Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3234382e302f32342d3234203d3e20333935373933.roa
File: 38322e3139382e3234382e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: X2M6muCbcvYMae8Y5w3ufija+R02od5FILiEcslK0zA=
Subject key identifier: 3C:EE:BC:D1:0B:97:CE:ED:15:5B:91:DE:2B:92:F1:D4:4C:90:C5:EC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5B0BD0EE701593CA62711F940FCA83C423D00C72
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3234382e302f32342d3234203d3e20333935373933.roa
Signing time: Wed 21 May 2025 20:27:00 +0000
ROA not before: Wed 21 May 2025 20:22:00 +0000
ROA not after: Wed 20 May 2026 20:27:00 +0000
asID: 395793
IP address blocks: 82.198.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:0b:d0:ee:70:15:93:ca:62:71:1f:94:0f:ca:83:c4:23:d0:0c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 21 20:22:00 2025 GMT
Not After : May 20 20:27:00 2026 GMT
Subject: CN=3CEEBCD10B97CEED155B91DE2B92F1D44C90C5EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:5a:9d:24:bf:2e:63:64:dd:f7:63:f1:7f:
17:39:66:22:f2:d4:bc:bf:56:96:ae:6c:56:ed:f7:
bb:e3:f1:ec:96:fe:aa:d2:74:5f:e1:c4:42:65:db:
b3:b2:13:ec:6a:ad:38:80:e1:9c:84:18:7f:e9:60:
17:0d:b0:c1:31:29:99:be:de:a6:18:cd:f2:aa:52:
62:7d:21:ee:3b:c0:6e:02:97:45:ec:1d:df:43:d0:
99:c0:73:82:31:a9:e4:c0:1f:46:23:b7:27:a7:1a:
24:25:9a:de:e9:f0:83:8e:d0:c9:54:2c:25:9b:5e:
55:a8:82:ff:55:b5:8d:b8:8d:13:96:e5:0a:08:74:
ad:da:64:e6:37:1e:a5:8b:b2:46:2a:86:d6:a8:38:
41:33:ed:f2:f5:5d:85:9d:83:54:e0:86:94:8d:36:
1e:f5:8f:4e:e7:19:5a:0e:24:c6:ce:19:1f:62:35:
5c:83:65:b1:d8:ff:84:4c:03:2d:1e:a3:db:01:4b:
41:b3:b1:95:df:9b:b2:b5:92:58:a4:64:02:94:a7:
64:42:f4:f3:c4:08:e0:79:51:ea:8e:be:c5:fc:91:
7f:a0:d7:98:08:68:c8:74:d0:8f:0a:99:d0:7e:e6:
ec:68:cd:82:f8:5f:f9:e4:b5:ac:8a:88:21:ea:c1:
f5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EE:BC:D1:0B:97:CE:ED:15:5B:91:DE:2B:92:F1:D4:4C:90:C5:EC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3234382e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.198.248.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:37:c4:53:ee:11:12:82:d9:84:7b:2c:4b:b5:30:2b:c9:18:
3a:a3:b4:e9:16:84:25:d1:dc:41:2d:92:59:78:8c:b4:a1:ce:
f0:70:f2:8c:16:b9:b7:23:10:94:74:28:1b:d4:b1:a4:f6:3a:
01:3a:91:2b:01:ef:84:7a:e3:ed:6e:2b:19:6d:81:c3:0f:81:
80:94:f6:17:5f:c0:eb:fd:ea:f4:d1:2a:2b:0e:6c:93:0d:8c:
56:5b:91:f5:f4:cd:48:66:b9:c2:e2:f8:9c:94:84:04:1a:ba:
16:5e:52:de:89:5b:10:db:5e:f6:bc:67:05:d1:9b:b0:8c:8c:
b9:43:f3:ca:98:79:e6:17:41:cf:0c:7b:08:49:e5:7e:cc:b3:
11:0f:95:27:91:d7:7a:2b:4a:db:f4:37:b5:c1:74:a1:15:2e:
2b:15:9b:6c:b5:02:f9:6f:90:db:9b:94:06:8b:69:77:f3:09:
96:c3:3a:8e:19:e6:74:f1:15:63:cb:49:9f:18:46:a2:cc:9f:
76:46:bd:96:f8:30:7b:e5:74:97:c2:06:bd:d2:75:47:c4:92:
fe:83:78:cb:4c:d3:83:eb:7e:d9:87:d6:16:58:44:5a:c2:1b:
46:1e:05:59:ae:00:37:8e:6e:c8:0e:b2:7e:1e:8f:81:20:8f:
96:75:c2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:53:13 2025 by rpki-client