Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a323030303a3a2f34302d3438203d3e20323133353135.roa
File: 326131343a316563373a323030303a3a2f34302d3438203d3e20323133353135.roa (raw, json)
Hash identifier: ei7uKbr21cStunIFD4/+QnxpXX+lUv4yRtUBnFqqQIw=
Subject key identifier: 65:92:E6:F8:C2:4C:D3:DB:EB:F5:CB:E5:89:37:FE:55:22:B8:B0:87
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 51E01C3DFB63FDCFC5951A039F63D60D0AE8A405
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a323030303a3a2f34302d3438203d3e20323133353135.roa
Signing time: Mon 14 Apr 2025 13:06:37 +0000
ROA not before: Mon 14 Apr 2025 13:01:37 +0000
ROA not after: Mon 13 Apr 2026 13:06:37 +0000
asID: 213515
IP address blocks: 2a14:1ec7:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:e0:1c:3d:fb:63:fd:cf:c5:95:1a:03:9f:63:d6:0d:0a:e8:a4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Apr 14 13:01:37 2025 GMT
Not After : Apr 13 13:06:37 2026 GMT
Subject: CN=6592E6F8C24CD3DBEBF5CBE58937FE5522B8B087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:93:7b:0e:cf:9d:4d:74:f0:5f:6d:a3:43:af:
79:3d:43:8b:bc:eb:38:ae:5c:44:11:b2:1d:bc:25:
bc:db:95:79:7d:8d:56:e7:ea:4f:24:7c:4b:fe:ed:
8c:57:24:a0:d4:7b:b7:b4:f6:56:42:9f:e2:0a:c0:
b2:68:af:7c:80:43:32:71:ee:3d:3f:da:73:37:31:
d2:f5:78:84:34:4e:6d:dc:63:54:cb:ef:28:70:3c:
63:7f:ae:36:0b:82:49:3f:4f:e3:fb:e3:b8:c5:b6:
58:20:32:a9:de:89:02:c6:d3:08:7e:65:68:74:b5:
b1:d7:b6:d8:18:51:4b:24:0a:a1:4b:b5:b2:97:18:
36:43:df:92:b1:14:13:11:cb:d8:e7:c5:04:eb:5a:
b7:fe:e5:7c:57:c3:df:a7:75:e2:77:8d:36:92:cf:
db:ee:b5:56:2a:e7:84:4e:e3:e1:b1:42:c9:1d:91:
cc:5e:8e:54:da:f2:dd:72:f8:30:22:bc:14:cc:36:
1b:35:1c:08:32:07:d1:8e:67:8e:1e:b2:a3:7f:57:
83:1b:52:b7:ca:bf:a2:24:9f:4d:4e:c1:ee:e8:c1:
26:3e:2f:b0:d1:9b:d3:b5:de:e9:31:fd:5d:a3:cb:
ba:48:eb:71:76:79:af:c9:16:26:65:a0:62:a5:e6:
08:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:92:E6:F8:C2:4C:D3:DB:EB:F5:CB:E5:89:37:FE:55:22:B8:B0:87
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a323030303a3a2f34302d3438203d3e20323133353135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:2000::/40
Signature Algorithm: sha256WithRSAEncryption
4f:ae:2d:e6:b6:3b:6b:ba:58:87:25:7f:41:9d:0c:a2:a6:97:
de:d5:d8:4a:c7:d7:f4:e5:dc:66:3f:3f:a3:9b:11:d6:e2:88:
7d:a1:bf:3d:0a:88:bb:e0:0b:d1:cb:35:64:15:33:25:ee:e4:
90:1c:a2:e4:41:29:14:be:38:98:12:71:c5:43:26:d6:60:60:
52:46:56:00:19:b8:c3:25:65:cd:72:54:ac:c1:4f:28:11:8e:
c4:32:24:fa:72:0a:2d:fb:c8:a9:93:bd:30:fd:24:59:ac:e3:
6c:3e:28:3c:6d:6f:d6:0c:3f:06:66:c6:d7:e0:b2:a2:09:39:
a9:16:bf:b2:15:91:c2:3a:c5:3a:cf:ce:39:e2:de:c2:9a:17:
f2:0f:0c:27:e9:02:42:00:05:12:f3:5f:6d:87:45:d4:27:90:
8a:50:9c:7b:39:78:d4:a5:e7:99:36:e6:9a:7f:98:06:4f:6e:
4b:1a:ce:bc:3c:16:c2:97:25:ad:12:1b:11:c8:54:99:b9:51:
f6:cb:22:7b:7c:e1:90:a9:74:fa:56:5b:34:3c:43:aa:fa:0a:
90:2b:a0:21:f3:a7:e3:40:29:9b:f3:f1:7f:78:b5:26:c3:b0:
f0:2e:fa:6f:e1:52:a8:1f:a4:09:2d:f3:0c:be:c5:71:d6:90:
b3:e4:a1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:59 2025 by rpki-client