Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231392e3134332e302f32342d3332203d3e203531313637.roa
File: 3138352e3231392e3134332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: CE+IGKeO/gNmYTslQDIJY+dL71FvBOErpRxxZcjT0Qc=
Subject key identifier: FB:57:A3:93:06:3B:AD:FF:E7:B7:4A:60:3D:8D:A0:6C:4A:DD:F3:9F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2C7B9D7186278D15DE5A197C25F6E1A26C29B9DD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231392e3134332e302f32342d3332203d3e203531313637.roa
Signing time: Thu 01 May 2025 20:46:12 +0000
ROA not before: Thu 01 May 2025 20:41:12 +0000
ROA not after: Thu 30 Apr 2026 20:46:12 +0000
asID: 51167
IP address blocks: 185.219.143.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 16:39:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:7b:9d:71:86:27:8d:15:de:5a:19:7c:25:f6:e1:a2:6c:29:b9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 1 20:41:12 2025 GMT
Not After : Apr 30 20:46:12 2026 GMT
Subject: CN=FB57A393063BADFFE7B74A603D8DA06C4ADDF39F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ce:a0:c2:12:9e:7e:1e:8d:94:40:5b:36:d0:
c9:ad:e2:d2:a8:42:77:50:95:8c:8d:af:d9:13:a4:
96:b8:9a:10:64:f5:77:85:db:0c:9c:55:ea:cd:e0:
a8:29:93:f8:ea:74:58:23:6b:4b:a1:e6:e6:13:ce:
cd:0d:3a:e1:83:fc:76:07:29:d1:e1:45:16:ca:1b:
b7:e4:4f:e1:2c:b9:c6:c7:16:c2:ff:93:a5:3e:01:
ee:5d:a6:3e:f8:f1:27:e0:32:db:ce:d0:3f:81:d5:
f8:5d:15:cf:0c:0b:3f:c4:3b:b3:07:72:36:5b:ce:
98:24:9e:9b:37:0e:81:f0:66:ef:8a:03:f6:a1:cd:
70:f9:df:49:44:25:50:4d:26:85:c9:69:21:4d:15:
51:b9:00:0f:ba:07:1b:4a:6a:1a:5d:4f:f9:8b:6f:
d4:d1:9a:eb:ee:95:27:ed:99:0c:2c:34:f1:b0:20:
6c:3f:99:8b:e3:82:69:20:e9:12:3c:8c:59:aa:5d:
9c:f2:a5:44:fd:ae:1a:3d:89:95:64:3b:04:57:a1:
2d:e0:7d:ce:26:51:db:23:e7:ea:5c:2a:09:b2:be:
6d:bc:25:62:02:b9:72:82:9b:07:25:b2:fa:15:39:
5b:70:a9:0e:ac:a4:3b:b6:19:6b:64:2e:38:f2:9b:
ef:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:57:A3:93:06:3B:AD:FF:E7:B7:4A:60:3D:8D:A0:6C:4A:DD:F3:9F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231392e3134332e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.143.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:52:f5:45:c3:6c:58:f6:7a:5f:68:f0:0b:58:e6:d0:e9:5c:
0e:f1:bc:1f:b8:57:0a:f1:67:ef:17:9e:3e:f7:a2:7c:9b:0b:
2f:b2:2c:16:fc:fa:ba:d7:d9:f9:eb:67:f8:e1:53:7b:a1:05:
f1:64:b6:84:c8:73:b8:13:30:52:15:b6:3f:8e:b7:3e:6c:e7:
57:dc:ba:2e:91:ea:ab:0d:26:ed:4a:10:4c:a8:0a:35:d7:f0:
4f:44:ec:b1:4e:a6:06:94:8c:c4:1d:6d:3f:f7:37:80:ef:7a:
bb:8d:d6:e8:bc:51:97:c7:a9:f4:0d:67:2d:2d:72:26:d2:c0:
1d:6d:b6:ba:57:96:61:9c:23:5a:df:4d:68:f3:87:bd:2d:f3:
9d:96:6d:4e:93:0e:fd:2f:7c:55:a0:4f:5d:2f:1b:88:96:a2:
a6:be:54:64:a0:a4:38:76:77:d5:ca:be:79:10:b3:b3:2a:5f:
e8:a6:2f:72:6d:0d:d4:fa:b7:90:51:73:f4:ce:89:21:71:99:
55:9d:d2:c4:84:bb:96:58:ff:e6:64:fc:f4:e4:ff:e1:71:a4:
a8:c6:b1:47:62:51:3c:23:3a:1f:f3:22:54:7f:27:b9:c6:b9:
1c:15:d6:b2:34:0d:74:54:7d:aa:87:85:ef:bf:85:86:26:0a:
92:ff:9e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:24:30 2025 by rpki-client