Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3136382e302f32322d3234203d3e203437353833.roa
File: 38322e3138302e3136382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: 3Q5aiLFRMGBlrxouKSoLqrWYkpDgNq+aKWER+pikZwE=
Subject key identifier: 4C:58:3E:6F:EB:95:33:80:ED:78:7B:80:52:9E:64:03:38:FA:59:F9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7A4C6D1A5856EC2C69705A66D76407837DBB36E2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3136382e302f32322d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:45:26 +0000
ROA not before: Mon 27 Jan 2025 09:40:26 +0000
ROA not after: Mon 26 Jan 2026 09:45:26 +0000
asID: 47583
IP address blocks: 82.180.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:4c:6d:1a:58:56:ec:2c:69:70:5a:66:d7:64:07:83:7d:bb:36:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:26 2025 GMT
Not After : Jan 26 09:45:26 2026 GMT
Subject: CN=4C583E6FEB953380ED787B80529E640338FA59F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:93:94:95:cf:14:80:d5:27:b1:dd:63:fd:42:
6c:26:50:fa:35:64:77:4c:2b:05:3b:4f:48:16:f6:
c1:cb:db:17:f3:98:dd:98:ca:85:e8:cb:12:7a:a0:
fd:34:f1:24:ab:93:30:2b:ca:02:48:4c:f4:1b:36:
7c:8e:4c:fe:2b:dc:09:e5:fa:7a:9c:a5:01:9c:4e:
40:38:46:53:a5:20:19:da:ff:c8:bc:29:e3:d5:42:
00:f4:91:16:80:dd:2e:2a:84:4c:19:78:ad:41:c4:
c6:53:e9:56:c3:f0:aa:1c:de:72:f9:a3:c4:64:b4:
77:ae:87:61:b1:1e:b2:53:f9:d8:4e:d1:de:d2:29:
be:23:c5:86:c7:dc:fb:6a:e4:fc:e1:2a:98:f8:2e:
56:55:c6:11:42:26:a2:38:43:11:31:5d:d4:47:58:
39:9b:7f:dd:f0:30:a8:4d:87:e4:af:8d:19:6c:54:
16:68:23:0c:88:ed:3c:8d:7b:e0:fd:8e:09:85:2a:
06:cb:76:6c:c2:7e:2b:b8:0c:bf:f1:64:1e:70:3c:
db:c8:e1:19:64:90:ad:53:07:0f:75:15:5c:54:97:
67:9b:9b:f4:e1:52:8a:91:38:9f:28:8b:f4:69:f3:
f9:18:ed:e1:44:12:0b:56:cd:1b:62:00:a2:ef:a5:
31:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:58:3E:6F:EB:95:33:80:ED:78:7B:80:52:9E:64:03:38:FA:59:F9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3136382e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.180.168.0/22
Signature Algorithm: sha256WithRSAEncryption
06:8a:f8:b0:27:cb:50:f7:cb:5c:60:f2:6e:83:9a:f4:73:f7:
ec:cb:4e:47:26:b0:ec:0d:f4:ab:27:bf:fa:8a:47:f4:36:74:
15:87:9d:e9:02:ac:73:c8:a4:9a:b5:ed:24:e5:a4:24:13:89:
05:8a:e3:a2:8f:e0:69:16:77:bb:b7:79:57:92:9c:64:c1:18:
78:06:14:38:24:7e:db:95:63:8d:a4:58:61:02:a7:c7:af:18:
fa:f9:3b:fb:46:fe:4d:8f:77:f0:62:5a:b5:4b:b1:96:77:6a:
f6:9c:de:7c:88:8f:fb:6b:62:06:a8:e4:53:a2:ff:3d:5c:00:
09:06:b7:0d:d6:bf:d2:e9:c8:1b:8a:b8:a8:e5:3b:cb:7a:33:
f4:52:16:b2:d0:a4:65:a9:fd:6d:6c:22:f7:65:4d:19:32:4b:
8d:c4:8e:ba:02:e2:ab:b4:01:f7:0f:53:d1:c1:61:31:c1:db:
e8:20:8d:a0:1d:d4:4b:21:a2:4f:c0:3a:60:fd:9b:17:24:6b:
44:ad:22:bf:37:42:f3:3c:a4:0e:12:26:06:4b:d8:68:a6:f3:
46:88:f6:1a:91:cf:61:27:3d:62:42:b5:5e:ec:ca:1e:3c:77:
09:fd:d1:2b:5f:8b:d3:14:f0:c4:e9:a2:7f:5e:93:9c:cb:b8:
1b:e0:7b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:59:39 2025 by rpki-client