Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130382e302f32342d3234203d3e20313336373837.roa
File: 3137382e3133322e3130382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: XZqdQfPrseAyEP9cc9h8CUjwLkUIJG4UkHHEDahYFW4=
Subject key identifier: B8:46:1C:11:38:6C:1B:E8:E2:C8:61:6D:64:DC:8C:D5:DF:B6:A2:ED
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 322646F05D9E113E12F95405D91A88A18019F0B8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130382e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 21 Apr 2025 17:46:07 +0000
ROA not before: Mon 21 Apr 2025 17:41:07 +0000
ROA not after: Mon 20 Apr 2026 17:46:07 +0000
asID: 136787
IP address blocks: 178.132.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 12:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:26:46:f0:5d:9e:11:3e:12:f9:54:05:d9:1a:88:a1:80:19:f0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 21 17:41:07 2025 GMT
Not After : Apr 20 17:46:07 2026 GMT
Subject: CN=B8461C11386C1BE8E2C8616D64DC8CD5DFB6A2ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0b:20:6b:71:62:fe:0f:d2:89:5d:9b:8b:83:
2c:bf:b4:a0:e7:0a:1d:05:bd:9c:f0:c3:04:b9:fc:
d7:82:fd:47:dc:c9:f3:72:ed:d5:0f:6d:97:a5:d6:
c7:f0:96:04:95:65:e6:92:4d:af:7a:cc:75:71:58:
49:1e:e1:25:3e:cf:ed:ce:bb:43:a4:f3:2b:02:05:
62:62:c5:76:a7:26:97:30:86:7e:37:e1:ad:b7:ea:
eb:20:a1:3a:29:ce:d1:d1:1d:78:2f:06:46:74:05:
5b:8e:02:ca:1d:b3:85:b4:7a:1c:53:4c:53:94:6e:
ee:58:40:7e:df:28:d7:87:e4:06:4f:5b:ab:c5:26:
3c:4f:da:10:91:50:cd:df:dd:99:43:3b:05:5a:f7:
8f:ca:db:73:48:99:80:25:97:ad:79:12:56:8c:be:
27:8f:73:f0:3a:26:ee:2d:cb:d4:df:c6:2d:b4:5f:
99:45:82:ca:6d:d3:9e:ec:85:85:18:ba:a5:71:55:
f0:35:0c:40:7d:1d:0d:63:a0:f2:1a:2c:53:be:b8:
10:d7:88:cf:87:be:8e:3b:7b:b2:c3:68:bf:02:1b:
e7:f1:62:7e:c4:4f:19:0a:b6:2b:b2:b5:52:c3:7c:
db:27:49:22:ff:7a:32:14:98:de:a6:34:b3:7a:f1:
18:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:46:1C:11:38:6C:1B:E8:E2:C8:61:6D:64:DC:8C:D5:DF:B6:A2:ED
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.108.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:9c:84:b5:51:7d:99:c1:4b:11:7a:44:c6:ef:6e:f7:26:05:
2b:48:f0:e2:e0:8c:f0:d0:bb:f6:c3:70:26:05:26:e5:53:54:
a2:77:a1:ac:e0:78:0e:6b:0f:4a:2e:60:41:51:63:e1:1e:b2:
df:6c:70:46:b6:47:05:6b:88:30:47:3d:5e:a4:13:a0:0f:c9:
5e:b5:dd:f5:d2:1d:cb:4b:b1:b4:3e:33:76:f9:89:1b:98:9e:
98:89:13:21:3f:c0:c1:1b:80:ac:05:5a:fa:5f:88:bb:90:4c:
ea:25:f5:f8:45:76:67:08:0d:f5:a7:96:53:6a:f3:45:d0:85:
4f:f3:6f:d6:2f:a0:17:ae:8c:b1:31:15:fc:89:29:31:6d:62:
52:a1:ce:33:ec:88:d7:eb:50:8d:4a:86:72:61:8e:1a:4f:61:
25:13:a9:83:ee:63:66:49:f2:bf:74:fa:0e:23:94:c5:74:b6:
14:83:57:dd:c4:41:14:67:c7:bc:db:b2:ac:0e:fa:33:bb:02:
74:52:f5:04:4e:03:6e:a6:26:e0:39:41:7b:0c:8a:c2:96:4a:
9a:5e:1a:ec:c8:3c:ff:e0:55:0a:79:be:72:0a:6b:17:9d:5e:
9d:be:1e:70:63:a9:00:07:1d:05:38:76:0f:e5:de:18:ee:bb:
82:4f:87:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:27:34 2025 by rpki-client