Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/39342e3132342e37322e302f32342d3234203d3e20343030303339.roa
File: 39342e3132342e37322e302f32342d3234203d3e20343030303339.roa (raw, json)
Hash identifier: uDISVLlw/nJy4wy96JtWj7K3NXKh8ecGghWlBzzixw0=
Subject key identifier: F5:D1:7B:5D:74:F2:56:50:A5:23:A7:97:D7:67:96:1A:73:6E:A3:42
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 0FC6A03FEA06B53763CB92FC10D5297E520E1BD3
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/39342e3132342e37322e302f32342d3234203d3e20343030303339.roa
Signing time: Mon 10 Mar 2025 18:38:37 +0000
ROA not before: Mon 10 Mar 2025 18:33:37 +0000
ROA not after: Mon 09 Mar 2026 18:38:37 +0000
asID: 400039
IP address blocks: 94.124.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:c6:a0:3f:ea:06:b5:37:63:cb:92:fc:10:d5:29:7e:52:0e:1b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Mar 10 18:33:37 2025 GMT
Not After : Mar 9 18:38:37 2026 GMT
Subject: CN=F5D17B5D74F25650A523A797D767961A736EA342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:c0:21:8c:ad:c9:94:28:48:c5:2a:a7:94:
f4:42:19:84:2c:f5:34:61:a5:83:6e:14:b0:de:9c:
f1:da:05:39:b2:36:d5:ca:13:df:b9:aa:43:97:c3:
e0:01:b2:6e:c3:f4:5e:48:37:0e:66:23:65:a4:4a:
8d:e6:d6:f3:ec:af:d9:8e:80:4d:05:42:31:5e:ae:
82:09:e0:03:a4:66:90:3e:f5:e0:da:39:ab:c2:ae:
98:38:72:25:61:1f:eb:3d:71:dd:61:6f:7f:42:61:
3a:25:42:2d:ac:8a:cc:bb:14:c4:8b:f5:b4:2e:b3:
c6:30:44:7e:00:ac:bd:81:62:b0:a2:d1:f3:b2:b4:
e8:50:62:6b:fb:81:7d:9d:98:50:21:f0:5c:56:1a:
82:c5:0f:db:d8:61:ff:be:ec:a3:03:56:3e:4b:df:
4c:26:d6:01:ff:28:78:65:bb:10:c3:85:ab:a6:9a:
a7:30:3b:87:00:15:3e:f7:87:f5:54:84:23:ce:71:
d1:e4:84:62:5f:b4:06:bf:1b:c2:38:a0:40:f8:2a:
99:ff:26:d4:0e:4a:e6:d5:db:4e:ea:c4:6e:90:4f:
7b:bb:e6:50:db:6e:da:33:b6:f2:67:3d:dd:b7:d3:
0f:8b:4a:93:e4:4a:d4:9c:a4:ae:f3:07:3e:09:1c:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D1:7B:5D:74:F2:56:50:A5:23:A7:97:D7:67:96:1A:73:6E:A3:42
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/39342e3132342e37322e302f32342d3234203d3e20343030303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.72.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:5a:3e:25:8d:c2:8d:5a:0f:44:ad:f3:af:04:ad:47:47:82:
74:a4:04:50:5c:5e:15:ae:c4:f3:61:2f:df:00:00:67:29:40:
11:46:5c:86:69:5d:cb:45:1b:db:79:7c:0c:39:5e:d3:89:83:
68:e8:5f:ee:3e:c6:4d:4b:da:2e:5c:cc:01:ef:2f:f2:56:d1:
e1:6b:00:d1:f7:7d:2f:b4:ee:9b:52:28:15:49:d0:b6:c9:55:
aa:f4:44:65:68:d2:06:59:55:8e:e5:97:6e:9e:9b:c2:db:1d:
4e:d8:56:09:50:0e:51:af:25:5b:25:ee:8f:6f:4c:19:51:b7:
49:a4:8d:3f:02:1c:b9:a5:57:8e:30:42:b9:9d:78:d3:7a:7b:
b6:4c:21:6d:de:3f:b0:a6:c9:cc:5e:fd:91:00:14:f9:4e:21:
10:73:fd:c9:98:07:8f:ba:03:33:85:f4:03:be:89:93:5a:54:
68:e5:38:2b:81:66:f5:00:87:e9:bb:44:70:1f:c1:bb:4d:04:
ba:cf:5f:cd:a8:0c:58:be:9f:2d:bd:98:21:af:f3:96:81:88:
3b:5a:58:19:ce:04:32:20:b7:27:c6:f4:ca:7a:bf:72:cc:b2:
e9:32:35:77:3b:46:25:fd:60:7c:f9:db:b3:78:8e:5a:86:eb:
46:08:92:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:33:02 2025 by rpki-client