Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3230382e302f32312d3234203d3e203437353833.roa
File: 3134352e37392e3230382e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: 2njbPOUflzf89FJaESCl0VqXtKkukUqUUVKEb+o9Pzk=
Subject key identifier: 79:F3:47:E4:9F:D9:F6:78:AF:0F:BC:54:58:70:01:50:7E:A4:3A:D0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2179BB126224B36033DA6046BD9D63813E82044D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3230382e302f32312d3234203d3e203437353833.roa
Signing time: Thu 10 Apr 2025 10:08:57 +0000
ROA not before: Thu 10 Apr 2025 10:03:57 +0000
ROA not after: Thu 09 Apr 2026 10:08:57 +0000
asID: 47583
IP address blocks: 145.79.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 12:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:79:bb:12:62:24:b3:60:33:da:60:46:bd:9d:63:81:3e:82:04:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 10 10:03:57 2025 GMT
Not After : Apr 9 10:08:57 2026 GMT
Subject: CN=79F347E49FD9F678AF0FBC54587001507EA43AD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e8:27:73:3c:2b:f3:95:8f:c6:3b:e0:f5:9e:
4f:a2:35:07:fb:a3:ba:b3:0f:86:f5:e5:99:75:71:
f6:7c:5c:61:6f:17:78:56:f7:9f:b4:ad:87:48:90:
d2:40:ab:84:17:f7:bb:a3:72:cc:34:01:97:fd:37:
c7:f4:02:36:2a:40:ee:18:c2:0c:58:d2:76:31:b6:
db:ee:81:e9:84:ff:c3:2a:6c:42:c7:e0:bf:88:d0:
23:bf:d9:2a:23:b2:b1:b1:2c:65:81:8f:7d:3c:2d:
a0:57:1c:90:8a:ad:7c:70:8c:ce:45:9f:99:f1:d6:
31:d5:10:88:41:5f:79:a8:99:8a:37:df:69:06:29:
b9:e8:24:7b:2d:a1:5a:3c:0e:5a:d6:c5:4c:7d:2c:
93:37:ae:8d:3b:37:99:e7:54:62:43:ec:22:7c:1c:
e4:b8:b7:e1:85:84:83:fe:c4:76:18:72:e4:94:1f:
23:4f:35:94:b2:9f:a2:b4:29:dd:b5:db:44:bb:da:
f0:b5:36:1c:3a:8d:52:5b:24:37:73:4d:34:f8:2f:
5a:ee:ed:43:cf:d6:87:2b:c0:0a:a9:da:55:c7:8a:
6a:2e:ae:ce:c7:e8:74:fb:f7:3e:d6:c4:e8:98:90:
bf:75:7c:f5:d4:0e:06:1b:8b:0e:a0:79:79:cc:5f:
97:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F3:47:E4:9F:D9:F6:78:AF:0F:BC:54:58:70:01:50:7E:A4:3A:D0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3230382e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.208.0/21
Signature Algorithm: sha256WithRSAEncryption
70:ae:04:b6:b5:58:7c:7b:09:d9:2a:1a:88:f0:87:aa:ed:bf:
2b:2c:8a:25:51:30:47:aa:fe:de:8e:b5:f4:b4:df:21:b7:f8:
92:db:79:f4:c4:9c:22:7f:44:e2:e2:07:75:89:9b:7e:f0:52:
90:1a:d5:ff:94:1f:45:2c:98:ff:fd:8e:ca:ea:60:bf:0b:95:
fa:78:1c:07:d7:96:e9:c7:b9:fe:8f:2c:e7:34:17:ce:a4:5d:
49:07:81:23:73:8a:df:75:94:44:ba:e4:f2:8e:78:76:11:ff:
c4:8e:26:72:3d:e4:27:6c:08:86:2f:fc:65:60:4f:a9:5f:0b:
1b:35:b5:85:53:7d:76:e3:1a:d2:1a:65:b7:25:25:9f:ab:06:
14:ec:a9:4a:57:52:1d:4c:d5:78:e5:a4:5c:12:3a:fb:c7:59:
c9:98:a7:5d:67:a9:de:85:50:b2:6c:0e:96:66:03:d5:96:76:
55:a1:c2:06:7e:2a:ce:6a:be:50:f3:1c:ea:de:8f:c4:c8:be:
75:b9:79:bf:9d:49:9e:3d:62:9e:82:d7:67:fa:ea:50:ad:1d:
57:2c:31:c4:bb:c1:b5:c7:b7:d6:93:70:69:b0:eb:3c:25:58:
dc:98:0d:5e:99:55:8f:58:44:00:0c:88:75:7d:ad:b6:8d:c7:
f1:e4:eb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:52:45 2025 by rpki-client