Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e35352e302f32342d3332203d3e203531313637.roa
File: 3135392e34382e35352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: IVjmTVmVhvG2Ww0CYs2lYtC7NCNmnfqFrPV9giptOFc=
Subject key identifier: 3E:A0:E0:6A:D8:C9:BB:62:31:24:5F:D2:1B:FF:46:9A:A2:7C:69:12
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 678E691B43D793D08DEA01BE64E52E255A112E21
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e35352e302f32342d3332203d3e203531313637.roa
Signing time: Thu 01 May 2025 20:46:11 +0000
ROA not before: Thu 01 May 2025 20:41:11 +0000
ROA not after: Thu 30 Apr 2026 20:46:11 +0000
asID: 51167
IP address blocks: 159.48.55.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 16:39:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:8e:69:1b:43:d7:93:d0:8d:ea:01:be:64:e5:2e:25:5a:11:2e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 1 20:41:11 2025 GMT
Not After : Apr 30 20:46:11 2026 GMT
Subject: CN=3EA0E06AD8C9BB6231245FD21BFF469AA27C6912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:93:b1:5f:75:64:df:c0:4f:57:e8:28:8d:97:
ac:52:77:82:b9:a9:f1:2c:72:62:49:2a:b2:68:3a:
f4:34:45:0d:fc:09:2f:3a:f1:cb:08:b2:0d:83:a9:
1b:ed:f6:52:4a:b1:d3:27:a7:43:0f:75:5d:ca:f5:
8d:0e:8a:fc:06:46:05:53:2c:ad:86:6e:4c:4b:ed:
87:32:73:56:0f:cf:05:91:dc:12:87:e3:6f:3d:d1:
d8:dc:28:07:87:5e:2e:0b:06:18:d6:f8:94:6d:b0:
cd:65:df:f1:40:bb:cf:2b:de:8d:2b:03:d9:1b:8d:
be:c8:e3:78:8c:28:45:be:56:3b:ea:13:43:6c:9a:
3c:5f:60:23:82:2b:1b:73:cd:63:db:79:b2:4b:54:
24:35:7a:fe:4f:cd:6c:f9:5b:11:d8:84:5f:0d:bc:
cf:8c:41:1e:1e:eb:c2:0e:46:17:61:3e:8b:d7:7f:
bf:dd:d2:3d:e7:32:73:d9:d8:12:9e:0f:57:a7:7f:
9d:21:ab:6e:c3:8e:b3:85:b0:13:cf:e4:41:ce:22:
f5:a1:c7:0f:46:5f:67:1e:f4:64:10:e6:f0:6f:89:
05:a6:50:94:47:dc:51:74:6b:6c:9e:8d:6f:d8:6d:
08:19:5e:f4:b5:f1:96:95:5f:bd:e8:5a:05:98:45:
3b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A0:E0:6A:D8:C9:BB:62:31:24:5F:D2:1B:FF:46:9A:A2:7C:69:12
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e35352e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.48.55.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:07:46:f2:56:61:e0:34:e4:60:21:af:e7:83:3b:51:16:ed:
04:8a:3e:77:2b:e0:3d:22:e1:3d:75:24:ce:94:bc:64:dc:38:
7e:3d:15:5f:b4:ea:c8:03:7b:8c:e1:09:ea:5e:64:c6:f7:d9:
ce:8a:c2:43:84:69:cd:b2:e3:77:e0:b9:b5:d8:d3:10:bd:f9:
44:4c:0a:8f:91:57:60:e4:72:c2:d9:e5:be:7e:c5:63:35:17:
ef:99:97:41:40:f1:37:99:68:34:4f:44:25:c9:ed:93:6c:c6:
2b:04:d6:c6:de:b3:9a:42:3a:18:80:c4:15:ab:60:46:e6:04:
ff:57:5f:7d:3a:21:58:99:b2:52:70:cd:f6:0d:41:58:d7:d0:
be:2d:84:5f:94:50:e4:9a:87:aa:fa:99:ac:f8:c4:7b:24:36:
38:e0:5d:cd:8a:6a:b1:fd:29:07:0a:73:f6:14:6c:d4:f2:9e:
2d:e5:51:c1:59:bc:19:b9:22:99:f9:d4:7b:27:2b:ae:9d:2f:
f3:1c:88:27:e9:85:6d:3c:5b:de:fd:c3:51:56:ba:38:e0:c3:
36:b3:d2:cd:79:34:b2:0e:05:de:bd:3d:ca:1c:8b:9b:46:84:
48:91:d7:31:72:11:16:0e:c4:bb:b3:b5:92:c4:ae:f5:d2:3c:
80:f1:1b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:34:38 2025 by rpki-client