Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e302e3234362e302f32332d3332203d3e203531313637.roa
File: 38312e302e3234362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: Xc8k7QdECoFykT+jhJzC4Am3Z6wtARoss+meZz+mRYQ=
Subject key identifier: 0E:67:37:6B:F3:F1:C2:B4:28:F0:35:A2:8E:5C:27:18:A6:01:DD:49
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 34B6A3C0BB90EF09BEA3403B56D117E9FA9DA281
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e302e3234362e302f32332d3332203d3e203531313637.roa
Signing time: Mon 27 Jan 2025 09:45:24 +0000
ROA not before: Mon 27 Jan 2025 09:40:24 +0000
ROA not after: Mon 26 Jan 2026 09:45:24 +0000
asID: 51167
IP address blocks: 81.0.246.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 15:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:b6:a3:c0:bb:90:ef:09:be:a3:40:3b:56:d1:17:e9:fa:9d:a2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:24 2025 GMT
Not After : Jan 26 09:45:24 2026 GMT
Subject: CN=0E67376BF3F1C2B428F035A28E5C2718A601DD49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:85:71:c0:1b:53:5b:97:7a:a1:6c:49:bf:
ea:b4:a6:18:f7:79:7d:34:65:27:b0:ee:9b:41:7c:
eb:b9:70:b3:b2:8a:c2:b8:51:22:d7:b5:28:f4:1e:
c1:f1:11:95:85:8f:9f:5b:8b:3a:01:23:db:b2:a9:
46:8c:89:47:5a:10:c8:59:38:7a:27:7f:80:20:71:
ec:2b:3d:f6:6d:0d:ee:9a:ec:07:af:ea:7a:58:85:
f3:63:fc:01:52:b3:33:9a:82:f0:7d:1a:4e:13:4d:
59:17:ba:62:28:7b:c5:3b:20:c1:5e:be:9e:61:39:
9a:b9:ce:d1:00:f7:90:68:c1:37:e1:42:f2:a9:d3:
4a:45:48:25:00:e4:68:ab:d9:bd:99:f4:bd:ec:6a:
78:4d:ea:58:38:45:ec:e7:4d:29:67:5d:7e:8d:6d:
3b:95:cb:e2:d1:09:12:30:6c:17:47:2b:a5:f3:a1:
eb:1f:e9:82:b7:c3:bc:81:1b:bb:11:5c:b6:f6:18:
91:cf:9d:2a:2b:ea:2c:70:d0:ba:66:96:63:c9:0c:
60:6c:76:2b:77:e1:69:25:56:7d:a7:20:fe:90:55:
ed:4e:23:b6:8f:91:f1:77:ae:af:9e:e7:46:18:0c:
5f:d0:08:ae:6d:34:59:b3:cd:2d:fd:89:de:25:84:
86:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:67:37:6B:F3:F1:C2:B4:28:F0:35:A2:8E:5C:27:18:A6:01:DD:49
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e302e3234362e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.0.246.0/23
Signature Algorithm: sha256WithRSAEncryption
75:9b:39:3e:e1:f9:c2:5c:f2:ca:65:82:1f:4f:52:ac:b9:6e:
23:ac:12:97:b3:54:16:34:0d:0a:eb:f9:2c:9e:9d:0d:83:62:
97:7d:91:41:f3:bc:8b:3d:c4:8d:23:02:25:97:be:78:82:5b:
56:95:35:c8:79:9e:9e:02:da:a6:9e:3f:17:28:b4:eb:33:f7:
36:d7:e8:9e:8a:30:81:54:b0:be:86:af:79:8a:63:27:a0:69:
e5:05:50:e0:0d:8a:eb:91:85:a5:aa:48:47:83:06:29:05:24:
f8:50:a4:a9:a3:ec:fe:14:8d:b9:ce:78:73:bf:74:e9:f7:45:
70:47:fb:34:99:c4:95:19:c7:dc:da:92:ee:3f:3f:ab:12:3f:
5d:8a:b2:0c:52:0a:e5:83:29:85:90:3b:94:fa:d1:f0:09:70:
4d:d7:b3:93:3c:bd:45:5f:88:65:0c:c7:6e:03:88:61:50:5d:
e1:12:ad:91:ca:9b:f4:4b:02:74:d4:9a:cf:0e:23:63:b8:21:
1e:5f:c1:4f:7e:3c:52:6a:d2:27:1f:b8:b0:95:3e:42:45:7f:
8d:78:dc:9f:04:78:45:2e:0a:c1:80:ad:19:d5:4c:a9:df:47:
c0:09:02:a6:19:cf:8e:60:52:1a:1d:62:2c:58:e4:01:b3:a1:
d5:d1:24:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:19:08 2025 by rpki-client