Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138312e302f32342d3234203d3e2039303039.roa
File: 39352e3231342e3138312e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: /rVPc1wOKgDgg5OwHuEoirI3/VXCM0oS5sqBVQJB6eg=
Subject key identifier: E4:2B:42:BF:E0:D6:E1:EA:E0:59:8C:72:E7:96:75:59:63:EA:70:BA
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 797E2F1363FC81BA02A49F4AC2DB273664275AF9
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138312e302f32342d3234203d3e2039303039.roa
Signing time: Tue 22 Apr 2025 06:57:22 +0000
ROA not before: Tue 22 Apr 2025 06:52:22 +0000
ROA not after: Tue 21 Apr 2026 06:57:22 +0000
asID: 9009
IP address blocks: 95.214.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:7e:2f:13:63:fc:81:ba:02:a4:9f:4a:c2:db:27:36:64:27:5a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Apr 22 06:52:22 2025 GMT
Not After : Apr 21 06:57:22 2026 GMT
Subject: CN=E42B42BFE0D6E1EAE0598C72E796755963EA70BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:08:52:77:17:e7:d7:5f:ee:46:dc:89:88:
31:94:b5:c5:59:c1:60:37:53:16:e5:b4:9c:68:be:
63:01:7f:c1:b3:a0:ff:f9:01:f1:69:13:55:f1:85:
ba:78:1f:db:1d:b2:0e:4a:62:16:35:e1:b7:c2:dc:
9f:1e:59:ec:42:8e:12:2f:c7:94:fc:a9:fa:88:a6:
ac:cd:7d:11:13:a6:2c:bb:b8:cf:74:a0:13:80:f9:
03:b9:10:45:fc:db:85:93:47:e2:60:76:5a:68:85:
b3:e4:e0:bd:fe:a0:23:b0:18:42:77:f3:55:33:a6:
6a:ac:e4:a9:8e:82:85:0c:68:0e:e8:85:4b:aa:eb:
06:a0:cc:04:01:cc:c8:67:92:4e:99:c8:83:3a:54:
aa:5d:b2:85:56:d4:b9:96:f5:c4:52:01:bf:70:37:
78:e5:9d:79:b4:62:a2:5c:af:01:4e:76:0e:4f:8c:
70:b9:40:7d:59:6d:12:39:3c:0c:75:d3:7d:fc:2c:
e9:74:86:06:5d:fe:86:df:5e:b6:b8:8d:d3:c5:ab:
d7:15:d0:4b:c1:4d:b4:9e:0f:e0:02:dc:34:dd:8f:
88:f6:a3:00:7f:2d:e9:47:3a:73:df:6c:b4:5e:94:
ee:df:03:26:94:40:9f:37:73:ed:4c:85:51:d0:61:
c4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2B:42:BF:E0:D6:E1:EA:E0:59:8C:72:E7:96:75:59:63:EA:70:BA
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138312e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.181.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:03:b6:f1:05:74:3c:47:b2:ac:76:40:d5:ed:56:9a:50:08:
5d:47:cc:a9:76:b3:3c:4a:d3:cf:f4:92:54:8f:7e:27:31:b0:
b0:84:06:17:c6:d7:f3:e7:b5:ea:2b:da:4f:2a:73:4d:ac:64:
85:08:75:09:29:9b:27:56:d8:4a:4c:7f:0c:43:e2:cd:aa:5f:
c9:47:7f:69:3d:f3:cb:4d:d4:66:11:6e:ef:b6:ce:d0:25:cb:
eb:7f:bd:fd:20:22:2a:6f:11:84:74:f9:7c:ec:3b:05:6b:fe:
1c:4b:a6:91:a4:d3:c1:73:3f:c1:70:cb:fa:bd:9e:c4:7e:ed:
22:d9:37:dc:b4:2e:d7:5a:a9:dc:88:3e:23:d9:78:48:ae:34:
b4:ff:3b:53:1b:7a:63:c7:8a:7c:69:84:cf:83:e0:7d:62:25:
cf:6c:dc:64:11:1d:d5:87:b1:56:15:42:36:a1:d4:48:62:ab:
99:fa:56:e2:0a:73:dd:dd:cd:92:3f:f6:1a:b7:95:a5:13:e5:
c3:22:60:d6:d2:3a:6e:0c:18:bb:c7:d6:45:87:fd:e6:6f:ff:
67:0e:74:0f:8f:56:3b:51:12:e0:4a:80:69:bb:52:66:e0:e0:
10:1b:fb:72:54:3d:4c:1c:91:fd:24:12:ff:22:2b:cc:e0:15:
44:d5:f0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:35:48 2025 by rpki-client