Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37342e302f32342d3234203d3e20313336373837.roa
File: 3135382e3232302e37342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Td8dipQTuFfy8OkXfJRFz4QCzKG+mKm+0jh/d3r751U=
Subject key identifier: B7:7D:9E:51:88:54:60:EB:80:C1:3C:30:90:01:A8:C1:F7:12:C8:FC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4F43AE6CC019ABDADED2AE5E16C525931054FE84
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37342e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 13 Apr 2025 11:46:05 +0000
ROA not before: Sun 13 Apr 2025 11:41:05 +0000
ROA not after: Sun 12 Apr 2026 11:46:05 +0000
asID: 136787
IP address blocks: 158.220.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 12:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:43:ae:6c:c0:19:ab:da:de:d2:ae:5e:16:c5:25:93:10:54:fe:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 13 11:41:05 2025 GMT
Not After : Apr 12 11:46:05 2026 GMT
Subject: CN=B77D9E51885460EB80C13C309001A8C1F712C8FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:e5:a9:cd:4b:e8:ea:aa:fc:b5:3e:c8:47:
15:bf:c4:dd:46:dc:90:82:45:43:e5:cf:4c:4b:d9:
41:26:4f:87:0c:6e:76:9e:a0:4c:89:83:28:d6:f3:
49:cf:c6:77:fa:41:a4:a9:8c:34:5c:cd:c4:91:be:
ed:51:98:1d:07:75:c7:62:a5:0f:d0:3a:03:a0:7e:
dc:5f:04:55:79:0a:19:5b:6d:8e:23:a6:ee:c8:f6:
5c:38:aa:07:93:bf:e5:f1:86:55:5c:92:53:30:d0:
8d:1e:2d:d5:64:41:64:32:94:2a:9e:ea:6c:b5:58:
ff:c9:18:cc:03:b6:c3:04:d2:9a:3c:be:bb:97:81:
2b:3e:ae:c1:e6:09:25:4c:84:78:0a:9e:d4:d2:57:
60:8b:ee:58:9a:98:11:be:72:f0:83:64:12:7a:9f:
cd:0b:5f:58:21:83:a7:05:c3:ce:ad:02:bb:03:7d:
8d:b1:e4:8e:87:f7:bf:36:a1:81:c2:94:93:7f:46:
21:c8:6a:60:59:0c:65:6a:9e:99:f9:e3:ad:b7:34:
bf:c0:5b:fa:ab:84:46:92:25:09:ac:62:b5:c8:e3:
f2:11:9e:51:72:da:8d:62:df:67:04:0f:80:2b:b9:
d5:36:57:d6:9d:53:df:91:9e:f7:4f:ee:6f:30:f8:
c0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7D:9E:51:88:54:60:EB:80:C1:3C:30:90:01:A8:C1:F7:12:C8:FC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.74.0/24
Signature Algorithm: sha256WithRSAEncryption
32:8a:63:8b:c3:6a:df:a8:5e:f5:5b:5b:2e:00:0e:81:b7:02:
96:64:16:e7:7a:2f:15:2e:55:46:eb:9f:97:6a:f2:13:72:e8:
a4:5b:46:d5:bf:30:00:f4:35:ca:d1:9d:7c:9b:8d:ee:cf:ed:
53:9d:84:73:af:e5:5f:7c:44:da:d0:65:a3:de:12:d9:0d:75:
26:1d:16:34:1c:4b:89:cb:93:af:a9:48:98:f3:ef:c9:4f:84:
0e:17:a4:76:88:4c:2f:ff:ae:62:1c:d5:0c:54:d0:2d:4a:e6:
3d:60:27:71:2d:cc:69:d8:a6:77:d4:92:0f:93:38:b7:f6:5c:
6a:29:a2:a6:8f:0d:42:7b:22:d3:9f:23:ca:09:14:85:bc:d6:
3a:7d:4b:79:0b:81:54:79:05:15:b1:0c:f2:85:18:01:d7:e9:
35:53:c3:91:7c:db:2f:87:c0:3b:e8:44:4d:0b:16:d1:98:ba:
6c:27:ee:0e:e8:da:99:1d:d2:bf:ad:28:42:f2:17:06:ed:a8:
ef:2e:fe:1b:57:82:4c:03:a6:51:1e:4d:0c:c9:b2:ab:b1:15:
8d:fd:06:34:d5:a6:e4:bb:c7:a1:0b:8f:98:40:cc:e6:90:be:
3f:9c:40:c4:fa:64:c4:f4:e1:ba:9b:e2:18:e0:66:00:a9:42:
d2:95:e1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:38:12 2025 by rpki-client