Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137332e302f32342d3234203d3e203433363431.roa
File: 39352e3231342e3137332e302f32342d3234203d3e203433363431.roa (raw, json)
Hash identifier: lEcRDdf6cIhY1Oa3628nbp4zU28+wjCf+aFM7KnL8Ho=
Subject key identifier: 02:FC:67:15:89:A2:56:1E:B0:C0:32:13:0A:19:55:D3:3F:31:A4:B7
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 5C2AF2420A237D71F8A7A10E194CAA81BCD7D671
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137332e302f32342d3234203d3e203433363431.roa
Signing time: Tue 22 Apr 2025 06:57:23 +0000
ROA not before: Tue 22 Apr 2025 06:52:23 +0000
ROA not after: Tue 21 Apr 2026 06:57:23 +0000
asID: 43641
IP address blocks: 95.214.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:2a:f2:42:0a:23:7d:71:f8:a7:a1:0e:19:4c:aa:81:bc:d7:d6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Apr 22 06:52:23 2025 GMT
Not After : Apr 21 06:57:23 2026 GMT
Subject: CN=02FC671589A2561EB0C032130A1955D33F31A4B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:45:ed:96:9e:a3:ed:99:db:97:0b:14:fe:8e:
c0:58:62:c5:7a:61:60:51:db:39:10:b6:bb:be:54:
ea:55:96:c3:c3:24:bb:f7:97:f2:3e:db:b9:a7:2c:
1d:09:b4:2d:c4:d5:cd:2c:5c:4d:cc:14:b2:a6:d1:
33:46:db:2f:f0:71:d6:43:d5:a6:59:87:10:2a:40:
21:b9:04:af:a8:f4:98:1b:00:e7:be:ee:ba:d2:2a:
68:fb:85:90:13:0f:53:8f:ed:e5:a9:6c:03:96:5e:
75:4e:24:34:6f:84:8f:eb:db:74:14:0a:e6:dd:e8:
4d:4d:be:b3:6c:33:c0:2b:d8:79:fb:77:d2:66:1a:
2d:c6:f7:45:07:34:42:f4:c4:41:fd:37:fe:b5:c0:
47:85:82:8b:6b:d1:72:48:65:56:12:fa:9e:f7:4b:
a5:e9:48:8d:06:01:e3:3c:05:fd:e3:17:7f:2a:f9:
20:1d:19:1e:c0:0b:51:e6:14:6e:8e:3f:c5:8e:e2:
2f:d2:3b:39:dd:1b:35:84:58:38:a8:8b:3a:ea:e9:
36:b5:f5:fc:65:ab:fc:43:a0:34:35:75:aa:b2:30:
c3:5d:60:8e:6e:32:02:b6:42:93:e8:7f:2b:cc:fc:
4c:89:5a:de:c9:5d:ee:42:96:33:60:2f:02:58:2e:
b6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FC:67:15:89:A2:56:1E:B0:C0:32:13:0A:19:55:D3:3F:31:A4:B7
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137332e302f32342d3234203d3e203433363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.173.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:5d:b4:b4:73:e2:10:dd:0f:ee:62:95:23:34:53:8f:55:e8:
e4:bb:39:28:fd:de:23:e9:74:66:97:fd:bf:b5:52:8a:a5:63:
98:ca:74:ca:7c:14:6f:8d:dc:05:28:27:a1:e9:aa:05:75:6f:
a0:d1:a1:0b:a2:63:c1:1b:25:5d:c1:06:02:7d:a8:4a:9f:52:
43:8e:dc:f7:cf:41:00:14:82:4d:8d:d0:fe:55:f1:96:cc:b3:
e4:02:f3:cc:86:01:14:0a:09:bf:db:15:54:b0:bb:f8:ee:4e:
af:0d:10:c9:36:be:51:cc:c8:f3:ba:f0:3b:3d:a9:13:07:51:
95:5c:79:b7:e6:53:a3:16:0b:e3:84:f5:f8:ae:a8:57:a3:20:
79:d5:91:c2:40:4c:bd:c9:c7:fc:00:01:1c:ad:a8:bc:3d:5a:
ed:6d:dc:5f:9a:f2:1f:75:97:27:07:d6:08:a9:2c:c9:6d:0f:
20:53:48:a8:17:21:73:95:ac:f6:5e:7e:af:8c:7f:58:a2:9b:
32:bc:24:aa:75:05:e8:a0:a6:bf:6f:fa:95:d2:54:e6:42:f0:
34:ba:fc:2d:fc:19:51:e8:d9:7d:8e:a7:3a:36:88:1e:b5:41:
c7:dd:76:c3:1e:37:c9:82:d3:62:89:68:21:1c:99:4d:86:01:
53:59:af:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:01:39 2025 by rpki-client