Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e34362e392e302f32342d3234203d3e20323037313337.roa
File: 38392e34362e392e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: VAm04DUEpZqe9rBfZVuCkw6QusgVesK1ivrqbIUVcw8=
Subject key identifier: 5D:5E:B2:80:30:0A:FF:64:17:5E:11:CC:78:30:C7:3C:8F:B1:56:B8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 16CEBD9353AD8FB6AAB1142062DB6D63C1E98573
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e34362e392e302f32342d3234203d3e20323037313337.roa
Signing time: Thu 16 Jan 2025 10:06:43 +0000
ROA not before: Thu 16 Jan 2025 10:01:43 +0000
ROA not after: Thu 15 Jan 2026 10:06:43 +0000
asID: 207137
IP address blocks: 89.46.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:ce:bd:93:53:ad:8f:b6:aa:b1:14:20:62:db:6d:63:c1:e9:85:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 16 10:01:43 2025 GMT
Not After : Jan 15 10:06:43 2026 GMT
Subject: CN=5D5EB280300AFF64175E11CC7830C73C8FB156B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c9:16:57:bf:bb:e3:11:29:09:74:4d:da:a0:
1e:51:b3:53:aa:25:8e:b6:18:d0:59:a5:0c:2d:f1:
1e:0d:87:4d:43:11:57:20:a1:af:24:c9:8a:23:15:
72:5b:bd:df:93:56:f1:01:5f:28:1c:76:d9:46:0d:
9a:e3:8e:02:4d:bc:d8:f2:da:ab:a2:fc:4d:b3:41:
f5:17:f8:2a:c8:a6:68:b2:54:21:4f:f6:cc:e5:4f:
1a:35:e3:a7:89:dd:1e:86:2e:68:b7:7b:f4:24:f0:
47:27:7d:67:89:64:14:d7:04:31:3d:5f:dd:67:59:
44:91:39:e2:b6:88:3f:8e:6c:05:fb:ee:24:7e:8a:
f5:68:89:3c:cc:d1:cc:85:6b:c4:b1:e4:4a:1d:ce:
d9:c0:75:00:35:fd:75:29:9f:4c:d5:13:27:a7:d8:
ca:ec:e5:cc:dc:af:26:d6:68:d7:18:5a:22:b8:3a:
34:3e:17:b8:0a:77:44:9e:78:4e:b0:7f:e1:02:67:
43:fe:1b:54:73:77:31:b3:cb:8a:59:54:4d:79:2e:
02:2e:80:67:66:5e:f7:c4:fc:7c:42:83:f8:84:c2:
76:a6:f2:19:58:52:39:51:e9:4e:8f:39:2a:b8:14:
e0:a2:31:4f:1f:04:0f:70:85:b8:40:41:c9:d9:7a:
fd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5E:B2:80:30:0A:FF:64:17:5E:11:CC:78:30:C7:3C:8F:B1:56:B8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e34362e392e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.9.0/24
Signature Algorithm: sha256WithRSAEncryption
16:7a:d6:a6:81:3a:95:e6:4c:3e:38:9a:de:85:21:48:b1:0e:
51:1f:d9:ca:e1:2e:4c:53:e0:25:93:e0:92:0b:0d:67:d0:48:
c9:f0:27:52:02:9a:b1:e0:9b:05:a8:a3:99:b0:b9:05:d1:5b:
19:68:c6:ab:cb:c6:c7:12:dc:b7:b4:30:d0:c6:c1:9e:d9:a6:
49:a9:48:85:09:fc:4d:7e:b4:15:68:1c:86:ec:0a:53:6d:39:
b9:e1:86:dd:72:d7:3d:56:2d:2e:e1:39:21:02:3c:83:6a:c6:
4d:2d:04:27:d4:e3:d8:5b:b6:da:ca:7b:70:f6:7c:5d:8e:1b:
b6:3c:03:a4:aa:f9:ec:46:25:ed:a2:c2:cf:4c:68:37:b9:d8:
ac:1f:d3:af:c1:c4:70:25:c1:dc:4d:59:48:9c:41:2b:9c:4a:
fe:27:09:ea:a6:6c:50:0f:9e:db:05:c3:15:5b:3f:68:e9:65:
56:a8:ea:92:54:a9:e7:74:c4:aa:3a:a3:7b:4d:3e:8e:d8:9a:
c7:6f:8f:93:59:68:73:c3:91:99:78:9d:76:50:87:28:e8:f8:
9a:6d:e6:32:c6:d0:cb:1f:73:8c:eb:7b:c1:a8:d2:4e:40:11:
54:3b:81:2f:ac:ca:82:80:13:d1:03:72:3e:47:9e:a8:e9:4a:
da:15:81:72
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUFs69k1Otj7aqsRQgYtttY8HphXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMTYxMDAxNDNaFw0yNjAxMTUxMDA2NDNaMDMxMTAvBgNV
BAMTKDVENUVCMjgwMzAwQUZGNjQxNzVFMTFDQzc4MzBDNzNDOEZCMTU2QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTyRZXv7vjESkJdE3aoB5Rs1Oq
JY62GNBZpQwt8R4Nh01DEVcgoa8kyYojFXJbvd+TVvEBXygcdtlGDZrjjgJNvNjy
2qui/E2zQfUX+CrIpmiyVCFP9szlTxo146eJ3R6GLmi3e/Qk8EcnfWeJZBTXBDE9
X91nWUSROeK2iD+ObAX77iR+ivVoiTzM0cyFa8Sx5EodztnAdQA1/XUpn0zVEyen
2Mrs5czcrybWaNcYWiK4OjQ+F7gKd0SeeE6wf+ECZ0P+G1RzdzGzy4pZVE15LgIu
gGdmXvfE/HxCg/iEwnam8hlYUjlR6U6POSq4FOCiMU8fBA9whbhAQcnZev1bAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUXV6ygDAK/2QXXhHMeDDHPI+xVrgwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzOTJlMzQzNjJlMzkyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzczMTMzMzcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZLgkw
DQYJKoZIhvcNAQELBQADggEBABZ61qaBOpXmTD44mt6FIUixDlEf2crhLkxT4CWT
4JILDWfQSMnwJ1ICmrHgmwWoo5mwuQXRWxloxqvLxscS3Le0MNDGwZ7ZpkmpSIUJ
/E1+tBVoHIbsClNtObnhht1y1z1WLS7hOSECPINqxk0tBCfU49hbttrKe3D2fF2O
G7Y8A6Sq+exGJe2iws9MaDe52Kwf06/BxHAlwdxNWUicQSucSv4nCeqmbFAPntsF
wxVbP2jpZVao6pJUqed0xKo6o3tNPo7Ymsdvj5NZaHPDkZl4nXZQhyjo+Jpt5jLG
0Msfc4zre8Go0k5AEVQ7gS+syoKAE9EDcj5HnqjpStoVgXI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:04:55 2025 by rpki-client