Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3233322e302f32312d3234203d3e203437353833.roa
File: 38322e3139382e3233322e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: Kbe9rKzqHw9xYQvJ0EOlrUeDIEJBhIHj8X1wJhCco3c=
Subject key identifier: F8:EF:4B:9E:ED:FE:A8:4E:93:5E:44:E4:6A:5B:86:CA:20:6F:EC:73
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3E328368094E34317BA14304B411C925EA88DDD7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3233322e302f32312d3234203d3e203437353833.roa
Signing time: Mon 10 Mar 2025 15:47:24 +0000
ROA not before: Mon 10 Mar 2025 15:42:24 +0000
ROA not after: Mon 09 Mar 2026 15:47:24 +0000
asID: 47583
IP address blocks: 82.198.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:32:83:68:09:4e:34:31:7b:a1:43:04:b4:11:c9:25:ea:88:dd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 10 15:42:24 2025 GMT
Not After : Mar 9 15:47:24 2026 GMT
Subject: CN=F8EF4B9EEDFEA84E935E44E46A5B86CA206FEC73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:47:49:0c:6b:94:d3:8d:bf:08:b0:2f:e1:28:
50:1c:2f:1f:59:86:dd:22:b5:b9:d1:03:58:25:ce:
a8:21:2a:e8:48:ac:22:cf:05:56:7b:4b:13:7c:cd:
a1:18:68:f8:0e:03:ca:a8:b0:dc:34:0e:2e:01:9a:
6d:44:2f:80:94:16:6e:20:4a:2e:5b:12:1b:f6:2e:
22:0f:d4:f3:c3:8b:1c:e0:82:47:f2:97:a9:f1:12:
c4:6e:e9:b5:03:0b:03:5f:a9:a3:af:e0:3c:a2:03:
84:6c:f1:93:ed:be:60:0d:73:1e:07:35:61:8f:34:
bd:1a:35:96:dc:90:8e:b5:3b:10:2a:a5:e6:7b:10:
c6:1f:61:b0:af:cb:be:ed:f7:45:55:ea:68:28:0e:
9b:6b:32:05:c4:09:6d:48:38:a8:6a:96:b3:bb:bb:
4e:96:ea:4f:6f:72:3b:07:d3:ce:7b:43:53:ad:51:
20:e9:30:b8:f6:80:e0:b1:46:b5:b1:2c:0c:59:57:
6d:b0:f8:33:3d:cb:52:8c:9b:5e:5e:ca:aa:55:67:
75:8a:82:12:0d:d3:a2:de:7f:ca:a0:aa:14:39:67:
98:4d:bc:91:2c:fe:c4:f6:d0:13:7e:00:0e:33:c7:
eb:42:87:02:d5:29:42:f1:b8:be:8c:b8:5e:96:0b:
a7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EF:4B:9E:ED:FE:A8:4E:93:5E:44:E4:6A:5B:86:CA:20:6F:EC:73
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3233322e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.198.232.0/21
Signature Algorithm: sha256WithRSAEncryption
06:cd:2a:8f:f5:53:1d:9d:e2:78:25:79:d3:9f:ba:09:58:4b:
33:1f:f4:2b:11:01:2d:36:ee:1d:d0:74:74:b9:72:05:89:28:
b7:68:db:e1:63:ba:ae:a5:ed:4d:b1:02:12:cb:00:16:73:55:
7c:f9:a5:48:03:56:a1:6f:c2:c3:a7:5c:f9:23:97:2b:f5:65:
d2:15:9a:df:c1:92:34:f4:50:0b:1e:40:5d:4a:8f:a5:7f:36:
46:63:76:0e:3b:7c:ee:e2:80:79:e9:2a:22:95:cb:d9:1c:3e:
87:13:a9:1b:58:a3:bf:bc:42:92:ff:f7:bd:b2:f2:8a:60:5b:
ee:75:1a:22:0c:0e:74:2f:7b:93:b8:94:9c:65:4b:c5:4f:f0:
34:f1:e9:6d:d1:0f:9e:6b:aa:7d:28:fe:b2:20:58:b7:20:bf:
65:81:de:ea:33:3e:1c:03:3e:a6:b1:57:67:55:eb:fa:60:af:
85:31:4d:cf:44:62:cd:20:6f:ea:4c:8e:9b:a2:cf:13:a2:5d:
80:9b:c7:11:b6:af:61:6a:5a:76:14:dd:d4:db:3e:58:24:ab:
d6:9d:f8:31:4a:36:71:72:3d:ad:8c:8c:d8:5f:d1:93:60:f8:
24:5b:12:57:dc:54:e4:46:c1:61:f1:e4:52:94:24:d5:08:60:
74:85:5f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:04:53 2025 by rpki-client