Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136342e302f32342d3234203d3e2035303635.roa
File: 3134352e37392e3136342e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier: z6lFqHrVfUFsfe0w+6lDxQ0aAaMB6HxXYDuzmvi1jEw=
Subject key identifier: F4:0B:1B:D2:A0:69:80:B4:6E:38:D7:58:03:1E:25:96:85:C2:E1:94
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7580931FAD05D2E85BB69EE7E3EA2F7EFE49BEF9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136342e302f32342d3234203d3e2035303635.roa
Signing time: Fri 13 Jun 2025 05:03:37 +0000
ROA not before: Fri 13 Jun 2025 04:58:37 +0000
ROA not after: Fri 12 Jun 2026 05:03:37 +0000
asID: 5065
IP address blocks: 145.79.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:80:93:1f:ad:05:d2:e8:5b:b6:9e:e7:e3:ea:2f:7e:fe:49:be:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 13 04:58:37 2025 GMT
Not After : Jun 12 05:03:37 2026 GMT
Subject: CN=F40B1BD2A06980B46E38D758031E259685C2E194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:a4:7e:1c:68:c6:f6:5e:81:d1:7b:1b:9c:
8b:0f:7f:f2:09:76:cb:6a:6f:77:1f:87:19:be:f4:
7c:c3:02:a7:13:81:a9:1a:50:5f:d5:2a:ec:95:76:
45:6d:f3:bc:df:f6:d1:de:d1:5a:04:76:01:d3:2e:
76:7e:6b:02:32:9d:45:3e:50:cf:a3:d3:55:a6:74:
82:2c:8b:50:83:9a:3d:73:2b:fd:a7:a1:1f:6e:03:
d1:ab:a3:0b:b6:ae:ed:6e:54:2e:9e:c0:5c:a1:40:
8c:09:e1:f2:bc:91:6a:8f:c0:f2:73:0b:5e:b7:e6:
72:4a:82:15:80:52:96:1a:f8:c1:9d:47:3e:8d:db:
69:84:9e:48:0b:bb:1f:14:ff:b2:ec:62:e8:71:04:
21:e7:61:ea:8f:75:70:0f:bc:9b:f3:9c:35:45:e2:
37:ac:ce:51:0b:61:af:3c:d3:a5:b8:7d:06:40:13:
40:5d:ea:c2:d5:3e:48:2e:cc:d5:0e:1b:b6:4b:d0:
09:3e:dd:6a:6a:e6:a8:d7:18:89:e9:4f:f8:3b:32:
7b:c2:2b:10:66:f3:91:64:53:24:2c:f3:53:84:0d:
93:09:94:13:8c:2a:b5:27:88:03:6d:f1:1c:8a:06:
79:f8:52:df:61:87:32:9e:40:b9:52:6c:16:3e:0e:
42:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0B:1B:D2:A0:69:80:B4:6E:38:D7:58:03:1E:25:96:85:C2:E1:94
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136342e302f32342d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.164.0/24
Signature Algorithm: sha256WithRSAEncryption
94:a7:05:92:71:94:f1:3f:f1:47:6a:1a:bb:31:e5:e3:74:e6:
3d:5a:5d:42:bc:a3:87:8c:9d:31:8e:e7:0a:72:4b:e3:79:39:
f4:e2:bf:53:c7:ce:58:7d:7f:ce:d4:ef:e6:36:88:8e:21:27:
de:50:11:d2:f6:c3:05:2c:9b:b1:61:0e:d0:d1:80:1c:dd:93:
0a:b4:89:2c:98:2e:6b:ea:9e:01:3d:11:6f:34:6d:3f:a0:f1:
15:cd:18:e5:13:a4:ec:04:7f:7b:21:a0:10:98:13:31:8a:4e:
fb:0a:5b:6f:ea:35:da:74:a8:1c:8f:36:36:2b:b8:18:08:03:
1a:f6:a4:7f:1a:bf:8d:dd:09:e4:4d:38:03:9b:db:94:80:0d:
5c:26:f4:59:01:c0:c1:b9:f1:01:e5:3d:55:1b:f1:d3:70:18:
00:3f:af:f3:74:56:f1:b0:3c:6a:43:eb:78:10:81:e2:2e:fe:
ed:23:61:ab:04:e4:e4:94:40:aa:3a:43:a2:95:4d:d1:66:6e:
dc:d9:cf:9d:5d:da:36:db:60:fd:52:c6:50:11:f2:2e:05:7f:
e6:73:ed:d8:ea:8d:7f:54:61:40:1c:47:fc:75:d7:5e:5e:7c:
50:24:99:36:fe:91:e0:5e:f9:ce:b4:d7:d1:69:f8:ad:f6:e6:
fa:63:e6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:54:35 2025 by rpki-client