Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3234362e302f32342d3332203d3e203531313637.roa
File: 38352e3139302e3234362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: MgyqGqpbGM+DzG1wwkinbi1kfuUjyt+5xh0sliq05SY=
Subject key identifier: 9B:F5:50:36:36:F1:9B:A0:3B:63:23:0E:85:67:DC:35:0B:BF:A4:7B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3708F421E0E9F25DD37BC748202287A395BB6359
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3234362e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Jan 2025 09:45:14 +0000
ROA not before: Mon 27 Jan 2025 09:40:14 +0000
ROA not after: Mon 26 Jan 2026 09:45:14 +0000
asID: 51167
IP address blocks: 85.190.246.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 15:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:08:f4:21:e0:e9:f2:5d:d3:7b:c7:48:20:22:87:a3:95:bb:63:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:14 2025 GMT
Not After : Jan 26 09:45:14 2026 GMT
Subject: CN=9BF5503636F19BA03B63230E8567DC350BBFA47B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b4:70:56:70:72:56:b5:79:a6:58:03:c5:b5:
44:02:4e:1b:30:7f:43:67:cf:be:7e:f6:49:83:64:
d0:13:28:91:50:7b:b3:e6:9f:d6:7e:cc:fa:4b:b0:
bf:ae:23:30:58:2f:c4:24:4e:89:f0:78:4e:7f:04:
a3:f6:5b:e2:23:a7:16:0a:e9:fb:af:80:93:0a:51:
7b:c0:25:97:c5:45:8b:85:61:6c:aa:63:a8:d9:70:
87:a7:3b:95:79:35:3f:b2:30:93:59:1f:97:a2:0c:
cf:42:6e:86:46:f4:31:4d:95:51:c2:d2:5d:59:40:
0d:82:04:cf:ad:dc:78:8d:34:c2:e5:2d:51:bb:b9:
74:91:1f:43:76:ae:78:30:5a:a6:76:62:78:d2:dd:
d0:7c:a8:8e:7b:0c:a1:f9:28:d2:90:55:78:e0:83:
ef:f5:0b:63:4a:97:6c:fc:94:ff:05:4d:48:b8:0b:
11:c5:fb:b2:fc:c9:90:a3:8a:3f:ca:bf:f9:99:7d:
d5:09:1f:e1:2b:26:09:8c:0f:4c:32:73:4e:ba:4b:
b5:d7:e7:16:3f:a8:93:08:78:48:ef:85:e9:e2:ba:
32:bc:79:75:2b:20:49:05:39:16:06:5a:40:ab:b1:
91:62:7f:6f:22:96:ec:81:95:8a:8e:99:51:14:71:
80:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F5:50:36:36:F1:9B:A0:3B:63:23:0E:85:67:DC:35:0B:BF:A4:7B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3234362e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.190.246.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:fe:0c:2e:35:53:da:fd:bb:57:67:97:7d:53:19:dd:8f:a4:
be:28:4e:ae:fc:a8:07:ae:01:45:42:37:2b:00:ab:c4:b8:36:
bd:ea:db:4d:c2:1b:f2:4a:dc:e8:9d:15:79:07:f2:6a:2a:5e:
f0:64:8e:80:85:79:ee:6e:9b:6c:4e:74:26:f7:4e:63:0b:25:
23:44:69:13:41:13:9a:ff:5a:fb:94:49:11:ef:33:e9:f3:1f:
a9:df:ac:bc:62:dd:51:65:cf:40:72:cb:00:93:64:76:d6:80:
17:bc:b2:b1:c7:ba:4f:c8:99:5c:bf:b4:f3:80:cd:8c:95:66:
ed:93:69:6a:db:1a:9b:d8:9f:1a:33:b2:da:5b:37:8c:e1:8b:
a9:bb:7f:d3:9e:26:22:38:dd:94:ce:1f:6a:c4:a6:18:48:f9:
48:5d:19:e9:6b:d3:09:04:c8:3a:e1:bc:50:af:c8:71:1c:a9:
e6:90:49:ab:aa:f0:3a:82:c1:04:d7:5f:fe:3b:41:62:05:91:
c4:2d:93:81:7f:bf:f0:71:bc:47:f4:0c:fb:8b:87:d5:07:f0:
89:4e:05:55:0c:48:17:8c:c4:9f:ce:fc:34:33:df:02:ac:dd:
98:ba:e3:40:1d:ee:d6:c5:b8:67:72:a7:f9:de:fc:88:a1:e5:
f7:77:59:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:19:45 2025 by rpki-client