Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3138342e302f32312d3234203d3e20323034313730.roa
File: 38322e3138302e3138342e302f32312d3234203d3e20323034313730.roa (raw, json)
Hash identifier: +L7KH6KSAQDHcJ1tCnoGgAbR+KsVCP7sa548O1cJT7o=
Subject key identifier: 34:3F:8E:15:E6:74:7D:AD:99:BD:F9:41:77:9D:A1:78:02:D9:41:CA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4842328728ADE6D90785C495C1C367C28FFBBFCF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3138342e302f32312d3234203d3e20323034313730.roa
Signing time: Mon 21 Apr 2025 19:05:27 +0000
ROA not before: Mon 21 Apr 2025 19:00:27 +0000
ROA not after: Mon 20 Apr 2026 19:05:27 +0000
asID: 204170
IP address blocks: 82.180.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 12:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:42:32:87:28:ad:e6:d9:07:85:c4:95:c1:c3:67:c2:8f:fb:bf:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 21 19:00:27 2025 GMT
Not After : Apr 20 19:05:27 2026 GMT
Subject: CN=343F8E15E6747DAD99BDF941779DA17802D941CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ad:bb:99:6d:9b:4b:30:3d:bb:d7:13:74:f3:
96:65:3e:31:3c:be:3c:d1:06:6e:9d:a2:95:81:5d:
bd:de:a3:d8:99:2c:3c:1a:fb:7a:14:f7:c8:6d:27:
f0:6c:b2:65:12:46:9a:d2:b5:e1:42:11:b6:a4:9e:
66:df:46:44:c4:95:b6:bc:fb:c5:c5:dc:54:d9:5d:
67:6f:a2:4c:b1:96:b3:a6:c5:8f:58:62:18:1c:85:
8c:49:ca:2f:b3:c2:e5:b6:42:b9:62:4e:28:9e:19:
03:37:94:44:fb:ed:f6:e8:8e:b8:19:96:6e:c5:ee:
ab:e6:e2:0c:3a:10:d2:89:86:b2:eb:94:fd:70:b8:
66:60:fa:8c:db:7c:55:1c:03:61:1b:0f:1b:b8:e2:
99:d5:cf:72:0e:d2:22:3e:87:13:da:62:e2:da:c4:
42:63:48:a6:25:5b:44:02:6a:3b:d9:aa:37:fe:dd:
8a:2d:16:2c:78:cb:d6:3d:f1:eb:ba:18:ca:43:d4:
1b:27:f6:89:7b:a7:5d:f2:11:1d:7e:41:8e:a2:a7:
db:11:20:d7:f5:7a:79:97:6a:80:50:0e:3e:2d:95:
35:83:b5:e0:91:29:dd:eb:73:e0:6e:28:6b:3d:c1:
3f:ce:2e:7a:06:d8:0b:a3:f7:d8:d6:51:db:d2:6c:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3F:8E:15:E6:74:7D:AD:99:BD:F9:41:77:9D:A1:78:02:D9:41:CA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3138342e302f32312d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.180.184.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:0e:91:e4:a1:8e:51:72:f7:78:2a:41:12:0c:0a:b6:0d:47:
4c:03:93:3e:19:26:f8:b7:a3:38:f6:17:29:ba:9b:a0:6e:8d:
26:ea:28:17:47:9e:9e:64:63:80:47:2f:1a:c5:01:ab:36:21:
72:8b:01:11:d3:e3:97:85:3c:46:15:dc:d5:b5:6a:41:c2:18:
e9:db:95:8a:3d:d1:23:e9:48:1c:dd:42:57:26:23:68:ae:f5:
42:ec:25:7d:db:ac:dc:e9:8a:79:ff:3c:92:8f:ca:d4:d9:9a:
fc:ca:7b:01:c8:8e:2e:37:51:03:6b:18:27:dd:b3:b8:57:74:
21:b8:26:0f:29:9b:22:03:15:34:59:13:1a:e8:a7:44:dd:7d:
dd:15:1e:6a:ba:88:2c:d5:e8:2a:50:31:d3:fd:a3:6b:ad:66:
bc:fe:78:6a:d9:1c:a7:fa:12:f8:cf:f1:95:32:e1:52:cd:7a:
2e:3a:d7:3f:6b:02:67:4b:51:c7:99:74:f1:92:4d:f3:68:a2:
f1:85:9d:ea:08:66:88:d3:4f:7b:4f:00:46:6b:1c:60:fe:ad:
4e:ac:0b:4d:b0:af:87:35:39:84:1b:c4:83:65:bb:bf:c3:23:
cb:e3:ac:14:6b:25:b0:d4:2e:76:40:71:97:47:a9:84:94:b4:
cc:ab:aa:56
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUSEIyhyit5tkHhcSVwcNnwo/7v88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA0MjExOTAwMjdaFw0yNjA0MjAxOTA1MjdaMDMxMTAvBgNV
BAMTKDM0M0Y4RTE1RTY3NDdEQUQ5OUJERjk0MTc3OURBMTc4MDJEOTQxQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfrbuZbZtLMD271xN085ZlPjE8
vjzRBm6dopWBXb3eo9iZLDwa+3oU98htJ/BssmUSRprSteFCEbaknmbfRkTElba8
+8XF3FTZXWdvokyxlrOmxY9YYhgchYxJyi+zwuW2QrliTiieGQM3lET77fbojrgZ
lm7F7qvm4gw6ENKJhrLrlP1wuGZg+ozbfFUcA2EbDxu44pnVz3IO0iI+hxPaYuLa
xEJjSKYlW0QCajvZqjf+3YotFix4y9Y98eu6GMpD1Bsn9ol7p13yER1+QY6ip9sR
INf1enmXaoBQDj4tlTWDteCRKd3rc+BuKGs9wT/OLnoG2Auj99jWUdvSbBeVAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUND+OFeZ0fa2ZvflBd52heALZQcowHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzODMwMmUzMTM4
MzQyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjMwMzQzMTM3MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BANStLgwDQYJKoZIhvcNAQELBQADggEBABoOkeShjlFy93gqQRIMCrYNR0wDkz4Z
Jvi3ozj2Fym6m6BujSbqKBdHnp5kY4BHLxrFAas2IXKLARHT45eFPEYV3NW1akHC
GOnblYo90SPpSBzdQlcmI2iu9ULsJX3brNzpinn/PJKPytTZmvzKewHIji43UQNr
GCfds7hXdCG4Jg8pmyIDFTRZExrop0Tdfd0VHmq6iCzV6CpQMdP9o2utZrz+eGrZ
HKf6EvjP8ZUy4VLNei461z9rAmdLUceZdPGSTfNoovGFneoIZojTT3tPAEZrHGD+
rU6sC02wr4c1OYQbxINlu7/DI8vjrBRrJbDULnZAcZdHqYSUtMyrqlY=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:02:52 2025 by rpki-client