Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37332e302f32342d3234203d3e20323039383534.roa
File: 33312e3138372e37332e302f32342d3234203d3e20323039383534.roa (raw, json)
Hash identifier: b3B9pd1MirXEmUuc7BMLvMxmjpsF8hPccetM14EcJ+w=
Subject key identifier: B4:33:5B:F3:4B:EB:B1:14:CE:44:A0:D9:49:A4:B9:93:2C:9D:96:1A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 787C3DB70CB3C17D0616C0E40BAD5A903A99F6E8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37332e302f32342d3234203d3e20323039383534.roa
Signing time: Mon 03 Feb 2025 12:45:39 +0000
ROA not before: Mon 03 Feb 2025 12:40:39 +0000
ROA not after: Mon 02 Feb 2026 12:45:39 +0000
asID: 209854
IP address blocks: 31.187.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:7c:3d:b7:0c:b3:c1:7d:06:16:c0:e4:0b:ad:5a:90:3a:99:f6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 3 12:40:39 2025 GMT
Not After : Feb 2 12:45:39 2026 GMT
Subject: CN=B4335BF34BEBB114CE44A0D949A4B9932C9D961A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:a5:98:ff:24:e9:35:c9:71:b4:90:56:5f:
86:0e:34:91:59:d8:68:dc:5e:8d:4e:c6:7d:37:2f:
7b:32:c9:f7:0c:45:8e:89:2d:37:18:12:cf:9d:14:
17:93:7b:10:fc:f7:2c:a7:ae:f7:57:5e:18:48:32:
8d:29:3b:54:3d:d4:3e:06:f4:ec:5c:16:2e:47:c6:
24:09:1d:82:7b:f0:28:6d:36:1c:df:89:97:49:f7:
25:12:6b:17:c1:68:d5:84:72:e3:78:66:15:4f:6e:
fb:c9:a3:43:94:b9:32:b3:23:3a:19:55:6f:d1:ec:
63:25:ad:de:ff:0a:be:8f:47:7c:47:f0:98:a6:ec:
8f:46:ed:d0:2f:8a:1a:17:98:1e:23:35:6e:26:5e:
a1:17:86:b1:67:6f:b1:f0:37:fb:8d:18:e0:d3:d5:
29:ce:81:f5:af:4e:78:05:cc:28:c6:63:e7:13:86:
f9:70:71:b2:2e:fd:9f:7d:67:5d:63:f3:e4:5e:56:
f9:1b:18:8a:42:4a:9c:54:b2:f4:38:03:a7:2e:5c:
e4:1f:8d:75:1c:cd:d8:dd:77:84:a9:89:9e:80:76:
bf:07:8e:d2:39:93:91:c7:5c:a7:cd:78:0f:77:2c:
dd:ca:1a:12:26:33:f1:f0:19:73:6b:b0:c2:82:60:
e6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:33:5B:F3:4B:EB:B1:14:CE:44:A0:D9:49:A4:B9:93:2C:9D:96:1A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37332e302f32342d3234203d3e20323039383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.73.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:89:12:29:7a:2f:df:8c:c9:2a:6d:e9:0c:94:fd:c6:c9:6a:
0b:e3:3e:1c:05:b0:c8:bb:de:70:f3:b3:12:e8:2f:d5:95:5c:
d9:c7:5d:42:f1:dc:ec:b4:73:21:8a:c1:af:67:d0:66:33:35:
7f:52:50:cd:44:be:78:43:8e:75:f8:e7:3d:ff:06:69:7c:dc:
e9:3d:21:c3:90:2c:8d:43:dc:15:bb:bd:79:d2:a4:56:92:60:
28:d8:87:27:ab:6d:2f:4b:9e:fd:11:75:ee:f4:02:e8:4e:91:
fb:bf:bc:98:82:b3:cc:9a:bd:99:fe:c5:11:fd:0f:86:e0:e5:
53:cb:e6:e7:f0:84:97:3a:9d:f3:47:42:50:4f:bf:f3:7e:24:
08:63:44:cb:7f:e6:74:1f:18:3e:1b:7a:21:02:d2:60:d9:f7:
e3:d8:df:88:bc:f1:0a:11:4a:a0:80:24:f1:d8:39:5f:e2:19:
f1:bd:89:dd:de:4f:41:dc:70:67:8b:50:dd:be:1f:8c:66:3b:
b4:1d:44:58:3d:91:55:e0:04:df:08:49:37:69:36:9d:8b:ff:
65:04:c8:aa:33:48:3c:ed:c8:3b:28:da:31:ad:ce:33:41:00:
17:14:6e:07:0f:c1:3b:0f:8c:f5:3c:46:c2:c4:82:09:c6:5a:
db:63:7b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:43:58 2025 by rpki-client