Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e31372e3132332e302f32342d3234203d3e20323037313337.roa
File: 38312e31372e3132332e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: HwZEdyegrKZFcIgn66bPewf4BFrcaukmWdYZCIHN2Hc=
Subject key identifier: CA:9C:39:34:1D:7E:97:6E:D3:CE:1B:3C:7C:86:B7:55:58:5D:13:64
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4FFEAEEEC258DEC1C3D4AA66B3D2042221D0D12B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e31372e3132332e302f32342d3234203d3e20323037313337.roa
Signing time: Wed 23 Apr 2025 12:46:08 +0000
ROA not before: Wed 23 Apr 2025 12:41:08 +0000
ROA not after: Wed 22 Apr 2026 12:46:08 +0000
asID: 207137
IP address blocks: 81.17.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 16:39:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:fe:ae:ee:c2:58:de:c1:c3:d4:aa:66:b3:d2:04:22:21:d0:d1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 23 12:41:08 2025 GMT
Not After : Apr 22 12:46:08 2026 GMT
Subject: CN=CA9C39341D7E976ED3CE1B3C7C86B755585D1364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d0:e4:3d:28:d1:7c:48:7e:9e:b6:51:61:42:
02:01:ae:ac:ce:3e:15:66:44:d8:e2:5a:c7:0f:c9:
a0:a5:55:3b:17:cf:6c:36:13:e1:e9:0d:35:3a:d2:
f1:ca:17:b9:c1:98:bd:84:85:80:b0:44:b0:fc:7a:
80:a6:c5:31:1e:a1:66:9b:d1:e5:1a:e6:07:c3:c2:
15:bf:a7:6a:c6:70:98:a3:bf:1f:9a:39:4e:3d:d0:
8c:df:2b:c9:a1:ce:dd:b6:9a:7c:24:94:56:6c:da:
5a:1b:10:82:49:f7:0a:72:8e:e7:db:07:c0:37:24:
9d:2b:5b:84:36:f7:50:37:12:f7:89:6c:fd:e7:3f:
36:2a:8c:39:43:41:3a:c9:b2:95:25:ec:eb:eb:86:
35:e8:a0:a2:a8:8c:85:bf:66:9d:0e:d3:e0:f2:7b:
a8:6f:f5:84:14:bb:92:f0:f2:3e:b5:d2:69:35:6a:
d4:d1:43:0f:a7:66:37:61:dd:ac:28:26:be:bd:70:
75:fd:2b:f4:db:23:81:5c:71:60:df:02:d9:9c:f9:
09:04:74:b1:90:f7:86:a7:37:a3:59:e8:48:72:37:
54:e8:a2:8b:6a:84:f9:08:8f:15:29:fa:63:8c:03:
a5:f0:95:b5:ef:b5:76:7e:aa:d8:a7:4e:fc:60:47:
e0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9C:39:34:1D:7E:97:6E:D3:CE:1B:3C:7C:86:B7:55:58:5D:13:64
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e31372e3132332e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.123.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:6a:2d:71:3a:a4:b3:1c:f1:58:37:1b:8b:31:3e:49:ae:43:
5e:82:c1:36:50:e6:69:f9:3d:67:17:66:cf:f2:af:8c:6f:7f:
94:40:b4:96:37:62:8b:bf:d4:59:45:0e:85:75:dd:e1:62:c2:
b8:5f:24:4f:66:b2:f1:09:bf:03:8b:37:f2:ee:d7:91:ca:67:
c8:d9:37:75:d4:47:75:db:92:0f:e5:26:f7:6b:10:8b:95:df:
db:ee:fb:b7:fb:7e:83:73:16:a7:d0:a0:a6:5d:a1:00:bc:f2:
36:4a:3b:a7:b9:48:51:8c:4c:b4:73:80:5c:e2:b8:cf:ba:dd:
c6:e7:8c:2f:bf:61:78:d2:d6:a2:dd:88:6b:88:30:f3:90:49:
d4:43:27:ca:9f:71:98:63:d1:2b:fa:04:14:96:32:57:5b:4e:
36:9f:d9:10:31:b4:64:82:2b:d6:b6:5f:87:2f:6d:fd:59:31:
99:d8:52:f8:0a:83:4e:3f:ea:f6:c4:87:89:09:4b:7c:f5:1c:
9c:5a:b1:7f:30:e0:13:5e:79:b5:26:da:a0:1b:ad:e3:a5:99:
70:36:aa:08:c8:0c:c7:0c:f3:8d:ef:c0:ff:d1:65:a7:38:d9:
12:aa:0b:97:65:28:2e:ac:a9:b1:a8:4f:27:75:6e:b6:67:0f:
ea:9a:08:a8
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUT/6u7sJY3sHD1Kpms9IEIiHQ0SswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA0MjMxMjQxMDhaFw0yNjA0MjIxMjQ2MDhaMDMxMTAvBgNV
BAMTKENBOUMzOTM0MUQ3RTk3NkVEM0NFMUIzQzdDODZCNzU1NTg1RDEzNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy0OQ9KNF8SH6etlFhQgIBrqzO
PhVmRNjiWscPyaClVTsXz2w2E+HpDTU60vHKF7nBmL2EhYCwRLD8eoCmxTEeoWab
0eUa5gfDwhW/p2rGcJijvx+aOU490IzfK8mhzt22mnwklFZs2lobEIJJ9wpyjufb
B8A3JJ0rW4Q291A3EveJbP3nPzYqjDlDQTrJspUl7OvrhjXooKKojIW/Zp0O0+Dy
e6hv9YQUu5Lw8j610mk1atTRQw+nZjdh3awoJr69cHX9K/TbI4FccWDfAtmc+QkE
dLGQ94anN6NZ6EhyN1ToootqhPkIjxUp+mOMA6XwlbXvtXZ+qtinTvxgR+DpAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUypw5NB1+l27Tzhs8fIa3VVhdE2QwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMTJlMzEzNzJlMzEzMjMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM3MzEzMzM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
URF7MA0GCSqGSIb3DQEBCwUAA4IBAQBKai1xOqSzHPFYNxuLMT5JrkNegsE2UOZp
+T1nF2bP8q+Mb3+UQLSWN2KLv9RZRQ6Fdd3hYsK4XyRPZrLxCb8Dizfy7teRymfI
2Td11Ed125IP5Sb3axCLld/b7vu3+36Dcxan0KCmXaEAvPI2SjunuUhRjEy0c4Bc
4rjPut3G54wvv2F40tai3YhriDDzkEnUQyfKn3GYY9Er+gQUljJXW042n9kQMbRk
givWtl+HL239WTGZ2FL4CoNOP+r2xIeJCUt89RycWrF/MOATXnm1JtqgG63jpZlw
NqoIyAzHDPON78D/0WWnONkSqguXZSgurKmxqE8ndW62Zw/qmgio
-----END CERTIFICATE-----
Generated at Tue May 6 01:00:36 2025 by rpki-client