Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e36342e302f32342d3234203d3e203633343733.roa
File: 33312e3138372e36342e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: g3dFAlkDwgcpDu76HO87ra1/IzVKx73SDRbcPsfHKwA=
Subject key identifier: 61:BD:45:6D:85:F6:B8:B2:E5:C6:C4:BF:E9:CE:B8:D1:D7:41:8E:90
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4EA677EE6325B36D87C5221FDDA21BFEA9ADBA75
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e36342e302f32342d3234203d3e203633343733.roa
Signing time: Mon 27 Jan 2025 09:45:26 +0000
ROA not before: Mon 27 Jan 2025 09:40:26 +0000
ROA not after: Mon 26 Jan 2026 09:45:26 +0000
asID: 63473
IP address blocks: 31.187.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:a6:77:ee:63:25:b3:6d:87:c5:22:1f:dd:a2:1b:fe:a9:ad:ba:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:26 2025 GMT
Not After : Jan 26 09:45:26 2026 GMT
Subject: CN=61BD456D85F6B8B2E5C6C4BFE9CEB8D1D7418E90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:be:57:16:12:e7:5c:02:63:a2:03:60:ac:
b5:c3:f7:13:28:12:15:22:93:db:01:24:29:41:d1:
1a:fe:18:f6:f1:b2:ee:73:f4:5d:c1:15:4f:41:85:
3a:7e:f8:99:ef:aa:3b:c0:bb:51:be:9f:a7:3c:03:
03:69:25:8b:b8:48:d5:87:24:36:93:e9:8d:0a:7e:
6e:05:49:37:94:b6:01:18:7a:d8:07:0b:30:84:36:
5b:d0:67:fc:a2:1e:90:61:6e:36:ab:9e:7f:02:c1:
19:aa:41:66:1d:78:55:f2:79:81:46:d0:4d:ee:81:
d4:bb:2d:03:f0:80:67:0f:7e:e8:87:75:ba:6f:6c:
0e:17:12:2b:7c:2a:95:b3:1f:c5:f4:f8:10:0d:07:
66:50:01:19:fe:d8:ce:39:8e:66:1b:3d:65:2c:8c:
62:4a:3e:b1:90:d7:f0:c4:dc:bb:94:ba:f4:fb:8c:
8d:58:c1:8f:37:a5:2b:c8:f7:f6:4f:b7:50:8f:8c:
09:c2:e3:05:d6:ae:93:12:34:62:0d:55:3e:47:f3:
7f:31:fb:ee:8e:86:fa:2d:65:bc:20:52:84:00:c9:
2c:af:2e:62:9d:7b:b9:8f:6f:80:53:90:11:cd:79:
af:fb:16:20:54:6b:06:60:a6:4e:80:02:68:4f:55:
29:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BD:45:6D:85:F6:B8:B2:E5:C6:C4:BF:E9:CE:B8:D1:D7:41:8E:90
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e36342e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.64.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:dc:bb:3b:40:ca:ea:c9:4c:3b:aa:ae:89:c7:4e:4d:09:3a:
1e:3e:05:41:f6:da:c6:76:4e:37:62:a4:70:4b:e0:00:4c:19:
83:b0:95:2c:e7:ad:0c:f9:24:2b:92:a0:3a:23:8e:88:c5:17:
32:1e:2b:66:59:78:ff:4a:36:3f:e8:48:a3:ae:e6:2b:7f:04:
61:0b:2c:09:50:7f:78:c5:1e:15:96:02:73:b7:0d:5f:06:4c:
9b:2c:51:e0:a7:a8:0f:92:0e:22:8a:27:df:e6:b4:4e:a7:79:
61:91:76:f7:58:11:ef:0b:86:36:53:13:32:e6:22:15:1e:77:
fb:01:5b:fd:ee:3b:6f:d5:e3:fe:4c:fc:70:2e:22:fe:e9:cd:
47:33:80:28:7c:02:da:77:37:89:2c:a4:2b:96:1b:5f:7a:9d:
f8:b0:c5:ba:cc:02:01:fc:bf:1b:2e:61:79:dc:f2:ed:65:08:
32:0a:75:b8:c1:70:73:60:e3:18:dc:84:ac:fd:c8:a3:c5:53:
fd:cd:b0:2e:2c:93:54:73:c0:82:4d:7e:fc:02:a1:7f:5f:55:
41:c8:09:2d:1f:b5:52:9a:f8:bb:ed:99:42:ce:37:8e:c0:28:
85:d7:e5:02:15:c1:38:d8:75:57:a2:1a:40:46:8e:c7:a0:08:
51:2d:28:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:00:46 2025 by rpki-client