Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33372e36302e3232342e302f32302d3332203d3e203531313637.roa
File: 33372e36302e3232342e302f32302d3332203d3e203531313637.roa (raw, json)
Hash identifier: h0Y+5wgSW7IqffcVCGjT8TYnoGZz/CmcYMe4O+bYwZc=
Subject key identifier: A8:77:80:E9:7E:0E:42:B4:18:97:7E:0E:74:50:BA:17:4D:03:37:3B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 292251B193EE3227C6F55AD7C9D716C6E5822636
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33372e36302e3232342e302f32302d3332203d3e203531313637.roa
Signing time: Thu 26 Dec 2024 10:44:34 +0000
ROA not before: Thu 26 Dec 2024 10:39:34 +0000
ROA not after: Thu 25 Dec 2025 10:44:34 +0000
asID: 51167
IP address blocks: 37.60.224.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:22:51:b1:93:ee:32:27:c6:f5:5a:d7:c9:d7:16:c6:e5:82:26:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 26 10:39:34 2024 GMT
Not After : Dec 25 10:44:34 2025 GMT
Subject: CN=A87780E97E0E42B418977E0E7450BA174D03373B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:23:da:f4:c5:7b:76:d9:52:f8:d9:b6:ad:
1e:60:7a:07:d1:76:10:3c:75:c7:a8:8b:ea:52:12:
3b:82:46:51:86:64:19:ea:88:79:1e:c8:bc:eb:3e:
2a:c0:5f:2a:68:b2:14:5c:05:8a:cf:19:3e:a3:d4:
81:fa:d1:91:95:7c:0b:d8:53:59:f9:bd:3d:b8:fd:
58:5c:f3:56:b9:0a:7e:9a:b7:56:d6:74:1d:6d:c9:
e6:e5:e2:5b:12:a3:4b:09:89:15:6f:1c:7e:33:63:
b5:8c:40:23:b2:53:14:69:26:a4:85:65:7d:95:10:
cc:cf:c4:18:58:43:a6:a1:68:6b:b3:3f:7c:6a:94:
38:22:a0:22:23:6a:f9:a4:b4:0b:80:26:03:fa:e6:
a8:84:72:a9:35:a7:fb:3d:5b:d5:55:22:ab:b7:92:
86:88:06:30:58:e1:39:a8:ae:17:31:4e:e8:c1:3c:
8f:71:c2:8c:1f:66:91:b3:42:03:ef:88:02:43:be:
9e:5c:57:98:4b:5b:66:db:ce:21:f8:8e:94:6f:bf:
ec:bc:49:59:3b:78:0b:ba:55:6f:74:a4:5f:81:31:
0a:b1:a3:59:f5:61:1a:0c:e4:e3:61:00:58:a3:10:
be:db:f0:41:a4:fb:8a:63:cd:43:66:c8:f1:c7:86:
a3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:77:80:E9:7E:0E:42:B4:18:97:7E:0E:74:50:BA:17:4D:03:37:3B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33372e36302e3232342e302f32302d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.224.0/20
Signature Algorithm: sha256WithRSAEncryption
16:98:5e:82:d7:0d:e2:1a:fe:9c:a6:34:96:e7:21:5c:9f:1b:
86:5d:b7:d6:49:96:0e:34:1f:67:37:1b:45:1e:cc:77:8b:66:
37:37:bc:a4:88:7b:e2:6f:d4:22:fc:3b:a0:1a:76:86:33:57:
f3:4e:98:0e:5f:ba:e9:51:8a:35:2d:86:f0:2a:51:73:3a:09:
a4:bc:a6:71:5d:cf:d8:54:4d:a7:30:25:42:7e:9d:08:53:a3:
cf:d8:36:90:ba:32:43:e8:a8:38:96:95:2e:d5:51:d5:e7:da:
b0:5d:06:23:07:57:4a:42:06:f0:cc:9f:08:76:83:80:2c:eb:
47:c4:59:1e:83:7d:7a:58:a3:08:89:0c:e8:c1:7b:fe:3a:15:
53:34:23:64:7d:9d:2f:32:e0:52:c8:92:eb:e0:89:34:a3:0e:
74:d1:b2:66:f8:c9:8d:b0:05:06:bd:f3:9f:24:0c:56:6a:3f:
0c:bd:ae:8d:14:1e:bb:53:9a:02:aa:a1:e5:c1:f5:c4:cd:0f:
6d:54:97:27:29:d0:8d:da:7d:92:03:37:6a:a0:86:c6:a8:50:
f2:06:c8:9e:c2:6e:e0:b3:55:f6:1c:21:36:42:53:5a:63:14:
c1:f1:ff:d6:df:65:48:70:c4:74:f9:ca:49:40:4a:52:16:22:
4c:df:47:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:37 2025 by rpki-client