Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3137372e3131372e302f32342d3234203d3e20313336373837.roa
File: 3138352e3137372e3131372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 32k/wQUn3i7uOnyrPn1B2+s1vqfI8idf+Ei7Fp4G2qg=
Subject key identifier: 14:CB:75:2B:1D:3E:44:5D:40:30:C0:6D:15:87:ED:27:8C:C4:EB:CD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 10E0F38889F35DBB40BB684D2299238D74DB636B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3137372e3131372e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 13 Apr 2025 11:46:04 +0000
ROA not before: Sun 13 Apr 2025 11:41:04 +0000
ROA not after: Sun 12 Apr 2026 11:46:04 +0000
asID: 136787
IP address blocks: 185.177.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e0:f3:88:89:f3:5d:bb:40:bb:68:4d:22:99:23:8d:74:db:63:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 13 11:41:04 2025 GMT
Not After : Apr 12 11:46:04 2026 GMT
Subject: CN=14CB752B1D3E445D4030C06D1587ED278CC4EBCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:04:f6:d0:cb:90:d2:f9:49:6b:f4:a6:d8:a3:
9b:ba:19:a4:0e:90:2c:06:e8:b7:d2:b2:ba:0f:14:
32:d4:1a:bf:87:3d:b6:ef:74:de:d4:a5:17:d4:b9:
9a:33:00:04:db:81:2f:83:9c:e1:81:73:b8:68:01:
3c:7a:7b:6e:60:c4:ee:05:cc:24:1c:8c:a7:42:37:
bd:52:bc:f4:fd:84:c6:22:20:ed:3b:21:55:75:52:
43:eb:8b:1f:78:fc:b0:74:89:d5:3e:64:a9:4b:b2:
b1:e9:75:f8:52:26:27:2d:08:7f:3c:20:c1:22:ca:
68:43:0a:2e:b4:ca:48:1a:f0:3c:e5:c7:08:8a:67:
49:30:0f:c1:7c:33:45:bc:a0:11:8d:01:a7:0b:05:
22:41:48:aa:74:e6:06:be:8c:2d:6e:80:3c:07:59:
50:8d:14:d7:ed:e5:66:0d:38:8f:a7:9c:47:57:12:
eb:81:fe:56:be:e8:45:b1:e5:21:de:f9:ba:d7:a8:
af:63:fc:3b:f7:25:90:df:c7:d8:e3:91:f1:8e:7c:
71:74:78:e3:ca:40:48:38:f2:4e:fb:cd:94:5b:cc:
57:16:70:70:72:fb:12:e8:a1:3c:27:95:6a:5c:c3:
34:87:15:d9:dd:d0:f7:d8:70:ad:52:8a:36:93:4b:
6b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CB:75:2B:1D:3E:44:5D:40:30:C0:6D:15:87:ED:27:8C:C4:EB:CD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3137372e3131372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.117.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:3b:4d:7a:24:91:06:45:3b:ca:eb:1e:94:d1:e6:79:5d:7b:
e0:b1:d8:7a:61:5e:b8:7f:1d:5e:1b:61:df:a6:a0:50:54:59:
9d:af:0a:2b:0b:f9:38:b4:19:f9:25:ff:46:c0:5a:22:8c:c3:
45:6b:77:e5:4f:d8:5d:5e:29:f7:f4:13:6c:d7:cb:c1:e3:97:
3c:a2:ba:5d:12:63:7a:e2:66:a8:da:82:b1:62:58:76:d3:b7:
fc:c0:ab:45:59:e9:3e:f2:b7:f0:08:88:bf:e8:34:54:ac:9b:
a0:da:26:0a:e5:90:20:80:50:86:9a:1f:89:72:f1:84:77:b4:
6f:4b:87:3d:b3:4d:3d:ab:a8:e8:b1:44:3f:49:62:28:f4:25:
1d:9e:3e:a3:cc:9e:d1:70:47:8d:03:b8:19:f2:d2:fa:09:f9:
cf:85:31:54:7d:18:ce:a7:f8:8b:3a:53:00:ee:c1:42:42:6a:
1c:98:d1:35:ea:a5:21:ee:25:21:0b:be:ba:1c:45:9b:e5:17:
34:a0:45:00:b3:4c:5d:51:c8:3d:8b:c1:41:84:35:b2:ea:c2:
39:b2:2f:80:1d:2b:42:24:be:0b:7a:f5:b3:23:fe:68:35:10:
e6:5f:c4:15:16:9e:93:18:81:17:81:b9:2a:0e:96:55:70:92:
31:c4:70:88
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUEODziInzXbtAu2hNIpkjjXTbY2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA0MTMxMTQxMDRaFw0yNjA0MTIxMTQ2MDRaMDMxMTAvBgNV
BAMTKDE0Q0I3NTJCMUQzRTQ0NUQ0MDMwQzA2RDE1ODdFRDI3OENDNEVCQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJBPbQy5DS+Ulr9KbYo5u6GaQO
kCwG6LfSsroPFDLUGr+HPbbvdN7UpRfUuZozAATbgS+DnOGBc7hoATx6e25gxO4F
zCQcjKdCN71SvPT9hMYiIO07IVV1UkPrix94/LB0idU+ZKlLsrHpdfhSJictCH88
IMEiymhDCi60ykga8DzlxwiKZ0kwD8F8M0W8oBGNAacLBSJBSKp05ga+jC1ugDwH
WVCNFNft5WYNOI+nnEdXEuuB/la+6EWx5SHe+brXqK9j/Dv3JZDfx9jjkfGOfHF0
eOPKQEg48k77zZRbzFcWcHBy+xLooTwnlWpcwzSHFdnd0PfYcK1SijaTS2vZAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUFMt1Kx0+RF1AMMBtFYftJ4zE680wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM3MzcyZTMx
MzEzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALmxdTANBgkqhkiG9w0BAQsFAAOCAQEAfDtNeiSRBkU7yuselNHmeV174LHY
emFeuH8dXhth36agUFRZna8KKwv5OLQZ+SX/RsBaIozDRWt35U/YXV4p9/QTbNfL
weOXPKK6XRJjeuJmqNqCsWJYdtO3/MCrRVnpPvK38AiIv+g0VKyboNomCuWQIIBQ
hpofiXLxhHe0b0uHPbNNPauo6LFEP0liKPQlHZ4+o8ye0XBHjQO4GfLS+gn5z4Ux
VH0Yzqf4izpTAO7BQkJqHJjRNeqlIe4lIQu+uhxFm+UXNKBFALNMXVHIPYvBQYQ1
surCObIvgB0rQiS+C3r1syP+aDUQ5l/EFRaekxiBF4G5Kg6WVXCSMcRwiA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:30:40 2025 by rpki-client