Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37322e302f32322d3232203d3e20323034313730.roa
File: 38322e3134392e37322e302f32322d3232203d3e20323034313730.roa (raw, json)
Hash identifier: 6t2O4gqoyKhzFy4BZp8gX/pvrA4+/lsDIUIaeVNIpF0=
Subject key identifier: A3:49:35:40:08:BB:57:1C:4D:21:21:C3:B9:27:B9:E6:26:3F:23:B6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5B9D3E3ADC1522DAF89AC38EE6BBD80747A5127E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37322e302f32322d3232203d3e20323034313730.roa
Signing time: Tue 10 Jun 2025 09:46:37 +0000
ROA not before: Tue 10 Jun 2025 09:41:37 +0000
ROA not after: Tue 09 Jun 2026 09:46:37 +0000
asID: 204170
IP address blocks: 82.149.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:9d:3e:3a:dc:15:22:da:f8:9a:c3:8e:e6:bb:d8:07:47:a5:12:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 10 09:41:37 2025 GMT
Not After : Jun 9 09:46:37 2026 GMT
Subject: CN=A349354008BB571C4D2121C3B927B9E6263F23B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:f1:77:d2:37:11:19:2d:d7:69:fb:46:dd:
01:0d:65:93:46:c2:b3:f4:ca:9f:58:c7:fc:24:44:
84:94:c2:8d:cf:c4:76:19:1e:79:33:0a:d2:81:35:
5b:ea:ee:f1:c3:94:91:0d:12:ab:bc:37:eb:1b:97:
cd:d1:83:20:bf:88:50:e2:7a:7b:c3:c3:24:7b:bf:
ba:e7:b4:78:ec:6c:d1:cb:c6:60:c4:15:fe:db:89:
76:ba:1f:8a:40:8e:bf:af:0e:72:81:dc:0c:d0:61:
5b:67:79:d6:16:6a:ee:ff:a5:2d:09:29:33:0b:31:
f4:25:54:22:77:e9:fb:e1:08:5e:3e:75:3b:0b:f0:
01:07:7a:56:b3:90:38:00:3d:e7:82:bb:00:62:1a:
2d:31:d8:e6:0b:7f:c2:0c:9e:5d:ef:a0:f0:db:4d:
a0:ea:a9:5c:5b:39:01:ea:3a:ef:1a:eb:6f:82:6a:
13:39:89:a4:4b:5f:91:d6:17:57:f8:fc:70:85:5c:
02:10:21:6a:e8:46:1c:af:8a:de:46:99:42:97:6a:
4f:89:58:d9:1d:bc:89:92:8a:1b:1f:09:cd:af:4c:
c1:3a:a6:93:7b:cd:8d:f9:3f:ba:5b:53:f0:cf:62:
2b:d6:f8:9a:ca:60:19:ef:07:54:b6:c3:d1:88:ce:
7b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:49:35:40:08:BB:57:1C:4D:21:21:C3:B9:27:B9:E6:26:3F:23:B6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37322e302f32322d3232203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.149.72.0/22
Signature Algorithm: sha256WithRSAEncryption
63:1a:76:20:a8:7a:b4:a3:cb:3d:ad:34:48:84:4d:5c:2a:80:
7b:59:f7:fb:3f:56:0d:69:a1:bd:b8:a2:3d:86:de:5a:ec:0e:
c7:89:74:1c:8a:b9:cc:b4:31:43:8a:13:e1:51:ac:ec:de:13:
ab:ed:1c:39:8d:9c:bb:9c:c4:a9:e6:f9:18:14:cb:0e:4a:82:
e4:4b:42:25:35:ee:88:9e:06:97:7c:b0:40:78:d1:5c:4f:85:
f2:a9:2c:6a:14:4a:2c:58:2e:f2:f2:26:22:5f:40:88:ff:5a:
ba:24:20:8d:25:f4:51:e5:8c:f8:11:24:4f:c3:05:c7:ba:c1:
8c:d9:41:18:de:68:f2:99:ab:39:0f:8c:55:4a:f5:b7:3f:29:
56:09:dc:c1:1c:fd:78:67:41:2a:4a:42:42:90:fc:b5:cf:13:
28:9e:e4:29:ca:c0:6a:de:8a:9d:20:e6:6c:de:6e:ac:b9:9c:
c5:c1:b8:4b:18:42:cf:28:d6:66:ad:22:26:33:ea:ee:b1:9d:
e0:20:f4:10:3a:80:9c:f1:1f:01:df:c8:f9:50:81:d4:a1:b0:
ed:ad:da:3a:2f:a3:9d:2b:bc:79:5b:18:79:ea:eb:f4:f2:e6:
f7:28:fe:7d:3c:68:3d:48:49:cf:8b:d9:10:52:23:64:a9:19:
4a:06:74:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:02:31 2025 by rpki-client