Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e32312e37322e302f32322d3234203d3e203437353833.roa
File: 3231372e32312e37322e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: uLrKOPIN2k0O/kllpoiIO7WSxWRNkCcMxpK9grxuYLc=
Subject key identifier: 22:CA:D2:4A:04:11:D0:08:44:8A:E7:59:60:73:E8:50:5B:B8:41:4B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 603519849C60DD21227B5CFF4242A14D76CA965C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e32312e37322e302f32322d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:44:55 +0000
ROA not before: Mon 27 Jan 2025 09:39:55 +0000
ROA not after: Mon 26 Jan 2026 09:44:55 +0000
asID: 47583
IP address blocks: 217.21.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:35:19:84:9c:60:dd:21:22:7b:5c:ff:42:42:a1:4d:76:ca:96:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:39:55 2025 GMT
Not After : Jan 26 09:44:55 2026 GMT
Subject: CN=22CAD24A0411D008448AE7596073E8505BB8414B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:50:ea:8d:db:ed:d0:f4:89:70:70:93:bd:7e:
48:70:aa:c9:35:f6:e6:aa:ec:fb:3a:cc:52:3d:19:
44:ea:df:61:17:ba:3d:f6:b2:c1:3d:88:d2:e7:5f:
9a:2a:ac:1e:0b:1a:2b:f0:60:c3:04:19:c0:66:b4:
90:08:b8:6e:9c:e1:96:27:c0:1d:e7:56:99:30:0b:
6a:34:9a:c3:71:1a:a2:74:ea:00:96:dd:32:9e:cc:
6e:1b:6c:d6:85:5c:95:3a:dc:6e:a2:60:da:b8:22:
b1:31:c8:b0:75:ae:d0:74:45:ee:94:31:b8:23:47:
be:82:50:7e:f9:6f:60:b5:e3:0e:12:ee:b8:dd:b5:
e8:88:af:dc:cd:3d:28:bd:87:16:b9:f3:89:5a:c4:
d0:69:2e:19:2f:01:3c:00:2f:79:c4:07:a8:68:53:
77:2c:da:00:fe:84:b4:0e:ac:44:b1:fd:15:80:70:
53:ae:11:60:ef:cc:8a:6a:f5:ed:ec:46:5a:ce:a2:
24:ea:63:a8:66:b5:93:c8:3a:5a:61:6a:4c:d3:6a:
65:bd:aa:5d:ac:40:bc:75:47:4a:4d:e2:6f:63:a4:
0c:43:51:af:f2:a9:65:23:70:55:c0:96:c0:31:89:
50:9c:e8:70:00:06:31:73:37:11:c4:80:eb:5c:47:
ec:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CA:D2:4A:04:11:D0:08:44:8A:E7:59:60:73:E8:50:5B:B8:41:4B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e32312e37322e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.21.72.0/22
Signature Algorithm: sha256WithRSAEncryption
85:4e:f4:a6:df:59:f7:b0:4c:c5:03:95:56:4b:bb:a9:a5:cf:
fc:a4:23:c6:f6:a9:bd:7d:d4:df:c0:06:7c:3d:75:cd:e4:fd:
3f:2d:ff:82:e1:3b:66:ce:63:3d:c3:b8:5e:f9:ea:be:9f:a3:
fc:e0:a9:62:07:c4:29:28:52:f5:e3:9d:d6:96:b0:0f:86:82:
b5:3a:0a:2a:28:58:2a:51:09:18:97:f0:74:12:70:0f:53:1f:
7c:5a:59:94:37:0f:1c:79:a8:1a:71:d2:0d:7b:b3:27:4a:12:
b4:b6:95:aa:85:a2:fc:30:00:36:8b:6d:70:cc:5c:7f:cd:59:
60:76:a5:b2:d0:b9:f6:e0:6b:ca:6c:c6:dc:e3:0b:88:1d:22:
f7:fd:c5:7f:96:f6:18:c6:7c:e7:99:48:dc:95:63:44:fd:82:
bf:80:04:b0:f0:fe:0d:c9:b6:c4:a9:c9:dd:0c:ff:f5:a4:c7:
54:d5:df:76:59:a3:c0:ed:d4:77:46:4c:ae:74:74:c2:1f:71:
af:75:85:2a:58:37:9c:89:ba:30:48:5d:b6:dd:f9:68:2f:89:
aa:18:f2:c5:43:a1:4f:db:cc:b3:b7:99:cd:0d:62:f5:cc:80:
89:24:8a:7b:6c:5b:e4:a5:94:e9:6a:56:c0:53:6f:41:cd:67:
c2:b7:0b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:07:13 2025 by rpki-client