Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e302e3234382e302f32332d3332203d3e203531313637.roa
File: 38312e302e3234382e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: x+JVBMfEs800Z8IlvjRq2WmQBHSpv6bBdrYrZKJ6FFY=
Subject key identifier: 80:97:C2:11:60:08:11:6D:C3:E4:43:31:A8:07:5B:08:FD:78:41:E1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2E7F272A80E29F1E04929EF9C736948CF8616C75
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e302e3234382e302f32332d3332203d3e203531313637.roa
Signing time: Mon 27 Jan 2025 09:45:29 +0000
ROA not before: Mon 27 Jan 2025 09:40:29 +0000
ROA not after: Mon 26 Jan 2026 09:45:29 +0000
asID: 51167
IP address blocks: 81.0.248.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 15:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:7f:27:2a:80:e2:9f:1e:04:92:9e:f9:c7:36:94:8c:f8:61:6c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:29 2025 GMT
Not After : Jan 26 09:45:29 2026 GMT
Subject: CN=8097C2116008116DC3E44331A8075B08FD7841E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:fb:24:91:a2:3c:ba:e7:60:c6:c0:20:57:
b2:ac:8e:5f:ae:04:7d:7d:c7:d7:e9:a5:bd:a3:c7:
61:fe:b5:da:24:b7:d1:c2:33:b1:f6:d1:6b:b9:d7:
69:14:ee:1f:af:2f:17:c5:fb:ea:c5:7b:ae:f9:37:
bf:76:c5:05:f7:56:06:e5:a8:9d:03:2c:05:5a:32:
d2:97:39:10:4f:92:d1:f2:b7:4c:13:6e:8e:b5:48:
b9:64:16:64:ff:a3:60:d9:2e:23:14:3d:39:dc:a5:
70:24:d6:10:85:03:6b:a4:9d:3e:d4:ab:28:3f:b8:
89:3f:ae:49:4d:87:14:de:7c:8c:98:43:10:39:1d:
6d:b4:fc:b1:98:46:78:5e:7f:c8:71:b0:2b:d5:5b:
0a:90:f9:66:26:ac:a1:79:7f:e5:5f:12:df:14:48:
0a:39:e5:61:82:ab:f7:7e:f6:45:c5:90:da:4e:51:
a5:ce:de:94:fd:61:ce:2f:9b:c2:0e:ab:a1:1d:fd:
3c:26:eb:41:8b:90:2a:e7:ff:13:f9:00:36:14:60:
25:8b:60:b3:8d:37:79:f8:3d:8c:8c:b2:ad:c5:d1:
13:3d:ed:5e:c1:80:25:e7:c2:dc:62:29:3d:8a:76:
c1:2e:1e:fc:32:f9:6c:86:7a:ad:e9:8e:a6:bd:24:
cf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:97:C2:11:60:08:11:6D:C3:E4:43:31:A8:07:5B:08:FD:78:41:E1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e302e3234382e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.0.248.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:27:f5:39:5d:b6:2d:0b:7c:4e:b4:3b:ba:13:3b:52:9c:c6:
f2:19:98:98:0a:d2:33:5a:f2:c7:2f:5e:69:3c:78:c9:bb:64:
23:54:d5:8f:0b:1e:5f:17:e5:77:a7:73:04:ea:b9:2a:62:ae:
db:47:fe:96:f4:6c:1e:8c:4f:13:ae:76:e2:0e:ce:97:4e:f9:
a0:c2:fd:ef:b5:3f:6d:4b:b2:7b:de:45:30:39:0e:5c:24:3f:
50:75:09:70:75:13:29:e6:ea:0f:9c:d6:80:bd:44:ea:43:58:
43:29:a3:ef:97:3a:bc:7b:46:57:ae:8c:a7:f1:47:14:01:4e:
cf:a4:53:3d:e3:2b:07:d6:bc:d7:bf:61:ee:d8:a2:ac:a1:18:
34:6d:d5:cb:8f:d9:20:b5:69:03:c3:7e:1a:3a:a2:6e:22:22:
01:b8:a5:53:75:a9:1e:ca:8c:d2:ed:bc:82:5a:51:23:1b:bf:
be:e1:f3:5d:2f:9b:cc:a1:52:6c:55:53:e9:11:c6:6f:9f:dc:
00:4e:7d:d8:34:d3:56:70:d5:40:0e:df:85:3d:a8:ac:c7:70:
47:18:53:8c:6a:19:74:ba:86:3f:79:ee:f2:f4:aa:9c:b2:30:
1d:f9:f9:19:14:bb:ba:4a:62:23:56:db:98:64:4b:af:39:03:
f4:10:a4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:22:07 2025 by rpki-client