Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135372e3137332e3230382e302f32312d3234203d3e203437353833.roa
File: 3135372e3137332e3230382e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: WBR0JnJKo9gLQ72V4mHl6lc49GX+rFNSi0RdNObOAzM=
Subject key identifier: 1D:19:7F:20:87:1B:42:77:DE:C8:15:A9:93:8F:27:9F:AE:3A:0B:73
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 687A73DE1A3C3D9F697C8C78F5E7C7F393F12333
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135372e3137332e3230382e302f32312d3234203d3e203437353833.roa
Signing time: Thu 15 May 2025 10:46:17 +0000
ROA not before: Thu 15 May 2025 10:41:17 +0000
ROA not after: Thu 14 May 2026 10:46:17 +0000
asID: 47583
IP address blocks: 157.173.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:7a:73:de:1a:3c:3d:9f:69:7c:8c:78:f5:e7:c7:f3:93:f1:23:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 15 10:41:17 2025 GMT
Not After : May 14 10:46:17 2026 GMT
Subject: CN=1D197F20871B4277DEC815A9938F279FAE3A0B73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:63:3b:12:47:70:94:4b:cc:92:60:2c:7d:21:
af:f6:ea:73:ab:1a:ba:13:d8:6d:e5:ba:55:bd:4f:
dc:0a:b0:00:df:51:d1:06:64:44:ea:c5:54:55:65:
93:62:af:7a:0b:58:f7:2c:cc:b0:ee:88:f3:b2:30:
56:e0:94:29:8f:61:7b:43:1c:75:c4:4c:56:df:f7:
37:2c:25:b1:c8:fd:f1:5f:dd:15:a2:bd:5f:05:e1:
4d:72:ee:72:33:61:a0:b3:e4:f2:c5:c4:a3:4d:b3:
6e:79:b9:3d:3f:a0:69:6f:aa:7e:bf:65:83:f2:cb:
1b:cb:ee:3d:64:78:67:2c:00:3c:7b:11:e1:25:09:
a9:3e:bc:de:f9:35:22:5e:9d:78:6c:ec:db:d6:ce:
4c:f2:82:f2:93:de:3a:71:7a:8c:24:6b:7b:54:78:
55:f1:5a:5b:65:65:45:ad:03:08:53:68:2c:1e:f3:
7c:2b:e9:95:df:16:98:04:31:20:5b:f6:b5:29:9e:
a0:4f:8d:f9:8a:ce:ac:f2:82:c6:95:ca:54:63:e4:
0a:0d:50:63:c0:50:82:fd:ba:db:41:59:6c:be:5c:
4a:c0:a0:e4:68:59:52:1c:3b:33:b7:97:10:fa:c5:
57:00:ed:22:2e:41:74:f8:d9:c9:4d:cb:41:87:cf:
1d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:19:7F:20:87:1B:42:77:DE:C8:15:A9:93:8F:27:9F:AE:3A:0B:73
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135372e3137332e3230382e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.173.208.0/21
Signature Algorithm: sha256WithRSAEncryption
1c:66:67:fb:04:4e:70:30:53:97:df:4d:f4:aa:d3:5c:db:08:
be:b5:83:e0:65:9d:a8:22:15:a6:8f:40:6e:f6:03:84:71:83:
c6:37:f4:9f:bd:95:75:8a:d3:6e:f4:dc:6d:ab:2b:aa:dc:1f:
13:29:91:66:d5:23:58:0c:f8:ca:8e:ef:b7:25:ab:1b:58:6f:
51:20:7b:10:36:60:5c:f7:bb:14:64:ba:99:7a:4a:ef:21:05:
54:ec:e2:b8:84:9a:f1:b5:8e:48:7f:ea:b1:af:4a:91:54:7e:
fd:b0:80:4b:06:61:8e:f4:e4:b5:af:e4:bf:0b:a3:fd:c0:98:
3b:56:bc:38:30:66:cf:ad:2b:83:88:d8:4a:97:4d:5c:0a:c1:
8a:5f:c6:60:48:57:ce:0e:31:b9:74:c0:cb:87:ce:5d:56:44:
34:44:8a:e0:dd:cc:a1:79:65:51:82:27:4e:1b:11:e8:c7:f7:
6a:5e:d0:06:c9:8e:70:2c:93:ef:ca:6f:be:1f:d1:53:cb:9f:
66:bc:1c:1b:35:75:73:b2:d9:f5:17:cd:96:e8:30:0c:ba:81:
a6:76:d2:90:0e:1e:3f:98:42:7d:00:03:f4:37:70:d8:38:d0:
a3:16:41:f1:c2:20:df:60:1d:8f:cd:b3:2d:8e:31:db:c1:33:
e9:30:ac:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:52:55 2025 by rpki-client