Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e3134372e3130312e302f32342d3234203d3e20313437303439.roa
File: 38392e3134372e3130312e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: dG+CSC3qxndy7tcclCMvwgnkpshW+Yfb8H1zuBvbj1Q=
Subject key identifier: 29:E2:AC:62:3C:63:00:D6:0A:B3:26:F8:62:2C:75:D6:FC:A8:93:28
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 59DD17A5ACF4F53A9E142225F9AD7F0734298C3E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e3134372e3130312e302f32342d3234203d3e20313437303439.roa
Signing time: Sat 29 Mar 2025 08:45:56 +0000
ROA not before: Sat 29 Mar 2025 08:40:56 +0000
ROA not after: Sat 28 Mar 2026 08:45:56 +0000
asID: 147049
IP address blocks: 89.147.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:dd:17:a5:ac:f4:f5:3a:9e:14:22:25:f9:ad:7f:07:34:29:8c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 29 08:40:56 2025 GMT
Not After : Mar 28 08:45:56 2026 GMT
Subject: CN=29E2AC623C6300D60AB326F8622C75D6FCA89328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:db:42:34:52:7d:31:82:c7:99:fa:45:1f:93:
7c:ec:63:88:2d:4d:cc:e5:13:3e:3f:30:a8:67:5b:
36:b4:01:75:28:eb:70:30:d9:d8:32:31:8f:79:0a:
c6:07:54:5f:1d:b2:8e:a7:8a:61:d0:63:d6:86:93:
7d:19:91:f6:8a:f7:b9:8b:5e:76:a8:e2:29:02:e9:
03:0e:a4:e2:eb:f7:9b:8a:58:19:7b:f8:d9:73:db:
8f:4f:27:f5:b2:db:01:ce:91:00:0f:25:25:1b:62:
d6:8b:cc:f6:16:5c:2f:b3:bb:84:f9:1c:c9:65:15:
c4:6e:fd:ec:6a:db:58:31:1a:d8:3e:48:3b:d1:54:
11:e3:8b:7a:f9:de:6b:28:e1:81:31:38:16:e6:c0:
8f:64:dc:eb:c5:94:60:c1:66:70:4f:9e:c1:5c:fe:
51:bd:9f:8a:da:f7:67:99:bf:4a:54:62:26:26:89:
22:b1:7e:bf:30:f2:23:d1:3d:09:d8:3a:cc:8b:ce:
25:c6:07:b8:b5:1f:6c:1a:82:49:d0:54:d5:46:48:
16:8a:6a:2e:4b:4f:22:af:4d:a9:a7:d1:76:14:73:
ce:8e:b8:f3:41:74:80:a2:d6:51:9a:53:d7:5f:2c:
68:46:e3:96:a5:d9:f9:15:1e:a8:14:9d:88:dc:88:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E2:AC:62:3C:63:00:D6:0A:B3:26:F8:62:2C:75:D6:FC:A8:93:28
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e3134372e3130312e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.147.101.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:48:74:be:db:55:de:f0:ac:a5:9d:7f:eb:1c:8c:3b:1e:6a:
58:3f:d4:a7:96:71:97:f1:cf:f8:03:ff:27:22:e0:8d:1f:98:
45:f8:4a:89:5b:71:55:54:2e:5e:4e:0d:cd:58:c4:6d:20:6a:
24:46:7e:27:83:47:22:6a:3f:c3:da:de:67:c4:6c:9f:02:a1:
a5:d3:63:29:57:7e:01:e8:6e:16:05:ab:e8:92:d5:d1:65:71:
c8:da:9a:9a:31:b2:dc:29:ef:ea:60:1e:f4:d8:78:ed:f7:f0:
ca:07:10:31:1f:5c:d7:d5:c5:c2:aa:d8:0f:4c:05:9f:69:a1:
ce:68:cd:b2:0f:a6:95:e2:96:fc:8c:4a:62:45:f1:74:85:16:
dc:af:16:98:be:cf:82:bc:30:b7:1e:60:fb:0b:6a:44:c3:0d:
1d:e4:31:1e:03:dc:d9:bd:ee:c9:37:64:1e:2e:98:25:2f:b9:
60:61:a5:fc:d8:1b:6e:fd:15:93:38:34:8c:b6:48:51:8e:34:
70:89:6e:40:36:d1:97:c8:65:4e:e4:70:d8:bf:94:08:ed:b7:
76:69:fb:83:52:4d:57:9f:7d:ad:49:9a:db:d0:55:88:1b:ee:
92:86:3c:af:cf:81:1f:e8:24:26:32:99:69:85:ba:7e:1b:62:
f7:11:2c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:20:54 2025 by rpki-client