Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35392e3134382e302f32332d3234203d3e20343030383636.roa
File: 322e35392e3134382e302f32332d3234203d3e20343030383636.roa (raw, json)
Hash identifier: g4Q4bifTD9nH4vA9yJegBv2Ylksf9tYIs2PkJqfRSt0=
Subject key identifier: 28:B5:2E:33:F1:AB:FF:CA:1D:48:1F:92:21:3C:B0:DA:91:D0:9B:C7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 19B9D125DF9ABFAC2D2D148C2B71A5BC1332F898
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35392e3134382e302f32332d3234203d3e20343030383636.roa
Signing time: Fri 13 Jun 2025 16:46:37 +0000
ROA not before: Fri 13 Jun 2025 16:41:37 +0000
ROA not after: Fri 12 Jun 2026 16:46:37 +0000
asID: 400866
IP address blocks: 2.59.148.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:b9:d1:25:df:9a:bf:ac:2d:2d:14:8c:2b:71:a5:bc:13:32:f8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 13 16:41:37 2025 GMT
Not After : Jun 12 16:46:37 2026 GMT
Subject: CN=28B52E33F1ABFFCA1D481F92213CB0DA91D09BC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a4:b9:42:af:58:74:61:3f:65:d7:f5:f9:5a:
b9:f9:ab:e5:aa:d1:97:25:0d:fe:18:dd:de:c2:3a:
7c:6a:84:49:e2:0f:2a:58:3d:7b:a4:f3:32:d6:b2:
06:1a:a3:5f:5c:10:a5:6d:4b:5c:ea:4d:86:ca:d4:
bf:d3:59:c7:24:2b:24:05:80:ef:f8:f8:26:f0:88:
5a:86:ec:5d:4a:77:2a:13:ab:b5:62:44:72:87:5e:
e7:43:c1:0d:35:82:dd:50:3b:7f:b6:40:b1:02:c2:
18:c6:21:24:91:f7:cf:d6:df:fd:9a:c3:01:c6:20:
d3:f5:72:1d:b1:9c:a1:55:4b:16:a4:2b:a4:23:da:
8a:57:cf:47:93:4d:06:10:f0:10:21:87:80:c2:53:
66:c1:96:d8:2b:e4:d3:a3:76:fd:37:ed:22:cb:5f:
07:a1:9b:09:41:32:df:06:d2:ee:a3:e0:9f:bb:90:
e1:ac:70:4e:16:aa:e1:60:3e:58:ae:2c:0c:45:bd:
69:60:6c:bf:92:cb:bf:95:80:9e:99:86:38:0f:12:
9a:39:92:80:60:49:7d:12:f8:3a:44:ba:b6:df:1a:
9c:1c:5d:f7:2b:0d:cf:9a:54:20:a1:2b:33:fd:7e:
02:35:e4:7d:6b:b7:3f:0c:18:b3:73:8c:6f:7c:de:
1c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B5:2E:33:F1:AB:FF:CA:1D:48:1F:92:21:3C:B0:DA:91:D0:9B:C7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35392e3134382e302f32332d3234203d3e20343030383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.148.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:92:9f:bb:49:a7:8b:de:07:71:8a:59:53:fc:d6:c7:53:55:
a8:7b:f2:18:22:6a:fd:bf:7c:ce:bb:27:7a:ed:19:bc:bd:ca:
96:5c:e1:23:79:f7:36:3c:0c:a9:83:78:a6:97:84:29:47:b0:
e6:f5:cf:f1:cb:c6:99:d7:16:dd:cc:5e:e3:5d:0c:c3:29:53:
41:10:4f:0d:5a:61:f2:3b:f5:47:1d:6d:84:24:54:fa:b7:07:
f0:22:5e:0d:a7:63:e8:99:e0:e1:fb:d7:fe:af:9c:66:79:fc:
dc:a4:43:35:48:1a:6f:cb:1e:ec:60:0c:cc:ed:f7:24:73:46:
cc:e9:50:c7:b7:e9:e1:f1:09:58:ca:b6:05:0c:2c:8f:f3:de:
c8:ec:74:91:c1:2a:fc:ad:b6:65:71:0c:66:c0:f7:18:1d:11:
fe:92:b6:34:bd:ec:c5:d8:71:f6:2c:9a:3b:ba:70:b7:d4:5d:
05:71:cf:a0:64:e5:05:e2:ad:99:9c:64:44:9e:31:6e:db:30:
91:ac:30:77:86:a0:44:a5:30:dc:fb:d4:83:c5:e7:70:17:93:
93:76:d8:d0:e8:21:5d:c1:5e:2f:54:c7:d7:d9:98:61:c1:b8:
b0:4b:b0:26:66:ae:44:8b:f1:f9:5a:fe:89:a1:e3:aa:4d:39:
90:03:0e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:24:27 2025 by rpki-client