5c:
2a:89:69:98:d7:5c:ef:35:70:88:01:31:a0:b2:0d:99:99:69:
8d:06:46:45:4e:44:2e:a8:02:de:86:15:a2:1a:90:1a:ff:d1:
38:8a:28:f4:06:6a:81:8d:cc:ab:6b:70:75:a2:bf:a2:8e:73:
22:75:7a:14:f9:cf:d2:50:41:b6:a5:46:9a:46:42:58:41:73:
c7:31:31:06:b4:d7:19:16:c2:a2:f6:68:de:28:56:a8:62:f2:
d4:72:27:22:42:32:3e:69:e7:b5:93:23:c7:61:76:52:0c:dc:
dc:0d:b6:01:eb:0b:10:fb:8f:4c:bc:93:44:6e:5f:d6:62:87:
cb:41:12:ce:c8:4e:9d:ce:a6:47:7b:95:d6:25:2f:08:1b:66:
7e:2f:e8:9e:75:29:bc:bc:1c:17:d3:65:2d:e1:3a:42:77:27:
3b:c5:1b:52:5d:87:fe:2f:f9:57:3c:45:11:86:21:2f:48:ea:
b6:7e:8a:ff:ae:07:fc:4d:cb:40:8c:84:df:98:46:ba:39:13:
7b:8d:d6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:05:04 2025 by rpki-client