Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e39342e302f32342d3234203d3e20313336373837.roa
File: 3135362e36372e39342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: CDQDz5vwHw/XIqRiu69MeoKDTrtKFZpn9N1XOTfhg8M=
Subject key identifier: AA:8D:34:17:67:C8:CB:11:7F:1C:20:20:4F:3A:00:F4:11:D1:C9:74
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7537C38BA6B9B755E66518ABA03700BFD635AEB8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e39342e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 21 Apr 2025 17:46:07 +0000
ROA not before: Mon 21 Apr 2025 17:41:07 +0000
ROA not after: Mon 20 Apr 2026 17:46:07 +0000
asID: 136787
IP address blocks: 156.67.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 16:39:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:37:c3:8b:a6:b9:b7:55:e6:65:18:ab:a0:37:00:bf:d6:35:ae:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 21 17:41:07 2025 GMT
Not After : Apr 20 17:46:07 2026 GMT
Subject: CN=AA8D341767C8CB117F1C20204F3A00F411D1C974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:e5:96:94:c6:a4:3d:de:47:9b:2f:1f:c8:
54:03:b0:23:4d:1f:66:85:d3:21:0b:11:ea:5e:2e:
56:b6:d6:80:a5:30:54:28:e0:75:5c:a2:f7:d9:d0:
f4:17:c3:0d:0d:80:dc:9a:2e:db:3c:ae:f6:e9:f8:
6d:4f:6e:97:e9:69:0b:fb:f2:60:54:84:b8:4f:cb:
9c:ab:06:74:ed:11:ab:b8:5e:9f:53:a5:9b:d2:4d:
36:c7:89:be:6a:db:2a:8a:0f:29:00:a8:d6:d4:2d:
b3:87:23:f3:3a:00:f7:c2:26:c3:95:d7:3e:55:13:
99:7e:62:68:19:02:67:c1:58:91:bf:c0:e1:ab:ee:
43:bd:fe:dc:4d:5f:b5:e8:00:64:25:27:72:a8:67:
d0:e0:12:69:f1:19:70:02:43:54:76:bc:f4:11:5f:
16:5e:97:45:69:44:54:45:88:50:19:5e:5d:6f:46:
36:88:02:47:77:36:a7:ec:2f:96:88:0d:52:d0:8d:
1d:5e:2e:a5:89:06:53:cb:13:33:0a:0a:94:94:ca:
10:4a:ff:d6:bc:38:e3:6f:0a:64:f7:f0:66:dc:e0:
8b:aa:16:a6:bf:68:a6:c2:45:0d:16:22:5c:f9:81:
95:2c:a3:60:6e:d0:87:99:21:14:b2:1b:90:63:e9:
1c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8D:34:17:67:C8:CB:11:7F:1C:20:20:4F:3A:00:F4:11:D1:C9:74
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e39342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.94.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:6f:b9:9b:32:fc:0b:5c:09:32:3c:e9:12:df:52:a9:84:08:
c7:c7:ff:37:68:2b:b2:7b:be:bc:f0:92:83:56:11:54:87:b9:
12:10:05:13:56:71:b1:64:e1:94:0e:21:e8:2e:c3:70:5d:fb:
67:cc:84:1f:f1:5c:bd:09:eb:b9:df:e7:1b:8b:6e:0f:10:71:
58:ef:ed:93:ef:73:80:f9:a2:2c:aa:a0:5b:ce:d1:23:78:83:
c5:42:1d:ea:ec:06:80:83:d0:51:36:de:7c:7f:1e:d0:ac:c0:
74:b4:92:21:09:62:5b:01:43:e3:b6:a8:d5:9a:0e:bd:e7:1c:
ed:60:4a:39:61:ba:f6:0f:d2:e8:81:7d:86:a0:84:c0:84:29:
c6:e5:50:82:fa:d9:4f:38:b8:17:63:98:c7:af:51:fd:4b:a4:
f3:bf:d3:59:44:52:93:82:b4:18:12:19:1a:73:31:77:07:a3:
91:53:0b:74:ae:bb:d0:b4:92:f2:a2:d5:a4:f9:c4:9d:03:06:
d6:be:46:6e:f0:d8:e1:cb:ad:92:d6:1d:42:21:b3:ee:5d:3a:
00:e6:c9:9a:b0:4b:02:4e:d6:47:db:f8:c8:7a:9e:c8:82:ab:
20:7d:04:38:4e:6c:7a:48:9f:76:6a:69:c6:d6:69:a3:b5:89:
2b:9e:77:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:23:35 2025 by rpki-client