Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3131322e3234302e302f32322d3234203d3e203437353833.roa
File: 38322e3131322e3234302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: 5aY16F3JS4XehY4iLRklSGO1jQUJoIhwWLPyKqVC2Yk=
Subject key identifier: 43:CF:42:94:B2:3F:AC:3A:07:79:7F:58:7C:DA:FD:8D:98:00:2C:E8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1A70BD0EE4B543EE279F19B9274F424356E13EA0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3131322e3234302e302f32322d3234203d3e203437353833.roa
Signing time: Wed 28 May 2025 20:46:31 +0000
ROA not before: Wed 28 May 2025 20:41:31 +0000
ROA not after: Wed 27 May 2026 20:46:31 +0000
asID: 47583
IP address blocks: 82.112.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:70:bd:0e:e4:b5:43:ee:27:9f:19:b9:27:4f:42:43:56:e1:3e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 28 20:41:31 2025 GMT
Not After : May 27 20:46:31 2026 GMT
Subject: CN=43CF4294B23FAC3A07797F587CDAFD8D98002CE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:08:05:5e:25:6a:00:94:18:85:84:78:e9:1c:
25:54:a3:75:bc:61:cf:81:f4:58:12:46:90:29:c2:
22:38:21:ff:f5:cf:e7:ed:61:2b:50:3b:55:61:fb:
c1:9c:88:5d:f2:d5:f1:8e:80:13:a5:61:81:2a:26:
02:85:df:74:c0:36:20:76:59:67:90:c0:d3:fc:db:
7b:7a:c5:4e:c8:43:70:3a:ad:7e:51:15:f7:dc:93:
cc:dc:eb:0d:8e:e7:35:10:bf:51:91:ac:4b:a3:55:
4e:dd:27:66:7f:b7:80:41:be:37:3c:2e:a2:14:55:
de:5b:25:a7:48:1f:d7:b5:46:a6:c5:7d:f3:26:4d:
cb:24:2e:44:89:4a:f1:f7:0d:e2:33:b7:19:62:fc:
2c:56:52:77:16:8d:2b:22:d4:82:69:fe:c7:23:82:
6f:0b:8a:d9:d6:1b:4c:cd:44:6a:4a:8d:d2:49:00:
49:3b:d2:70:e7:a7:61:33:4a:36:c1:38:44:cf:da:
51:ff:61:1a:01:ab:64:95:e8:00:a8:c3:c2:4d:13:
3f:78:cd:a3:03:3b:44:cc:b8:44:da:28:3f:c9:b5:
44:1f:48:4d:cd:9d:dc:dc:a9:93:3d:44:e3:a4:d2:
67:8d:23:3e:8c:e4:f2:c1:e2:f7:90:1b:7e:89:6c:
27:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CF:42:94:B2:3F:AC:3A:07:79:7F:58:7C:DA:FD:8D:98:00:2C:E8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3131322e3234302e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.112.240.0/22
Signature Algorithm: sha256WithRSAEncryption
67:2d:70:c4:69:f9:db:ed:76:26:c9:32:44:cb:77:a7:a3:87:
7e:8b:1f:6f:97:ab:20:b6:a7:a0:74:05:d2:0c:a0:6d:b0:00:
42:2e:63:aa:bf:07:3a:88:f4:8a:a5:3d:60:29:f4:89:26:3f:
75:8e:76:e4:a3:5b:95:7e:f0:e8:74:5e:a0:c4:47:cf:ef:d9:
c0:7c:0d:0d:d2:bf:38:09:37:69:cc:ba:e6:00:ab:9b:87:1b:
f0:0c:72:fe:56:2e:e5:0c:d7:9e:e7:1c:09:4b:e1:d3:c5:a5:
82:b7:23:ca:b1:de:f2:80:4a:bd:ed:80:dc:9b:b2:38:fe:6b:
cc:13:36:1e:69:90:70:06:8b:7f:cb:52:a7:38:77:37:c9:88:
20:ee:20:53:af:d7:10:ec:a3:13:4e:7f:0b:ff:68:59:33:73:
69:62:b6:87:17:1f:9f:34:01:c2:49:c5:2a:f3:04:79:1d:ba:
b1:c6:d9:46:d9:b4:96:c2:24:c6:3c:fd:a3:0b:df:25:94:44:
46:ef:17:8c:44:bb:9e:82:69:57:b6:e4:43:bf:72:e6:fd:01:
d0:4e:a2:d2:8f:4c:73:1f:31:d6:a0:4b:9f:af:30:2b:10:ef:
5c:1c:95:54:93:24:5b:a6:ab:47:92:64:3c:9b:8c:57:a9:00:
bb:c2:9d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:49:04 2025 by rpki-client