Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133382e3234302e302f32322d3232203d3e20323031333431.roa
File: 34352e3133382e3234302e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier: /32v8eXIfGXtGzB/cTKfK4unnG/CWV+444R4oJZEQzk=
Subject key identifier: 9B:8F:A0:90:AB:87:DF:1A:31:E9:BD:F6:95:7A:69:38:F7:82:F9:9B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5EE34B7A7E906BA5C7986C83EBEE0E2CBF50BBBA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133382e3234302e302f32322d3232203d3e20323031333431.roa
Signing time: Wed 02 Apr 2025 12:45:57 +0000
ROA not before: Wed 02 Apr 2025 12:40:57 +0000
ROA not after: Wed 01 Apr 2026 12:45:57 +0000
asID: 201341
IP address blocks: 45.138.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e3:4b:7a:7e:90:6b:a5:c7:98:6c:83:eb:ee:0e:2c:bf:50:bb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 2 12:40:57 2025 GMT
Not After : Apr 1 12:45:57 2026 GMT
Subject: CN=9B8FA090AB87DF1A31E9BDF6957A6938F782F99B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b5:51:07:cc:6d:64:78:df:69:65:bc:5b:c6:
74:71:b0:85:22:10:3b:60:88:eb:b0:9c:85:98:5b:
c2:61:ac:d6:f5:74:95:a8:26:e2:ed:93:bd:66:94:
18:ea:79:93:7c:2b:c5:1b:77:da:67:2b:66:8b:92:
a8:e3:26:5b:f8:ae:a8:63:66:73:3d:69:62:1e:4c:
c7:63:c1:79:57:56:88:49:4b:75:3a:93:a2:a2:9a:
45:e0:78:71:51:33:ef:13:9e:92:9f:36:e7:f5:28:
06:cb:46:15:a9:95:50:90:1b:a5:a0:c9:de:d8:58:
72:47:a8:63:e6:4a:d4:fc:60:07:c7:14:73:fd:e1:
38:f7:0d:a6:c3:0c:72:34:8b:a0:32:cd:91:49:24:
42:b8:cd:75:25:e7:fa:f2:e8:1f:a5:3f:ee:6f:32:
f8:51:71:3c:7c:46:3b:97:79:35:2d:e8:0c:0e:20:
49:e4:62:9f:7d:42:0c:98:1a:58:9e:25:9d:de:d8:
40:a3:a0:b3:55:2f:1b:22:c6:ee:2e:56:d3:57:00:
18:12:37:15:01:4d:75:28:9e:9f:56:53:3d:e9:f7:
60:61:c0:40:03:09:4f:fc:4e:a1:b7:88:c4:e1:39:
fe:87:e2:c7:e5:eb:09:4c:33:62:1e:c6:64:17:83:
a7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8F:A0:90:AB:87:DF:1A:31:E9:BD:F6:95:7A:69:38:F7:82:F9:9B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133382e3234302e302f32322d3232203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.240.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:f4:a4:a9:11:01:9a:60:d8:a9:0e:a8:bb:c4:9d:54:d4:b0:
e4:10:45:70:e1:42:5a:28:25:29:86:05:bf:b6:59:91:96:0f:
ce:d0:d4:a6:d9:a1:28:5c:59:9d:62:0e:81:a4:96:8f:74:a6:
a4:91:90:f2:d3:94:d9:70:c2:5a:ed:c9:a6:b9:33:2c:e9:d5:
66:02:fc:46:24:70:e9:fa:b3:02:13:c8:b6:c5:fa:83:ed:02:
50:bc:1b:de:e0:5e:77:52:c3:ee:bb:db:aa:55:76:8e:b2:ca:
90:e0:7e:c1:06:68:94:a2:5f:ca:9b:d8:5e:58:2e:29:f6:53:
92:38:96:27:2c:46:3c:55:1c:2e:da:09:d8:b7:b6:6e:69:8d:
fa:0d:fd:c7:ac:59:44:70:f3:df:f8:44:fa:05:ee:12:15:3b:
f5:ac:48:7b:d5:6f:92:94:ab:4a:af:91:96:00:60:75:fa:39:
b2:b4:39:f1:34:d1:3c:79:80:67:00:6e:e0:7f:4a:18:96:d4:
75:1b:21:cb:10:9b:98:c2:cc:11:9a:58:e1:f9:91:c6:b8:0c:
c4:03:70:a8:80:79:e9:39:e5:31:27:d1:7d:4e:50:c8:46:ad:
49:7b:d5:5d:54:8a:e4:6c:d1:9c:69:8e:02:db:b1:77:23:0f:
0f:0c:b2:8c
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUXuNLen6Qa6XHmGyD6+4OLL9Qu7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA0MDIxMjQwNTdaFw0yNjA0MDExMjQ1NTdaMDMxMTAvBgNV
BAMTKDlCOEZBMDkwQUI4N0RGMUEzMUU5QkRGNjk1N0E2OTM4Rjc4MkY5OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChtVEHzG1keN9pZbxbxnRxsIUi
EDtgiOuwnIWYW8JhrNb1dJWoJuLtk71mlBjqeZN8K8Ubd9pnK2aLkqjjJlv4rqhj
ZnM9aWIeTMdjwXlXVohJS3U6k6KimkXgeHFRM+8TnpKfNuf1KAbLRhWplVCQG6Wg
yd7YWHJHqGPmStT8YAfHFHP94Tj3DabDDHI0i6AyzZFJJEK4zXUl5/ry6B+lP+5v
MvhRcTx8RjuXeTUt6AwOIEnkYp99QgyYGlieJZ3e2ECjoLNVLxsixu4uVtNXABgS
NxUBTXUonp9WUz3p92BhwEADCU/8TqG3iMThOf6H4sfl6wlMM2IexmQXg6erAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUm4+gkKuH3xox6b32lXppOPeC+ZswHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzEzMzM4MmUzMjM0
MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjMwMzEzMzM0MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAItivAwDQYJKoZIhvcNAQELBQADggEBAKD0pKkRAZpg2KkOqLvEnVTUsOQQRXDh
QlooJSmGBb+2WZGWD87Q1KbZoShcWZ1iDoGklo90pqSRkPLTlNlwwlrtyaa5Myzp
1WYC/EYkcOn6swITyLbF+oPtAlC8G97gXndSw+6726pVdo6yypDgfsEGaJSiX8qb
2F5YLin2U5I4licsRjxVHC7aCdi3tm5pjfoN/cesWURw89/4RPoF7hIVO/WsSHvV
b5KUq0qvkZYAYHX6ObK0OfE00Tx5gGcAbuB/ShiW1HUbIcsQm5jCzBGaWOH5kca4
DMQDcKiAeek55TEn0X1OUMhGrUl71V1UiuRs0ZxpjgLbsXcjDw8Msow=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:33:31 2025 by rpki-client