Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37352e302f32342d3234203d3e203437353833.roa
File: 33312e3138372e37352e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: WnTvn7RAnsIKrOSxM1xdojBX3raQ+XUGUzcuuxSYGIg=
Subject key identifier: 54:A5:E2:19:F1:66:70:82:1E:D1:FD:96:0E:E7:74:BA:9C:E8:AB:82
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 17CA9BE8DEF29B043E417735D074B441CC826469
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37352e302f32342d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:45:15 +0000
ROA not before: Mon 27 Jan 2025 09:40:15 +0000
ROA not after: Mon 26 Jan 2026 09:45:15 +0000
asID: 47583
IP address blocks: 31.187.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:ca:9b:e8:de:f2:9b:04:3e:41:77:35:d0:74:b4:41:cc:82:64:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:15 2025 GMT
Not After : Jan 26 09:45:15 2026 GMT
Subject: CN=54A5E219F16670821ED1FD960EE774BA9CE8AB82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8f:de:7c:2d:35:0d:45:99:ab:74:b9:78:43:
8b:27:22:de:6c:6c:3e:6e:82:79:7a:d6:0b:a3:1c:
d7:62:06:f8:43:06:51:ee:10:8b:bc:22:e1:55:6d:
ef:64:01:31:5e:e1:4f:a4:8e:96:62:fa:8c:a9:6c:
0e:52:74:96:e1:2f:53:d7:f1:e6:d2:b8:51:e5:83:
5a:dc:0c:8b:35:19:2d:f4:75:70:1d:da:fc:46:af:
3d:6a:76:c6:4d:32:08:44:99:10:04:6f:2e:87:8d:
7e:86:48:d0:f9:82:34:68:78:5e:82:e2:37:8c:13:
9e:9c:05:8e:56:e9:20:1f:6d:79:75:fe:47:bc:96:
91:a8:22:0e:a3:d2:9a:5c:dc:6b:0c:62:27:a0:a3:
07:c6:f5:93:c9:48:e5:a9:b6:9b:b4:ff:d6:ae:9b:
43:3c:f9:a2:51:9f:4f:53:13:22:19:a7:36:17:5d:
74:15:9f:af:7f:e6:15:68:9d:e1:87:b9:43:e6:cc:
e1:db:35:cb:a0:13:df:14:b9:34:b6:32:fd:65:b9:
69:7b:69:4c:9a:6a:b8:1a:89:11:23:1b:75:4f:5b:
3c:64:a2:fc:fe:63:53:4a:6c:ec:c0:39:b5:28:1b:
1d:bd:03:14:19:33:cb:6c:42:e5:51:fc:e9:9c:9f:
ed:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A5:E2:19:F1:66:70:82:1E:D1:FD:96:0E:E7:74:BA:9C:E8:AB:82
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37352e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.75.0/24
Signature Algorithm: sha256WithRSAEncryption
96:9d:93:5a:89:29:3a:f3:f1:87:98:0b:c5:b5:2f:0f:3d:87:
61:48:19:50:25:8f:f1:aa:89:b3:a7:7b:b8:46:be:e9:29:e4:
de:72:8e:9b:27:eb:94:f2:3c:77:c5:78:b7:08:4e:8b:3b:7f:
e7:1a:ae:ea:7f:bd:96:4a:62:44:67:d2:4e:18:17:17:f8:d9:
cd:73:53:a2:a8:9e:81:15:7c:96:8c:11:38:1c:1d:20:f7:e5:
c0:50:3b:c4:c2:5f:ec:ff:7b:db:67:99:29:c5:5a:69:a2:29:
42:b1:41:58:8a:16:a8:7e:80:ed:c2:e5:df:cc:55:9d:d1:17:
21:db:75:7f:b7:23:f6:9f:ce:84:ad:a7:74:f4:d2:d1:4f:aa:
b0:2e:8e:77:53:18:2f:be:59:34:64:5f:6b:4e:be:41:7e:ff:
ca:3d:e6:7e:e1:20:ad:04:b9:a2:0f:4a:c6:1b:ef:93:f5:ca:
fc:87:73:e2:73:88:32:d3:55:9b:bd:b7:af:ab:0d:1a:7f:41:
aa:e6:09:67:99:03:c2:56:45:54:aa:ad:51:11:27:25:0b:60:
aa:c7:9e:1a:9e:39:35:e8:e4:cb:48:2d:49:8a:85:fb:3a:71:
62:f9:03:f2:84:25:67:b2:6d:91:ed:4a:ab:75:40:b9:cb:38:
e8:ab:14:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:58:30 2025 by rpki-client