Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e38322e302f32342d3234203d3e20313336373837.roa
File: 38322e3134392e38322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 4BZ+z8jbQk6tFJEHUL0ux4sCVBTWDnwtb34q2N2aAmE=
Subject key identifier: 54:BB:B1:93:03:A6:1F:5B:1D:18:C9:3A:20:B9:41:14:AF:AB:9C:29
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 294C02EE9905925128CB0618B4825FDA0F29B5F6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e38322e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 19:44:39 +0000
ROA not before: Fri 27 Dec 2024 19:39:39 +0000
ROA not after: Fri 26 Dec 2025 19:44:39 +0000
asID: 136787
IP address blocks: 82.149.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:4c:02:ee:99:05:92:51:28:cb:06:18:b4:82:5f:da:0f:29:b5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 27 19:39:39 2024 GMT
Not After : Dec 26 19:44:39 2025 GMT
Subject: CN=54BBB19303A61F5B1D18C93A20B94114AFAB9C29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:48:8b:c4:11:6d:c2:8c:7d:90:5e:48:8e:6b:
30:c5:d4:89:93:63:ac:69:84:f5:19:0b:4a:c3:23:
3b:c1:45:19:91:12:ea:19:36:c1:79:4e:1b:2e:04:
62:65:25:05:75:38:53:73:61:38:31:9a:3e:8a:28:
2e:f1:f6:e3:86:c5:bb:24:0e:dd:c4:e4:b6:d1:5b:
b5:ac:66:db:52:c9:6d:b1:2e:9a:f5:a0:d5:b6:1a:
60:3d:03:fb:80:1c:1a:b8:41:39:25:c9:3c:fd:47:
e9:8e:66:29:f5:3f:fe:3e:c5:36:bd:4c:32:16:66:
c0:63:db:7f:6a:f5:dd:e8:83:9d:00:d8:47:3c:50:
27:7c:cb:cb:70:75:85:0b:f4:19:57:be:e8:2c:b1:
63:93:cd:08:7c:e7:70:42:25:72:6e:1e:1e:61:78:
59:2f:6d:6b:f3:3a:92:c4:29:db:cd:54:0c:e1:9b:
07:60:d1:f1:41:a4:99:56:e3:b4:f2:c3:08:bd:bc:
61:f6:f4:35:ff:2a:ee:09:19:c3:18:cf:91:d2:96:
a7:49:b6:87:85:50:83:03:f0:e1:ec:67:99:5f:22:
e1:a7:5b:27:9b:87:9c:fe:11:ad:df:02:0d:d6:c8:
08:7c:92:d0:f2:9c:be:42:fb:81:b7:63:b9:4f:a6:
1c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BB:B1:93:03:A6:1F:5B:1D:18:C9:3A:20:B9:41:14:AF:AB:9C:29
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e38322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.149.82.0/24
Signature Algorithm: sha256WithRSAEncryption
11:32:87:fe:c9:49:1a:6f:41:9d:bf:2b:39:e0:b2:5c:df:70:
fa:86:c1:35:8c:cf:ed:7c:a9:97:32:27:0a:22:12:d8:dc:5c:
c4:d4:bf:af:25:f2:a3:28:31:f1:eb:85:4a:5a:4e:f1:94:f2:
cf:ce:2b:1f:21:ea:10:49:62:12:56:0f:9a:6d:7e:a5:1b:bc:
b4:7c:c4:0e:9c:95:3d:1b:4f:df:ec:e3:b1:d3:78:5c:4f:29:
98:92:28:42:60:52:2c:64:e5:18:47:8f:82:5e:6e:c4:84:48:
e8:db:c2:a0:a9:a1:53:98:cd:28:ab:be:34:20:b7:95:b4:da:
90:df:ca:85:93:92:c2:58:b1:c9:b2:1a:70:c8:44:51:41:ba:
6e:fa:8d:d1:0f:5b:49:cd:dc:82:0e:9c:b8:ed:cc:e7:42:60:
dd:e2:74:81:ad:54:61:4b:ee:93:39:8e:fe:4b:c8:d0:ce:7b:
bc:38:23:89:a0:de:38:72:22:b1:cb:eb:dd:81:ce:45:4b:f3:
f7:58:6e:04:12:ae:cd:14:96:38:39:18:0d:cb:18:c4:58:ef:
93:8a:2e:bb:85:b4:ef:af:80:fa:f9:98:ed:83:96:52:32:8a:
78:4a:74:e8:51:4a:db:80:2d:25:6c:ff:96:bf:b8:89:8c:57:
32:20:37:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:18:43 2025 by rpki-client