Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e36342e302f32342d3234203d3e203432373038.roa
File: 33312e3138372e36342e302f32342d3234203d3e203432373038.roa (raw, json)
Hash identifier: uugNbPh7eA22BkzDS1V1nsxJF0OR8RRDRLuw7j3zFvI=
Subject key identifier: 47:AD:EA:92:44:46:BD:45:AA:21:41:FC:24:53:B9:AA:21:63:58:D8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 10BE0C55C918DE3A89C87368975608935D371A53
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e36342e302f32342d3234203d3e203432373038.roa
Signing time: Mon 27 Jan 2025 09:44:59 +0000
ROA not before: Mon 27 Jan 2025 09:39:59 +0000
ROA not after: Mon 26 Jan 2026 09:44:59 +0000
asID: 42708
IP address blocks: 31.187.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:be:0c:55:c9:18:de:3a:89:c8:73:68:97:56:08:93:5d:37:1a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:39:59 2025 GMT
Not After : Jan 26 09:44:59 2026 GMT
Subject: CN=47ADEA924446BD45AA2141FC2453B9AA216358D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1c:be:31:4b:5d:be:97:82:a6:ae:53:3c:f3:
7a:4e:d9:2b:df:33:5f:47:d4:73:7c:a2:f8:42:41:
47:7e:eb:c6:0c:24:d3:8e:e7:85:77:14:b2:da:d8:
bf:62:e3:cd:dd:1e:48:b6:40:44:bb:cb:57:75:00:
75:e1:d4:9b:9d:ca:74:84:47:a2:0e:8e:9d:78:5f:
f4:f3:e2:4a:1f:09:2c:b9:08:d3:d3:d1:c7:aa:e6:
6e:b6:46:25:5f:81:f8:81:9f:d9:ad:9f:57:fd:99:
cd:9a:14:70:ce:53:3a:18:1f:1d:04:7e:b0:2b:0e:
db:8b:a9:21:77:6b:2d:43:d0:f0:34:bb:93:fc:38:
d1:1b:5d:14:7d:06:45:46:e4:b9:d1:61:8b:8d:3e:
3a:bb:ef:6c:76:62:21:33:74:a8:20:20:c3:de:a3:
d9:6c:81:83:29:12:d2:47:7b:ef:ef:82:da:a3:64:
a1:e5:86:e9:52:22:d4:60:a1:9d:72:89:08:68:90:
3f:0f:89:63:c1:e2:7f:26:77:b4:53:62:a4:a3:55:
19:84:33:4a:25:4f:1c:18:40:aa:03:48:6b:0c:0a:
f9:12:b0:96:bc:a0:13:1d:06:62:3e:62:58:06:51:
7b:6e:a2:c6:f6:a2:7f:f2:2e:29:38:7c:03:99:61:
95:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AD:EA:92:44:46:BD:45:AA:21:41:FC:24:53:B9:AA:21:63:58:D8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e36342e302f32342d3234203d3e203432373038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.64.0/24
Signature Algorithm: sha256WithRSAEncryption
28:c9:5b:c7:23:a2:93:70:20:9d:06:fd:f4:11:31:50:71:27:
47:c7:ed:a5:47:67:12:c8:23:12:57:98:f6:81:0b:b4:4c:02:
5e:d7:27:e5:53:b4:d5:e8:8d:b0:7c:ca:02:e9:3f:a5:f9:d9:
05:7e:2f:59:47:4e:2e:86:47:45:b1:0d:51:9a:bc:74:f2:a2:
e2:f3:1d:72:8a:42:f7:aa:63:bc:ef:9e:c7:c7:90:b4:95:19:
97:47:aa:67:84:63:c1:f0:9c:62:35:d8:73:4a:6a:16:61:5d:
f9:c4:89:d6:07:ff:45:5b:39:b0:5b:04:ca:8d:25:73:e5:b4:
0a:a3:04:28:12:28:88:5c:0a:b2:69:db:a0:e7:13:5e:d5:42:
8f:53:43:00:29:00:2b:73:f1:b6:f7:0a:1b:12:67:b7:d9:b2:
5f:4b:ad:c8:3e:d9:c5:8f:b3:d9:2d:76:f1:23:dc:40:4b:54:
de:22:58:ed:ec:2d:3a:f7:d8:7a:b0:07:b5:7c:c4:6c:72:b2:
5c:0b:d0:34:9d:20:12:e6:4d:96:2b:e5:cb:19:2c:30:4d:0d:
39:21:14:24:54:66:1b:c6:91:31:a7:0c:04:e9:1d:e2:b2:51:
4d:1a:09:aa:8e:2b:e2:2f:85:08:d0:e9:0d:0a:8b:3a:51:b5:
95:5e:d3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:01:58 2025 by rpki-client