Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3235302e302f32342d3332203d3e203430303231.roa
File: 38352e3233392e3235302e302f32342d3332203d3e203430303231.roa (raw, json)
Hash identifier: zEwD14WsSQCewyS+dL5BDmaLxKof9w/tBAAY4J9fhAo=
Subject key identifier: 6E:5C:4F:59:C6:EF:1B:7A:C5:3F:FE:04:08:C2:AA:32:DE:56:73:2D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7F66FDC520E35AD330DD0A447F2858D1C4B66935
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3235302e302f32342d3332203d3e203430303231.roa
Signing time: Mon 27 Jan 2025 09:45:04 +0000
ROA not before: Mon 27 Jan 2025 09:40:04 +0000
ROA not after: Mon 26 Jan 2026 09:45:04 +0000
asID: 40021
IP address blocks: 85.239.250.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:66:fd:c5:20:e3:5a:d3:30:dd:0a:44:7f:28:58:d1:c4:b6:69:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:04 2025 GMT
Not After : Jan 26 09:45:04 2026 GMT
Subject: CN=6E5C4F59C6EF1B7AC53FFE0408C2AA32DE56732D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2c:71:90:24:fc:36:dc:51:ca:83:c3:54:70:
dc:fb:b7:5f:57:58:b7:11:7c:dd:30:98:77:bc:b1:
d5:f9:f5:8d:da:e4:4e:e1:33:01:12:a3:27:39:ca:
3f:6f:39:fa:19:8d:bf:54:46:b6:b3:7b:8e:60:ee:
82:d4:67:ab:1d:0e:88:b8:b9:82:f3:e3:b2:8c:3d:
fa:c9:6a:b0:81:98:31:10:0f:9f:93:c1:b5:39:cd:
9f:1c:5b:f6:55:56:ed:c5:3e:8a:ea:0b:5c:1b:aa:
3c:fc:6d:27:88:5d:61:bb:af:4b:82:20:d7:f0:20:
09:b8:5d:ba:19:2b:b8:fb:b5:7d:c4:c5:ed:87:95:
7a:05:50:39:58:fd:75:f0:79:ba:6b:c8:fc:dc:9b:
3b:c5:f0:89:2d:12:e4:69:88:18:59:32:3f:57:65:
48:da:50:1f:a9:ab:59:60:5c:56:90:06:b6:8e:11:
77:44:9e:f9:f2:4c:bd:7d:2c:b1:25:6c:69:3b:83:
6c:35:6f:f7:9d:3b:78:f7:33:ee:2e:b0:b2:7b:7c:
bb:95:26:89:15:f2:32:ed:a2:0e:b3:7e:f4:8d:f2:
b2:8c:c8:3a:86:6f:59:9e:2f:61:db:06:24:42:51:
36:bb:47:05:a7:61:3b:29:a6:0b:3c:20:4b:e7:4a:
ba:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5C:4F:59:C6:EF:1B:7A:C5:3F:FE:04:08:C2:AA:32:DE:56:73:2D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3235302e302f32342d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.250.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:50:d7:e6:92:17:a1:9a:1e:cb:ce:94:8b:89:40:2c:80:9e:
34:10:33:00:f0:34:0c:2f:d3:4d:5c:ea:5c:03:72:0d:c7:26:
ed:6f:42:95:9a:a3:e5:ee:99:b0:7c:b5:d7:fd:54:ba:f4:35:
c1:a7:b4:78:37:1e:46:44:b7:25:9d:eb:e5:b0:bf:83:25:98:
7c:ea:be:cf:f7:fd:4e:78:81:3d:ab:80:47:50:2d:38:84:45:
2a:a6:49:67:bd:4a:f6:33:a5:e3:cf:38:b1:c1:72:17:47:d5:
50:7b:09:84:b6:4e:3b:d4:2a:7f:28:16:a5:10:4c:aa:fe:c5:
19:b3:a9:3a:ed:3d:3e:1e:e6:42:7b:4d:5f:f3:0f:32:08:5b:
fc:67:e5:62:7e:b5:e1:c9:05:b2:09:e0:33:f5:30:13:bb:b6:
ff:40:f1:d6:a5:52:7a:04:2e:a0:9f:ec:35:50:15:8b:1d:59:
eb:0c:f4:fa:89:96:9e:4b:cd:d8:16:66:49:c7:12:19:3c:b0:
8c:ef:8e:de:45:34:51:7c:8f:23:15:d8:c0:fe:af:08:91:22:
a5:a0:57:19:0c:a8:51:cf:64:53:88:86:2c:db:1e:c5:1d:4d:
ae:3a:2b:0e:ef:80:6f:6c:7c:74:bc:be:61:99:09:61:b6:0c:
98:9a:aa:8d
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUf2b9xSDjWtMw3QpEfyhY0cS2aTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMjcwOTQwMDRaFw0yNjAxMjYwOTQ1MDRaMDMxMTAvBgNV
BAMTKDZFNUM0RjU5QzZFRjFCN0FDNTNGRkUwNDA4QzJBQTMyREU1NjczMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaLHGQJPw23FHKg8NUcNz7t19X
WLcRfN0wmHe8sdX59Y3a5E7hMwESoyc5yj9vOfoZjb9URraze45g7oLUZ6sdDoi4
uYLz47KMPfrJarCBmDEQD5+TwbU5zZ8cW/ZVVu3FPorqC1wbqjz8bSeIXWG7r0uC
INfwIAm4XboZK7j7tX3Exe2HlXoFUDlY/XXwebpryPzcmzvF8IktEuRpiBhZMj9X
ZUjaUB+pq1lgXFaQBraOEXdEnvnyTL19LLElbGk7g2w1b/edO3j3M+4usLJ7fLuV
JokV8jLtog6zfvSN8rKMyDqGb1meL2HbBiRCUTa7RwWnYTsppgs8IEvnSrrHAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUblxPWcbvG3rFP/4ECMKqMt5Wcy0wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNTJlMzIzMzM5MmUzMjM1
MzAyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNDMwMzAzMjMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
Ve/6MA0GCSqGSIb3DQEBCwUAA4IBAQCKUNfmkhehmh7LzpSLiUAsgJ40EDMA8DQM
L9NNXOpcA3INxybtb0KVmqPl7pmwfLXX/VS69DXBp7R4Nx5GRLclnevlsL+DJZh8
6r7P9/1OeIE9q4BHUC04hEUqpklnvUr2M6XjzzixwXIXR9VQewmEtk471Cp/KBal
EEyq/sUZs6k67T0+HuZCe01f8w8yCFv8Z+VifrXhyQWyCeAz9TATu7b/QPHWpVJ6
BC6gn+w1UBWLHVnrDPT6iZaeS83YFmZJxxIZPLCM747eRTRRfI8jFdjA/q8IkSKl
oFcZDKhRz2RTiIYs2x7FHU2uOisO74BvbHx0vL5hmQlhtgyYmqqN
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:57:02 2025 by rpki-client