Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34322e302f32342d3234203d3e203633343733.roa
File: 33312e3232302e34322e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: e5qWF7tFIA6lZdzOaCRPJnx3cRTOKStM4j72wQRUhjA=
Subject key identifier: AC:5A:37:29:20:BC:A5:15:36:D9:C6:21:38:A1:BF:2C:1D:FD:08:28
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 41105D6518E4AD52FD91D528C5CC640EE971D17D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34322e302f32342d3234203d3e203633343733.roa
Signing time: Mon 27 Jan 2025 09:45:15 +0000
ROA not before: Mon 27 Jan 2025 09:40:15 +0000
ROA not after: Mon 26 Jan 2026 09:45:15 +0000
asID: 63473
IP address blocks: 31.220.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:10:5d:65:18:e4:ad:52:fd:91:d5:28:c5:cc:64:0e:e9:71:d1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:15 2025 GMT
Not After : Jan 26 09:45:15 2026 GMT
Subject: CN=AC5A372920BCA51536D9C62138A1BF2C1DFD0828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:40:4e:93:a8:85:41:9c:f5:0e:9b:db:e8:
a8:24:0f:e5:80:b6:1b:c5:26:25:ba:03:39:7a:84:
68:54:ce:13:94:dc:ff:9e:e7:36:a7:16:f6:6b:b0:
22:98:ec:47:0a:10:0f:da:6d:30:f8:9c:1c:86:2c:
91:a4:c8:b3:9d:b6:21:56:8a:4a:79:06:71:cd:47:
a4:8b:9e:cd:61:3a:07:43:45:e8:c1:be:e6:e4:ab:
ff:06:34:2d:04:65:a3:79:d1:54:f6:ea:5e:f6:a3:
7f:ed:b1:f0:bf:97:f8:1a:25:f7:d4:26:b4:48:71:
fe:b6:a6:01:58:71:11:f2:3c:68:d0:f3:c3:04:2e:
66:70:22:2e:10:d4:b9:88:09:73:70:ce:a5:7b:14:
b6:08:9a:c7:4c:28:0e:9f:8b:0e:7c:43:b2:34:d6:
69:20:b7:1d:fc:22:85:5b:76:b8:53:3b:38:06:15:
f5:f7:e3:2c:20:a8:c3:a8:d9:a5:de:c2:0f:a1:3c:
39:87:e9:04:f4:e9:b7:39:e0:f1:7d:87:aa:02:ab:
45:71:63:42:5b:23:c7:48:29:ed:42:d2:cc:56:c4:
c2:66:cf:8f:7a:b1:23:70:7c:9d:1b:70:25:b2:e8:
dc:36:4f:5d:f4:fa:d6:95:0d:3d:37:be:db:f2:39:
28:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5A:37:29:20:BC:A5:15:36:D9:C6:21:38:A1:BF:2C:1D:FD:08:28
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34322e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.42.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:1a:ce:06:4b:66:e4:21:2b:3e:cb:26:32:62:55:a5:4e:02:
51:7d:04:fb:22:5c:66:40:26:47:00:c7:75:3e:3d:e2:b2:fd:
91:ce:65:b6:f4:d8:b0:53:ad:f1:c5:54:1e:eb:f2:e4:a7:97:
bc:a3:d7:c3:c9:92:af:ac:bf:d5:b6:a2:95:09:ff:6d:d5:4c:
14:07:e4:b6:3d:e6:cf:8d:77:1d:7f:3b:a5:a7:28:ac:4c:2e:
2e:b5:d9:2a:7b:8c:9b:30:a6:57:df:50:16:80:02:50:9f:81:
4d:33:77:be:01:c7:49:6d:94:59:d3:6c:17:84:bc:aa:ff:77:
06:7b:ad:7f:93:d1:48:fa:96:ed:8b:6e:3d:9c:ca:ee:56:0a:
34:1d:64:10:dc:b8:ec:b8:ee:1c:4e:a7:34:4d:f5:8f:e2:11:
29:a1:44:cc:b8:5e:e1:e3:bd:da:4e:9d:67:08:90:d3:df:2b:
67:c1:af:c4:d8:ba:f5:7a:b3:7c:6c:ae:33:ad:88:47:52:87:
9b:dd:dd:f3:02:71:16:18:66:68:fa:3d:99:62:8a:8b:20:d9:
0f:84:ed:73:4f:3a:53:af:d0:f3:a0:1d:e1:3a:fc:44:4f:19:
2b:c6:50:98:eb:6d:f0:83:76:ca:0c:53:3f:5e:60:ee:3e:e9:
d5:68:0a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:04:39 2025 by rpki-client