Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e382e302f32322d3234203d3e20323034313730.roa
File: 3135392e34382e382e302f32322d3234203d3e20323034313730.roa (raw, json)
Hash identifier: weT5HiF75lBZgEJ6wCN1Ky/RokwIRiORltN0I+VQTC8=
Subject key identifier: 61:F2:87:AF:32:D8:F5:4B:F7:2B:C1:50:D0:66:7B:B1:51:D6:80:37
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 665BC52EFE61E92601301E1CF07EB3C3F37C65C7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e382e302f32322d3234203d3e20323034313730.roa
Signing time: Mon 21 Apr 2025 10:18:35 +0000
ROA not before: Mon 21 Apr 2025 10:13:35 +0000
ROA not after: Mon 20 Apr 2026 10:18:35 +0000
asID: 204170
IP address blocks: 159.48.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 12:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:5b:c5:2e:fe:61:e9:26:01:30:1e:1c:f0:7e:b3:c3:f3:7c:65:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 21 10:13:35 2025 GMT
Not After : Apr 20 10:18:35 2026 GMT
Subject: CN=61F287AF32D8F54BF72BC150D0667BB151D68037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:d1:51:ba:57:5c:f5:22:4a:f7:a3:19:77:
41:36:11:57:47:67:e1:9f:e8:71:07:92:96:77:05:
26:39:9f:5f:f4:9c:9b:5c:22:6a:f6:bd:06:ce:4d:
df:e9:bb:19:eb:58:66:97:26:52:da:67:50:51:84:
1c:dc:9b:20:5f:13:7b:0f:0c:6d:c9:de:a1:f2:c7:
fc:48:33:fc:a5:93:a3:35:3f:97:47:76:52:39:41:
43:7b:af:a8:a0:2f:d9:ea:32:24:f7:46:84:ce:cf:
8f:9d:82:f9:0f:9e:b7:5c:26:c2:4b:7f:e2:0e:0a:
cf:38:e2:55:62:77:2b:c4:4a:e7:cc:d0:55:0a:3b:
00:59:b6:b8:22:d0:87:63:ff:1c:e4:eb:2a:cd:f1:
e2:27:22:15:f4:b7:3d:85:03:4a:46:4a:cd:a7:ed:
f2:ad:25:c5:9a:c3:dd:f6:2e:73:5e:c4:2b:04:4c:
b2:6f:67:bc:d9:0b:43:ee:38:04:8c:9b:ae:df:f1:
73:b3:dd:6e:64:e2:7e:e8:40:b8:66:e4:65:82:9d:
90:f1:61:1d:ec:aa:da:ae:5d:50:9f:a8:0b:61:6c:
c5:de:89:3a:de:7b:0d:1d:7e:13:0c:44:08:5d:6e:
37:ed:72:6b:ce:fc:d6:df:b8:1f:a0:f8:cc:c3:8a:
01:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F2:87:AF:32:D8:F5:4B:F7:2B:C1:50:D0:66:7B:B1:51:D6:80:37
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e382e302f32322d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.48.8.0/22
Signature Algorithm: sha256WithRSAEncryption
32:81:b8:f3:87:f5:c4:d3:a2:5f:bd:d1:42:ec:2a:86:a6:1a:
19:be:ea:25:91:1a:3e:70:1b:d2:1b:68:25:36:28:c8:b1:1e:
d0:96:78:1f:fb:13:77:e0:ec:4d:25:03:0b:74:7c:7e:b7:b5:
68:c0:f6:af:7b:2f:7f:79:36:b8:e7:8d:45:6a:45:39:9a:21:
3a:44:4c:92:91:c1:32:62:44:53:33:9f:f7:3e:46:3e:4a:7d:
38:d6:da:24:8e:f4:16:db:ca:74:8f:bc:87:c4:3c:6b:8c:14:
d0:f8:c9:e5:3e:c3:a7:62:dd:a6:6a:0b:4c:e5:97:c2:8b:32:
1e:53:4d:42:a3:aa:ea:73:04:57:17:52:3d:79:99:54:83:4d:
74:b6:c2:ed:f6:20:b5:e1:ae:a0:c1:b1:f7:66:a2:3a:9b:c7:
46:1d:a2:60:f2:bf:7d:2b:7d:9d:aa:74:ff:e0:b2:cd:ad:17:
90:8d:0c:b3:2c:54:be:57:a3:95:82:99:15:dd:f5:7c:8e:9a:
d4:a5:b1:d9:a4:2f:fc:44:77:8d:01:d6:2c:28:e3:74:56:21:
63:27:25:5a:15:9f:f3:d4:5b:23:5e:fc:20:53:dd:a0:aa:e8:
7d:ab:26:cf:d9:dc:f7:ff:e7:43:d4:2d:7c:55:a1:96:08:86:
dd:22:6d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:29:49 2025 by rpki-client