Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3135342e302f32342d3234203d3e203437353833.roa
File: 38322e3138302e3135342e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: JokuVTOJu7+715i++MNl9X/GQ1xlR1uDUAdw1TV3sB4=
Subject key identifier: 1E:27:1B:B6:B2:50:B5:81:1A:52:62:37:C2:61:32:0D:63:7B:5E:51
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 11F340ABFAFC29EB2497A5B93174D33F178BA94B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3135342e302f32342d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:45:28 +0000
ROA not before: Mon 27 Jan 2025 09:40:28 +0000
ROA not after: Mon 26 Jan 2026 09:45:28 +0000
asID: 47583
IP address blocks: 82.180.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:f3:40:ab:fa:fc:29:eb:24:97:a5:b9:31:74:d3:3f:17:8b:a9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:28 2025 GMT
Not After : Jan 26 09:45:28 2026 GMT
Subject: CN=1E271BB6B250B5811A526237C261320D637B5E51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a9:a9:0e:fa:c9:72:4a:2f:f9:fa:f9:d9:f9:
fc:8c:cc:da:eb:49:3e:08:15:95:62:9e:43:4f:cb:
23:f8:55:dd:63:57:e0:10:6a:49:b0:54:f8:2f:28:
ba:58:77:ca:ee:cd:51:8f:ce:5d:ea:ab:cb:a4:34:
e6:2f:41:ee:8f:e9:73:9a:d5:e2:17:84:3f:5a:72:
b2:e4:f0:67:86:05:b8:b4:c9:73:6c:ac:6e:d8:3d:
c6:a1:de:85:69:9a:d6:cf:55:96:b1:0d:e7:f4:95:
67:f7:83:36:76:5d:bf:cf:15:22:c9:48:4e:77:da:
9d:53:79:25:56:7d:80:ec:9f:4b:85:ac:50:5b:98:
6f:ef:79:0f:91:6b:14:81:a3:5d:7a:c4:cf:6f:71:
4c:a4:20:24:9e:2b:39:74:df:d6:86:46:8c:5c:85:
f8:3d:4c:a2:a0:e3:21:fd:31:45:c3:68:49:5f:5a:
84:b6:e0:e4:3f:25:69:53:4f:b4:9a:53:17:fd:04:
37:88:fc:b4:7b:23:8d:84:0f:c8:fd:aa:bf:b4:8e:
e4:68:49:3a:b5:6d:38:de:2d:3b:61:28:fc:b1:44:
64:33:5f:b0:9a:65:61:53:c6:42:4d:5b:1e:9d:6e:
fd:e9:de:82:6a:e5:e0:73:1f:b4:93:16:d9:a6:95:
15:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:27:1B:B6:B2:50:B5:81:1A:52:62:37:C2:61:32:0D:63:7B:5E:51
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3135342e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.180.154.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f8:d1:06:3a:4e:c7:68:86:ce:0b:d2:73:63:32:9e:23:d3:
7a:da:a0:77:94:48:1e:33:1a:fd:a6:fa:c8:22:d9:3b:1c:60:
81:ac:62:10:34:2c:6a:24:01:e5:cc:1a:b6:40:2a:7c:64:c0:
d9:d3:b4:4c:52:a0:b9:e5:ad:67:f8:07:38:a0:0e:92:87:f8:
9d:7b:90:1e:33:8f:02:93:a9:36:89:5a:93:35:3d:e7:86:e9:
21:3e:8a:1f:fc:12:c6:5e:f1:1f:57:d1:b2:78:42:96:af:95:
78:68:2b:c1:5a:f5:d8:ba:ed:0b:97:ae:09:ad:b0:e6:ff:68:
35:92:82:ec:d5:15:8a:c7:b8:1b:b5:68:06:64:d6:d0:93:2e:
ec:54:c6:93:a5:f3:ff:21:3c:fd:53:7b:d5:19:4c:60:ea:c4:
54:61:69:7b:cd:04:3a:98:67:82:18:05:f9:99:cc:a0:e4:71:
ed:08:d0:5a:8b:3f:47:1a:a9:19:c1:89:93:cf:90:2a:06:03:
b3:29:d1:49:fc:c8:de:29:40:78:f8:04:bb:f9:c2:79:da:44:
9a:37:e4:c5:eb:be:78:b5:1e:85:66:16:a1:6b:e6:59:1a:f9:
be:af:7a:01:b0:6d:13:b6:86:13:45:65:d1:57:39:7c:42:57:
69:d8:cc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:17:35 2025 by rpki-client