Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3131322e3232342e302f32302d3234203d3e203437353833.roa
File: 38322e3131322e3232342e302f32302d3234203d3e203437353833.roa (raw, json)
Hash identifier: 88C5vPBzQPkbPNKeOiTKyVBjsDG7YtFwCIfGd7gXOF0=
Subject key identifier: 0B:B9:87:0F:48:82:19:76:2C:83:DE:FF:71:BA:E0:25:86:FF:2F:FE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4DFD7809D2851CEE3D3E3BF7067CD409C5FFFBDF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3131322e3232342e302f32302d3234203d3e203437353833.roa
Signing time: Thu 22 May 2025 16:46:25 +0000
ROA not before: Thu 22 May 2025 16:41:25 +0000
ROA not after: Thu 21 May 2026 16:46:25 +0000
asID: 47583
IP address blocks: 82.112.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 12:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:fd:78:09:d2:85:1c:ee:3d:3e:3b:f7:06:7c:d4:09:c5:ff:fb:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 22 16:41:25 2025 GMT
Not After : May 21 16:46:25 2026 GMT
Subject: CN=0BB9870F488219762C83DEFF71BAE02586FF2FFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ca:ad:d7:23:79:c9:ea:c5:04:48:77:12:e2:
de:d8:87:4f:4e:7a:42:2b:48:d4:72:7b:30:c7:5e:
a5:4e:d7:13:3d:38:fe:16:fc:21:d4:02:36:61:2a:
80:20:0d:a2:79:5c:b0:35:a4:5b:a1:f3:e7:0e:79:
7b:2c:cf:29:79:85:02:42:14:32:1a:ad:76:19:dd:
b7:c7:0b:b6:72:42:82:67:c4:f4:a0:50:94:22:af:
ff:1b:87:db:59:c9:3e:a6:90:59:8e:12:74:55:08:
82:dd:63:f6:23:6c:ec:11:c0:94:b2:26:d2:fd:ea:
af:ac:8e:ea:8e:8f:de:41:cf:a8:c6:f3:eb:df:5f:
85:fa:ea:49:34:cb:c5:5d:a8:ea:60:98:c1:1b:c2:
bb:a1:62:8e:a4:26:2f:fa:53:96:f5:0e:d1:dd:fb:
a1:54:a8:b0:07:32:a2:89:bc:23:5a:ee:29:a2:56:
22:d9:0b:ec:58:6d:6a:b5:f3:0a:0a:15:42:53:99:
70:e5:dc:3c:2d:36:8d:0b:19:fe:c9:e9:86:4d:c8:
0a:10:84:2d:c3:85:92:ae:08:30:e1:8e:31:f0:a2:
09:4f:2c:02:be:16:93:cf:f7:ce:c5:b9:61:d0:b3:
2f:76:95:76:15:c6:f6:0d:b4:25:34:29:bb:69:b2:
fb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B9:87:0F:48:82:19:76:2C:83:DE:FF:71:BA:E0:25:86:FF:2F:FE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3131322e3232342e302f32302d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.112.224.0/20
Signature Algorithm: sha256WithRSAEncryption
90:3f:99:e6:cc:05:d3:4d:61:67:7a:d6:fc:2a:a9:f9:fe:1c:
3b:fe:06:45:bd:e0:f6:4c:b6:44:b0:1b:c5:80:60:25:4a:19:
59:3a:54:08:03:2a:29:e9:d8:e5:e8:21:86:d0:ce:08:a3:a4:
2b:ef:14:4c:4c:85:0d:26:4d:51:f6:f6:37:44:79:ab:d6:59:
37:8f:1c:ba:8e:5b:ce:d2:e3:12:69:78:62:eb:f1:78:13:13:
10:f9:9c:64:e7:9c:32:5a:db:db:63:d5:87:40:95:61:8d:67:
b6:4a:b6:59:85:91:89:fc:64:a5:bf:44:48:36:ab:71:4e:90:
c6:d9:ef:c5:50:d6:d2:4a:f5:7d:bd:3c:fd:be:fd:11:75:60:
39:6c:e3:8a:b5:b0:31:fd:30:1b:07:72:5d:3e:37:c2:11:b8:
24:fa:b0:2d:6b:77:08:d0:14:d4:c7:e2:f4:06:f0:72:31:b5:
cc:94:2f:04:43:be:00:5c:3b:4e:18:ce:79:89:30:2e:14:71:
fd:60:d3:76:7d:0b:8e:67:a3:26:86:61:b8:62:4c:b5:97:07:
26:8c:2b:b9:61:74:9e:01:5f:b2:10:4a:40:db:81:05:be:7c:
4d:54:08:88:e9:d0:2e:af:94:fd:4d:02:e8:ed:6d:0e:b7:bf:
fc:08:23:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:16:14 2025 by rpki-client