Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37382e302f32342d3234203d3e20313336373837.roa
File: 33312e3138372e37382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: JLKn6L5lRz3rzpciHJJOZgVdE2xQaezXuhHsCrGyA2Y=
Subject key identifier: F0:A7:EE:27:50:42:13:7B:83:A8:86:6D:65:C7:43:02:F6:AC:66:E2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 178D688094A67C24B00263F0D38EBB91A7B02C9E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37382e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 27 Jan 2025 09:45:29 +0000
ROA not before: Mon 27 Jan 2025 09:40:29 +0000
ROA not after: Mon 26 Jan 2026 09:45:29 +0000
asID: 136787
IP address blocks: 31.187.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:8d:68:80:94:a6:7c:24:b0:02:63:f0:d3:8e:bb:91:a7:b0:2c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:29 2025 GMT
Not After : Jan 26 09:45:29 2026 GMT
Subject: CN=F0A7EE275042137B83A8866D65C74302F6AC66E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:16:49:b1:e2:e3:f1:bf:a4:e4:e7:6c:21:
e2:2d:01:69:e3:6b:3c:21:90:0a:b6:5d:a5:bf:80:
da:39:85:c6:84:b0:da:e9:6f:13:39:3a:fd:98:3d:
57:e3:ec:db:68:1d:98:fb:cc:b9:d7:39:aa:04:0b:
a0:6d:2b:ad:02:fc:96:88:3a:7d:f9:9e:12:35:41:
d6:f3:0e:23:f6:bf:d0:27:71:0c:ba:42:12:f9:22:
64:b7:40:3a:af:85:c8:47:2d:3f:58:b3:7d:20:45:
f5:44:8c:a9:5a:42:e4:ea:4d:71:10:f9:76:76:c3:
a4:ee:71:6a:4b:17:b3:3b:2a:85:8f:af:51:d2:3b:
47:cd:75:ad:5b:8b:8f:c3:07:ca:c3:bf:4a:ac:c9:
a7:d2:72:17:fd:a9:94:5b:24:19:95:b5:b1:20:7d:
16:9c:82:c0:08:37:45:d1:f0:c6:65:67:bc:c0:85:
ee:ec:f4:c8:cb:5e:25:e8:33:03:76:72:00:9c:ad:
c2:bf:be:bd:57:b1:95:68:ab:e0:a5:ba:81:15:1c:
e5:80:35:d2:46:18:5f:74:7f:4a:75:51:37:b9:92:
3a:dc:e9:de:a1:d5:09:9a:e8:fd:84:c3:62:0e:e7:
84:62:5f:2a:bd:c6:03:1d:65:c8:37:44:b2:94:1c:
57:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A7:EE:27:50:42:13:7B:83:A8:86:6D:65:C7:43:02:F6:AC:66:E2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.78.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:e5:8c:2c:cb:52:45:cd:13:a8:d4:54:4d:f8:e6:4e:c4:6f:
fd:48:d8:82:bb:bc:b1:90:4c:43:45:8a:9b:5b:48:f4:15:fb:
86:93:1d:ca:1f:d3:c3:d3:80:66:c3:c6:51:1c:b3:95:c0:b3:
26:e3:08:ff:8b:8d:e0:19:ae:e6:12:8b:5c:69:52:c5:ee:56:
02:74:e2:4a:3a:33:72:c1:e9:2e:79:43:f2:7b:0a:4d:1a:6b:
0e:49:90:7e:4c:f7:22:11:fc:74:7c:6c:fa:e9:a4:e4:63:03:
42:e7:ba:fc:63:0e:0d:0d:a5:8e:40:a6:e5:a4:49:ae:4a:08:
fc:aa:4f:ef:27:3e:6e:30:f6:c3:ef:6f:f2:ba:32:e1:e3:56:
88:75:6f:cc:3b:24:70:0a:61:d8:67:11:40:fc:bf:9d:1d:a1:
5c:6d:42:1e:e5:87:ca:82:b4:86:79:1d:7b:e5:d6:77:a8:40:
95:01:ee:61:9e:bb:09:aa:a0:9c:ee:68:db:a5:3a:26:02:ed:
0a:9d:48:9b:d2:ff:53:58:37:e7:8b:7d:03:53:6b:4f:37:ad:
9f:7e:1b:0e:98:ee:38:61:4d:3d:b9:a9:d9:ad:14:25:97:b5:
9c:cd:a0:f6:56:30:49:1f:c7:1a:7f:2e:98:fd:7d:57:07:0a:
c7:d4:c5:a0
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUF41ogJSmfCSwAmPw0467kaewLJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMjcwOTQwMjlaFw0yNjAxMjYwOTQ1MjlaMDMxMTAvBgNV
BAMTKEYwQTdFRTI3NTA0MjEzN0I4M0E4ODY2RDY1Qzc0MzAyRjZBQzY2RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/6BZJseLj8b+k5OdsIeItAWnj
azwhkAq2XaW/gNo5hcaEsNrpbxM5Ov2YPVfj7NtoHZj7zLnXOaoEC6BtK60C/JaI
On35nhI1QdbzDiP2v9AncQy6QhL5ImS3QDqvhchHLT9Ys30gRfVEjKlaQuTqTXEQ
+XZ2w6TucWpLF7M7KoWPr1HSO0fNda1bi4/DB8rDv0qsyafSchf9qZRbJBmVtbEg
fRacgsAIN0XR8MZlZ7zAhe7s9MjLXiXoMwN2cgCcrcK/vr1XsZVoq+CluoEVHOWA
NdJGGF90f0p1UTe5kjrc6d6h1Qma6P2Ew2IO54RiXyq9xgMdZcg3RLKUHFfZAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU8KfuJ1BCE3uDqIZtZcdDAvasZuIwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzMzMTJlMzEzODM3MmUzNzM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
H7tOMA0GCSqGSIb3DQEBCwUAA4IBAQCM5Ywsy1JFzROo1FRN+OZOxG/9SNiCu7yx
kExDRYqbW0j0FfuGkx3KH9PD04Bmw8ZRHLOVwLMm4wj/i43gGa7mEotcaVLF7lYC
dOJKOjNywekueUPyewpNGmsOSZB+TPciEfx0fGz66aTkYwNC57r8Yw4NDaWOQKbl
pEmuSgj8qk/vJz5uMPbD72/yujLh41aIdW/MOyRwCmHYZxFA/L+dHaFcbUIe5YfK
grSGeR175dZ3qECVAe5hnrsJqqCc7mjbpTomAu0KnUib0v9TWDfni30DU2tPN62f
fhsOmO44YU09uanZrRQll7WczaD2VjBJH8cafy6Y/X1XBwrH1MWg
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:08:15 2025 by rpki-client