Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34322e302f32342d3234203d3e203432373038.roa
File: 33312e3232302e34322e302f32342d3234203d3e203432373038.roa (raw, json)
Hash identifier: Y/Pu7h1mlYs41ehIocBQPcymalMXBpRiN0GZvhxosxs=
Subject key identifier: E8:D9:01:49:B8:EB:3D:7A:53:40:A6:6F:01:F5:3D:BA:1D:05:77:EF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3268C61B5747E83EAFD52928F30065A6F17B4C6C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34322e302f32342d3234203d3e203432373038.roa
Signing time: Mon 27 Jan 2025 09:45:19 +0000
ROA not before: Mon 27 Jan 2025 09:40:19 +0000
ROA not after: Mon 26 Jan 2026 09:45:19 +0000
asID: 42708
IP address blocks: 31.220.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:68:c6:1b:57:47:e8:3e:af:d5:29:28:f3:00:65:a6:f1:7b:4c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:19 2025 GMT
Not After : Jan 26 09:45:19 2026 GMT
Subject: CN=E8D90149B8EB3D7A5340A66F01F53DBA1D0577EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:f9:d6:a9:b1:d6:72:50:bd:cd:98:bf:c0:01:
d3:45:63:c6:68:a9:0d:91:d9:ec:64:79:fd:3a:ca:
fa:13:ba:90:e5:d7:e3:d2:5d:91:4c:5b:53:ee:d5:
28:99:2d:5e:17:39:b4:a4:33:b5:9d:28:c3:7e:f9:
67:45:16:c3:05:0e:ec:05:7d:df:6a:bd:5f:eb:6d:
c9:4e:fa:5c:ac:0b:d3:e6:ce:cc:1e:82:2f:d3:39:
4a:e3:19:bd:35:ec:ed:e3:60:58:45:fb:03:b4:36:
83:22:92:21:d6:c5:ee:24:b7:4d:ba:02:4d:32:e9:
7b:02:4c:31:cb:5a:cf:94:b1:b0:a1:98:bb:30:67:
8c:d4:e0:ce:ff:d2:b8:66:e7:30:2e:9c:66:da:7d:
4a:3b:4f:ec:58:7c:1a:c6:b5:dd:3c:3c:d6:d9:61:
51:c0:90:4d:a2:bb:14:b3:bb:e9:a9:c0:bf:b4:95:
14:3d:c1:2f:f1:c4:5f:23:ae:14:eb:b9:3a:60:24:
4d:ad:0a:55:05:61:c2:54:7b:0e:6f:24:1a:a0:50:
b8:75:21:3a:09:dd:cb:0d:c9:a4:69:7b:49:22:24:
61:a6:64:57:a4:90:86:67:c3:be:e1:5d:73:94:d4:
54:2b:fe:b6:1f:72:36:67:5f:40:3f:c5:e5:b3:1c:
70:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D9:01:49:B8:EB:3D:7A:53:40:A6:6F:01:F5:3D:BA:1D:05:77:EF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34322e302f32342d3234203d3e203432373038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.42.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:8c:9b:63:96:f0:a9:bc:21:07:59:2f:27:1b:f4:9d:04:f4:
fa:89:f4:84:e0:eb:33:c8:be:32:16:02:d8:07:50:34:db:3c:
eb:b0:2b:12:80:13:27:e3:cc:87:ce:fd:5a:6f:ca:59:13:b2:
e3:92:c0:ee:84:95:50:f1:cc:fe:57:cd:49:6e:a9:9b:68:4c:
33:17:6d:d4:37:df:8f:ef:b7:d9:5a:3e:2e:41:70:20:34:21:
ba:83:ce:8a:17:f4:12:46:49:38:f8:65:92:b7:2e:36:a9:c1:
42:dc:65:2e:e6:a4:eb:e9:f0:39:de:aa:68:df:ca:e8:41:de:
6a:b6:23:1f:0f:c8:63:f6:dc:a2:96:3b:12:3d:b4:15:e1:19:
81:31:34:ca:1a:bb:66:e1:61:63:9e:35:4f:65:dd:1d:51:db:
ed:a7:65:9a:fa:81:25:6a:48:87:46:7b:9c:40:8c:0d:46:44:
c0:62:e2:24:2a:ac:e9:fa:36:6d:63:19:fc:28:79:84:ee:2e:
e6:ef:25:d8:3a:96:7f:ea:29:d3:e7:0b:c0:17:33:13:49:5f:
dc:d0:0a:3e:b4:0f:b5:4a:37:cd:23:7a:00:37:1e:df:2c:91:
d2:94:e1:32:95:36:23:bb:a0:9d:2a:42:26:07:fe:14:63:e7:
13:b6:66:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:06:01 2025 by rpki-client