Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3231342e302f32342d3234203d3e20313431393935.roa
File: 3134372e39332e3231342e302f32342d3234203d3e20313431393935.roa (raw, json)
Hash identifier: aZrL0CpYm0u7ZY8I2QUcM2ixim/v4CXBgolSO7CRhvw=
Subject key identifier: E8:E7:20:7E:2F:FA:20:07:A3:31:8C:32:83:7A:9F:92:BF:72:B0:81
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3B24E107C5DD8E3E981870CFF9A1F24746ABA12C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3231342e302f32342d3234203d3e20313431393935.roa
Signing time: Wed 02 Apr 2025 11:10:25 +0000
ROA not before: Wed 02 Apr 2025 11:05:25 +0000
ROA not after: Wed 01 Apr 2026 11:10:25 +0000
asID: 141995
IP address blocks: 147.93.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:24:e1:07:c5:dd:8e:3e:98:18:70:cf:f9:a1:f2:47:46:ab:a1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 2 11:05:25 2025 GMT
Not After : Apr 1 11:10:25 2026 GMT
Subject: CN=E8E7207E2FFA2007A3318C32837A9F92BF72B081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d3:ae:8b:64:09:42:b4:0c:05:ef:73:eb:3d:
9d:bc:5b:a9:60:76:1c:2a:3d:11:40:d5:7d:14:01:
1e:6e:ae:63:85:49:c1:9e:d2:2e:4e:a3:5a:19:33:
2b:6c:4e:4e:48:ed:c4:fb:a2:61:da:eb:1e:02:80:
63:b8:ef:88:22:24:6c:54:38:33:63:bf:1c:e0:be:
22:77:6f:28:3f:75:53:db:0a:4c:f1:53:34:ef:0e:
bf:86:f5:06:ee:24:ab:b2:0f:d1:46:f4:3a:e6:59:
86:e6:4c:3d:77:64:24:b3:3c:f7:cd:3f:8c:aa:f7:
89:39:84:8b:c0:3c:ac:ca:a8:69:d9:cf:dd:ac:ea:
8b:76:eb:6c:b4:79:fe:4c:e4:ba:9d:a8:ed:72:7e:
be:5c:58:b7:fb:18:92:3a:95:76:89:53:76:14:ac:
27:d4:bd:e4:fb:4f:23:45:b9:b5:20:78:32:b8:7f:
7b:7c:05:d0:ca:94:e2:1b:26:96:73:27:8d:d4:fa:
d1:37:09:d6:58:5f:b5:f3:7b:ba:fc:d7:66:3a:8e:
e7:17:e4:74:8e:da:dc:89:39:63:f4:73:f7:23:3d:
c8:35:1b:9c:33:a1:52:02:39:fd:c2:db:25:ee:71:
42:ae:2c:2c:a0:a7:3d:5a:c3:06:49:a9:11:37:af:
c5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E7:20:7E:2F:FA:20:07:A3:31:8C:32:83:7A:9F:92:BF:72:B0:81
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3231342e302f32342d3234203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.214.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c5:ae:a5:24:ef:ea:f5:89:47:98:07:79:f4:42:b1:cf:09:
65:dc:d8:e9:0a:0d:5b:5d:71:b6:45:bf:46:86:44:c8:90:de:
3f:7d:e6:d1:9a:3c:9e:0f:9e:c5:de:6a:5a:b9:32:c2:7e:5f:
98:5d:6a:b7:e1:d2:cd:6f:9b:ca:39:c0:16:5e:b7:fa:13:53:
bd:ca:32:fd:ad:25:49:9e:f3:a0:ee:2f:75:28:e3:dc:da:2e:
d4:49:83:42:7f:8a:4f:8b:07:82:7c:30:56:d4:0f:f4:8e:ec:
aa:25:8e:12:af:36:a8:18:6f:19:d0:f4:ae:c8:63:1a:43:74:
36:57:83:40:81:e2:1e:f0:bf:38:7b:81:c9:c3:3c:4b:7c:65:
25:6d:f5:9f:2e:bc:87:f3:13:71:54:10:01:de:f6:e7:f3:34:
66:e7:7f:5c:98:07:b8:e2:4c:d1:ed:8d:d9:e3:d0:dc:dc:00:
fa:0b:8c:69:32:7c:e1:0d:45:00:58:3f:76:c4:08:59:f2:ab:
02:0d:25:7b:e8:65:59:5b:2a:ab:6c:74:89:73:74:41:2a:9c:
bf:bf:5d:30:15:8a:86:63:da:5e:84:48:f8:88:e7:19:19:71:
b0:d4:07:4b:2f:83:25:13:46:2e:f8:51:1e:e0:81:2c:1d:7c:
20:3e:5a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:48:42 2025 by rpki-client