Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3138332e302f32342d3234203d3e20323036323833.roa
File: 38322e3138302e3138332e302f32342d3234203d3e20323036323833.roa (raw, json)
Hash identifier: c3KKAmpOgqKPwKyVTI+X/pUyB15K3tNcrRQnVoQbNeI=
Subject key identifier: 7D:C1:19:03:53:75:EF:04:DF:CC:51:41:72:12:C9:6C:F4:B3:18:1C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7609DD699FB79E1B46DF90956E079ECFF73F9EFD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3138332e302f32342d3234203d3e20323036323833.roa
Signing time: Wed 30 Apr 2025 13:46:10 +0000
ROA not before: Wed 30 Apr 2025 13:41:10 +0000
ROA not after: Wed 29 Apr 2026 13:46:10 +0000
asID: 206283
IP address blocks: 82.180.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:09:dd:69:9f:b7:9e:1b:46:df:90:95:6e:07:9e:cf:f7:3f:9e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 30 13:41:10 2025 GMT
Not After : Apr 29 13:46:10 2026 GMT
Subject: CN=7DC119035375EF04DFCC51417212C96CF4B3181C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:6a:5d:03:fe:62:f4:19:23:16:e6:5b:81:
cf:aa:0a:6f:cb:1b:52:43:81:38:eb:48:83:b4:45:
14:79:fe:00:9b:a8:12:89:15:30:ec:e1:a7:ae:6e:
75:f1:26:71:b5:45:b5:4d:9c:b6:62:f4:a2:ff:3b:
52:e8:aa:ac:6f:ef:45:97:e3:cc:df:32:da:4c:6e:
55:1b:cc:5f:2b:c2:d6:1b:84:a3:9e:22:2f:80:13:
6a:ee:79:fc:45:2c:5d:6e:9f:07:94:bb:e3:8c:fe:
de:24:fe:c1:aa:00:ce:10:26:14:56:45:63:ad:d4:
33:79:53:32:05:06:19:18:09:01:da:9e:b7:a8:41:
b4:a1:24:12:69:f7:e9:05:3a:76:5c:9b:aa:c6:90:
d9:b5:2a:0b:ba:c5:44:c1:d4:0f:29:d7:4f:59:31:
d7:72:ff:cd:60:63:db:3d:94:6c:6d:ed:78:de:89:
3c:fc:8b:72:2e:82:8f:5d:59:b0:e1:ce:27:3f:4a:
74:1b:23:93:21:a3:31:c4:b4:58:d8:06:ca:88:72:
97:2e:3f:10:1c:56:de:92:e4:4e:c2:75:05:6e:7a:
fe:47:71:98:5d:dc:1e:3a:72:e4:d6:2e:75:d7:ac:
3d:11:a9:c6:b7:d4:97:47:23:7f:2e:15:13:9c:93:
69:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C1:19:03:53:75:EF:04:DF:CC:51:41:72:12:C9:6C:F4:B3:18:1C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3138332e302f32342d3234203d3e20323036323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.180.183.0/24
Signature Algorithm: sha256WithRSAEncryption
35:8c:08:55:2c:ad:74:c4:81:84:2f:50:64:1c:59:36:e8:f5:
3c:e6:e0:b1:90:0d:b6:a9:4b:5b:ed:3f:d7:d0:a4:56:21:d9:
b8:a5:db:6e:e2:88:2c:88:fc:61:fd:98:a2:9d:e4:d1:d0:f1:
f4:4a:16:6f:9d:f8:5b:eb:13:9f:d1:5e:9c:49:89:01:ff:87:
19:df:ce:a4:ed:24:11:75:e5:e9:14:ff:bb:bc:ee:47:13:31:
d0:34:fa:47:d1:b1:9d:e0:26:f9:40:bc:28:f6:23:01:33:ba:
b8:9e:fa:54:61:02:1b:98:01:bc:11:ee:a6:7a:86:b4:70:55:
66:64:00:f2:e6:81:49:c5:40:08:58:0c:a2:0b:46:41:1d:91:
39:fe:ab:cb:8e:bd:ff:78:3b:97:06:52:a5:49:cd:6d:c8:c8:
0e:6a:07:57:28:27:ff:13:31:aa:24:d9:ae:67:16:ed:50:23:
a2:62:54:62:92:08:07:a4:41:8c:53:b7:7a:0a:b2:db:db:63:
d9:86:77:42:17:f7:8a:99:c5:f7:75:62:6a:f4:6b:38:66:a6:
66:57:be:8c:51:99:13:05:33:f3:af:3e:6a:1f:be:e9:73:07:
89:c6:76:48:45:3d:68:5a:ac:36:ce:6b:0a:b6:7d:ab:05:e9:
44:7d:d4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:04:48 2025 by rpki-client