Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3136342e302f32322d3234203d3e203437353833.roa
File: 38322e3138302e3136342e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: buXRHoMeJT9lisVylJMSUlD8LNnIhERH9xfXm/1P2jU=
Subject key identifier: 1D:EF:A8:B5:59:92:64:F5:49:01:B0:F0:2A:DF:20:C4:52:75:2D:AD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0335A78C256B275F2E1CAD0637CEEFDE5C961EEE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3136342e302f32322d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:45:11 +0000
ROA not before: Mon 27 Jan 2025 09:40:11 +0000
ROA not after: Mon 26 Jan 2026 09:45:11 +0000
asID: 47583
IP address blocks: 82.180.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:35:a7:8c:25:6b:27:5f:2e:1c:ad:06:37:ce:ef:de:5c:96:1e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:11 2025 GMT
Not After : Jan 26 09:45:11 2026 GMT
Subject: CN=1DEFA8B5599264F54901B0F02ADF20C452752DAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:b6:78:0d:e2:6a:58:a1:62:cf:23:77:c8:
cd:22:20:81:e4:a4:97:91:98:d3:15:74:2c:86:2e:
16:fa:e3:dd:e5:df:f1:c5:1d:9a:42:4c:00:df:bf:
5b:c8:54:d4:69:73:95:ef:ed:37:b5:0c:9b:22:aa:
ae:8c:d1:79:ca:d8:c3:24:35:9f:d5:ab:41:54:96:
57:a3:d4:b2:d0:65:e6:ca:41:eb:56:f3:41:87:15:
77:6d:aa:5b:d3:23:3c:72:ca:a4:4e:60:7a:46:a3:
0c:44:66:a8:d9:56:6a:03:8c:6c:4c:7c:26:7f:6d:
85:97:fe:ec:38:8b:73:ab:69:1f:e8:50:31:0c:2a:
2c:81:37:58:85:b7:d6:b5:ed:60:52:71:67:44:5a:
ea:3b:94:36:c5:0f:9b:bc:66:52:5d:f9:52:90:d5:
2a:6d:1d:4a:06:be:16:6c:12:51:17:cc:08:8f:db:
02:1e:53:07:12:b7:23:92:64:28:0f:2d:c7:4f:6e:
36:38:ca:19:4b:b9:d7:2f:2e:14:24:63:50:45:18:
82:bc:c7:44:5e:2d:d6:67:91:21:f5:ce:18:3f:ed:
61:88:74:c1:51:37:3f:b7:00:36:0d:7c:b4:87:29:
4b:10:6a:32:07:d0:9b:68:53:d5:5e:55:b0:91:7d:
5c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EF:A8:B5:59:92:64:F5:49:01:B0:F0:2A:DF:20:C4:52:75:2D:AD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3136342e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.180.164.0/22
Signature Algorithm: sha256WithRSAEncryption
55:84:4d:22:cb:0e:ab:69:87:d3:7a:78:6f:96:31:74:4f:38:
db:75:05:b3:10:1f:98:57:d8:80:d2:6f:43:ac:b7:37:f2:70:
63:51:7e:c1:32:18:e5:c4:7a:7a:5b:8a:41:6d:af:51:8b:5c:
05:df:81:25:ff:e9:ec:0f:2e:26:22:c9:f4:30:73:89:6e:21:
b9:ef:8b:db:20:dc:50:ae:b8:73:d9:9f:46:40:a6:db:ad:64:
b6:94:8d:5f:8b:77:87:b0:61:f6:57:67:3d:f5:bc:0a:5d:0b:
40:85:3e:2e:c7:8a:f4:1a:f1:85:49:33:71:22:09:97:aa:36:
7c:d2:fe:6b:c1:75:1d:ff:cc:0e:c7:62:93:6e:bd:cb:ac:e9:
4f:75:f5:f1:fd:2c:f6:43:0e:42:62:31:4d:63:e1:d2:c0:da:
32:2e:e9:fc:a4:88:29:d2:71:f3:60:7e:67:f3:ea:89:07:f5:
15:44:e5:06:2d:bc:b7:80:38:fe:21:df:0c:98:c1:92:c7:10:
b4:a2:5f:75:1b:d6:5d:ba:fd:1d:33:64:d7:70:05:43:5b:a9:
8c:26:f3:09:12:7c:3c:f7:56:65:ec:06:05:aa:25:ce:44:a1:
b0:f0:0a:16:23:82:e3:c6:66:81:88:e1:94:7e:68:43:a2:fa:
9c:33:b4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:54:53 2025 by rpki-client