Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e38302e302f32312d3234203d3e203437353833.roa
File: 38322e3139372e38302e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: Uj4wWAAL8kRVDhmU3g9o21QEVGC5gOwzrdpQqUtAun8=
Subject key identifier: 04:9C:5C:5A:EF:95:29:68:F8:43:F8:41:F0:DF:72:17:B4:9B:26:43
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5A4A2ED8C352226AF7079DDEFE936C542E23310F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e38302e302f32312d3234203d3e203437353833.roa
Signing time: Thu 15 May 2025 10:46:20 +0000
ROA not before: Thu 15 May 2025 10:41:20 +0000
ROA not after: Thu 14 May 2026 10:46:20 +0000
asID: 47583
IP address blocks: 82.197.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:4a:2e:d8:c3:52:22:6a:f7:07:9d:de:fe:93:6c:54:2e:23:31:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 15 10:41:20 2025 GMT
Not After : May 14 10:46:20 2026 GMT
Subject: CN=049C5C5AEF952968F843F841F0DF7217B49B2643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3b:5c:d5:19:8d:5f:e7:cc:bc:95:fa:2e:34:
89:9c:6b:e3:b4:5c:0c:84:2f:13:d9:d3:bb:c8:f9:
d9:fc:c6:98:7e:8d:0d:5d:13:90:ea:f9:89:20:0a:
f2:ca:89:06:51:5b:17:b5:18:20:d5:3b:c1:57:29:
f6:ee:b3:0d:2f:5a:d7:6d:6c:25:cc:4f:34:16:02:
14:95:a0:ea:40:d5:03:e3:58:c2:87:49:d9:ca:92:
38:0b:6d:68:cf:f6:39:55:24:0c:d2:92:f6:d0:5b:
50:de:7b:7f:ad:76:b2:e5:e8:02:c4:cd:27:3e:4b:
42:0b:dc:21:f6:40:aa:60:7d:2e:1e:da:da:e7:4d:
8c:2c:89:32:ce:5e:95:d1:0b:3b:5b:e1:94:d6:2a:
52:e0:6b:58:4b:ea:74:6e:ff:74:a2:74:81:77:c4:
81:1f:31:f3:35:00:64:3a:09:60:c6:93:54:ae:2d:
b0:e9:3d:b5:67:79:fe:43:a5:8b:c7:07:5e:27:58:
5b:0f:01:29:87:6e:e7:19:ed:77:15:14:32:22:63:
e8:ba:cf:09:ec:29:02:77:e9:21:ae:80:0d:c0:da:
bc:c1:68:82:fd:46:23:9d:5a:72:3f:30:2a:5d:ed:
d7:cc:bf:c1:68:18:be:eb:31:3c:27:ad:fe:13:eb:
c5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9C:5C:5A:EF:95:29:68:F8:43:F8:41:F0:DF:72:17:B4:9B:26:43
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e38302e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.80.0/21
Signature Algorithm: sha256WithRSAEncryption
29:e9:ea:03:2b:96:a2:64:9d:64:9b:91:f0:05:8b:6d:ae:20:
89:95:27:96:30:c9:2e:29:36:69:73:01:1d:6e:e2:4e:91:77:
02:25:b1:c1:25:84:59:e4:ba:fa:81:a4:4a:c2:93:35:7a:78:
ef:40:c6:ea:c8:e3:14:52:c9:64:6c:89:b6:70:67:f1:5e:b7:
a2:49:25:d3:27:81:d1:a0:72:5f:3f:eb:df:23:6c:3f:74:c8:
e3:ed:ac:4a:60:2d:0c:02:d9:4a:18:c3:2d:00:39:85:13:de:
73:66:76:a1:5f:ee:ea:95:dd:f6:65:4c:09:64:e2:34:9d:cb:
94:bb:23:54:12:74:83:71:20:ae:51:06:21:b5:50:c7:ab:80:
0d:ae:98:cc:a7:1a:5d:4d:11:b7:c2:78:90:98:af:f1:13:f3:
a1:c5:9c:aa:2a:21:6c:c7:c8:4a:d3:5c:ff:d5:ff:0f:40:af:
64:aa:21:b6:1b:a8:5b:51:19:73:70:c2:a1:5d:03:ac:8a:f3:
af:18:f9:2e:3f:76:ee:5a:4f:17:55:45:52:a5:15:13:4d:55:
c7:dc:a5:e0:5b:07:99:b7:34:ff:10:73:6b:26:23:2c:d0:19:
a9:d5:05:a9:55:d2:7f:6c:92:f3:aa:73:77:82:4f:e6:98:e2:
0c:81:04:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:04:16 2025 by rpki-client