Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133352e302f32342d3234203d3e20323132323338.roa
File: 3134352e37392e3133352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: df+37QaDxCZtNKaRcJseET837kN/TTA5d4YzF7XoDxc=
Subject key identifier: 17:CB:57:99:4A:9F:4F:19:7F:78:BB:06:4C:3F:57:E0:60:21:93:50
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 06B673EF9A9486C091522C91C3A413611FE6C600
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133352e302f32342d3234203d3e20323132323338.roa
Signing time: Fri 13 Jun 2025 19:08:17 +0000
ROA not before: Fri 13 Jun 2025 19:03:17 +0000
ROA not after: Fri 12 Jun 2026 19:08:17 +0000
asID: 212238
IP address blocks: 145.79.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:b6:73:ef:9a:94:86:c0:91:52:2c:91:c3:a4:13:61:1f:e6:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 13 19:03:17 2025 GMT
Not After : Jun 12 19:08:17 2026 GMT
Subject: CN=17CB57994A9F4F197F78BB064C3F57E060219350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d8:02:08:03:e0:c8:01:24:b6:38:b1:28:f9:
d4:00:ab:d3:71:11:c3:2d:80:4a:a4:dd:a2:70:3f:
8d:bb:6d:15:de:f1:2d:cc:ce:95:10:d4:d4:1c:96:
c0:c7:46:6d:97:03:14:18:95:c3:75:8d:0c:fb:ed:
a3:8c:36:1a:30:91:7d:91:d8:3b:de:6b:88:29:1c:
15:bd:0e:20:22:eb:3b:be:61:9d:df:37:f7:62:f7:
08:94:9f:f5:d2:3b:4b:18:e5:ff:11:50:3d:08:1d:
9e:78:44:16:0d:36:8d:9b:bc:39:2c:67:4e:e5:93:
61:72:da:87:bd:ca:64:3b:cd:2f:70:99:0d:ab:b9:
af:b1:d7:a8:4d:be:2b:4a:18:cb:d2:78:cb:f1:10:
a7:35:3e:76:a0:ce:a2:b9:43:3b:73:a1:d0:1f:ec:
de:44:19:cc:b3:8e:68:e9:9e:57:61:c4:53:00:74:
17:c7:80:43:83:83:c5:70:da:57:ea:dd:9c:5a:72:
45:ea:3b:30:af:39:75:5a:72:a3:51:62:1f:31:02:
43:82:54:93:b6:c0:e7:8c:00:79:78:86:cc:4c:18:
23:66:3f:7c:7c:e8:11:9e:b2:91:7c:06:b2:27:93:
fe:bc:81:4b:11:c1:75:36:e0:f2:0f:be:9c:79:71:
3a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CB:57:99:4A:9F:4F:19:7F:78:BB:06:4C:3F:57:E0:60:21:93:50
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133352e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.135.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ab:16:76:1b:c6:ab:11:c4:19:72:b5:bd:07:d3:e8:85:b9:
a7:f4:e9:71:ad:40:38:c2:c2:5d:f4:6c:73:85:3e:7e:50:a7:
cf:0c:ce:98:ae:0e:df:02:a3:ab:4b:05:0a:ba:9b:3b:da:18:
8d:be:d3:b3:ac:1d:05:25:53:18:12:9b:1e:f9:93:dd:f2:c1:
30:55:d3:9a:48:e5:94:4d:0e:f4:08:ab:48:c9:67:01:43:20:
af:28:2b:6f:da:b7:ff:c2:80:fe:88:f3:b2:9a:de:27:45:52:
ed:3e:96:23:34:d1:c4:5c:ae:04:61:bc:9c:a6:ea:af:b7:fe:
3b:f1:d7:cd:c7:5f:2d:f4:f6:04:9e:e9:aa:80:cf:93:b4:43:
c6:3e:4c:cf:9c:77:b1:a7:61:52:79:27:c8:9e:72:26:76:ae:
21:2a:b2:6b:7b:9e:57:02:3f:d8:17:2b:33:6a:25:95:f0:ff:
ac:73:05:7b:0a:c0:25:2f:c9:84:26:6f:52:55:69:9a:39:92:
de:13:36:f5:38:c6:bf:94:b3:f9:7d:01:83:13:a0:b8:ff:ac:
11:75:86:7a:ad:05:30:66:3f:c2:2b:0a:38:6e:0c:f0:08:ef:
0b:73:aa:46:6b:b4:bd:8d:fa:3b:b3:dc:55:4d:6a:4a:83:71:
49:80:c3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:10:40 2025 by rpki-client