Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133382e302f32332d3234203d3e20313336373837.roa
File: 3138352e3133352e3133382e302f32332d3234203d3e20313336373837.roa (raw, json)
Hash identifier: PtBa+tFGAQcglEZetnmdLsU0qYuNqcaXu8p6H/191/8=
Subject key identifier: C6:49:58:B3:38:C6:B0:49:13:55:5F:A2:86:07:5A:11:D0:24:68:66
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1AF03C1F37EEC05E6442551AA7E29631AF053595
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133382e302f32332d3234203d3e20313336373837.roa
Signing time: Sun 13 Apr 2025 11:46:03 +0000
ROA not before: Sun 13 Apr 2025 11:41:03 +0000
ROA not after: Sun 12 Apr 2026 11:46:03 +0000
asID: 136787
IP address blocks: 185.135.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 12:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:f0:3c:1f:37:ee:c0:5e:64:42:55:1a:a7:e2:96:31:af:05:35:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 13 11:41:03 2025 GMT
Not After : Apr 12 11:46:03 2026 GMT
Subject: CN=C64958B338C6B04913555FA286075A11D0246866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:14:c2:15:15:7c:e3:fd:ec:36:c3:71:ef:
31:f6:ab:61:41:08:76:56:d4:bf:46:ee:70:d3:37:
41:d6:df:18:f4:41:0a:c4:67:7e:75:8d:2b:3b:c6:
71:f0:fa:9d:f9:1d:ce:a7:6a:5a:6e:ac:a8:a9:c0:
67:8f:23:5a:cd:44:e7:9d:ca:30:d1:e5:7a:4b:b1:
ab:d5:b8:d6:86:6b:01:e0:05:84:5e:52:5d:80:d1:
7b:4f:a9:26:56:d2:67:8d:f9:3d:44:d2:a7:33:c3:
79:69:86:25:44:3c:68:40:39:9b:99:4a:44:f8:30:
e7:77:47:3e:04:fe:d9:16:e2:16:4b:d3:6a:4d:08:
16:2d:b7:86:83:34:20:46:9a:e6:cb:b1:e8:ca:fd:
71:78:04:52:54:29:f1:75:2c:24:2a:86:ee:ca:90:
a4:6d:80:95:ba:98:ee:d3:b4:16:87:11:06:84:87:
34:ca:4a:c8:d3:1f:fc:97:20:46:ed:ca:be:cd:e5:
8b:ea:b7:88:76:89:5e:be:92:75:f8:62:44:45:d3:
20:f9:88:18:16:b9:97:02:45:6a:c0:48:e1:35:43:
03:a7:64:5a:5c:e5:01:d2:bd:9e:25:91:f0:f4:ea:
a3:d0:4c:65:7e:2e:2b:83:1f:91:a2:97:48:fb:20:
ef:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:49:58:B3:38:C6:B0:49:13:55:5F:A2:86:07:5A:11:D0:24:68:66
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133382e302f32332d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.138.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:23:53:99:ef:7e:1a:b9:e3:c4:e2:f3:f3:90:2d:6d:ac:f4:
db:de:35:f3:bb:42:da:91:4a:cd:32:58:68:a9:04:fc:0a:78:
8a:29:1d:36:4f:63:5c:73:4f:1e:5d:e6:26:b2:16:67:d4:a1:
e2:03:9e:51:fa:ff:23:28:0a:f9:9a:0b:fa:87:cb:3b:7a:d3:
29:ad:1f:77:0a:26:7c:be:53:32:f3:7a:75:d5:1f:2a:08:1d:
6d:e6:35:3f:01:fb:49:8d:86:aa:3c:0e:f6:c1:6c:1d:ce:64:
2d:45:8d:7e:0b:f6:27:ce:51:78:20:0d:6e:8b:40:98:88:31:
de:e4:8b:75:40:4e:2d:5c:b5:6c:59:b7:ef:65:6c:47:30:3e:
ea:06:42:ac:ea:67:5b:ee:db:75:dc:91:91:e1:4c:b0:a3:a0:
e6:1d:52:2e:f3:d6:89:ad:0b:81:3c:d7:e7:01:a0:75:8b:95:
ed:fb:93:0a:da:2e:a8:ad:82:f7:00:1e:df:19:90:7d:f1:ea:
cb:19:ba:19:57:22:5e:91:81:19:cd:ff:4f:99:52:c7:be:12:
88:51:db:61:fe:ea:7a:66:d8:7d:bc:ea:4b:b3:a8:6f:af:d6:
b5:1a:bc:51:15:60:7f:6b:3f:fe:e3:d1:69:85:97:0f:81:6b:
36:c2:20:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:34 2025 by rpki-client