Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32362e302f32332d3234203d3e203439323031.roa
File: 3138352e3133392e32362e302f32332d3234203d3e203439323031.roa (raw, json)
Hash identifier: TsPS6sIeRlkmjaT9vZCInms6fDI3wO60aJhCsP1GKG4=
Subject key identifier: CA:D7:36:A2:D2:70:F8:3A:EF:25:12:5F:76:D9:93:28:7B:A2:7D:86
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 1448A689333977D20F13D8FD6954C97E27DA528D
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32362e302f32332d3234203d3e203439323031.roa
Signing time: Mon 14 Apr 2025 14:54:01 +0000
ROA not before: Mon 14 Apr 2025 14:49:01 +0000
ROA not after: Mon 13 Apr 2026 14:54:01 +0000
asID: 49201
IP address blocks: 185.139.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 14:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:48:a6:89:33:39:77:d2:0f:13:d8:fd:69:54:c9:7e:27:da:52:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Apr 14 14:49:01 2025 GMT
Not After : Apr 13 14:54:01 2026 GMT
Subject: CN=CAD736A2D270F83AEF25125F76D993287BA27D86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8e:28:e6:98:4e:10:31:e6:30:75:9d:8b:46:
e8:89:7d:3e:52:ba:ce:1d:2b:2a:63:c4:ca:0d:f8:
4f:ab:05:6d:b8:58:55:05:20:e5:9d:93:34:5a:88:
3d:4f:b0:89:52:ee:4a:19:57:37:59:f0:6a:08:f7:
65:40:ca:dd:10:3f:9d:b7:5f:36:98:4f:51:81:f1:
2d:21:71:98:b8:8e:66:e5:5c:e6:9d:9e:df:46:c6:
5d:87:f9:f0:40:c9:7b:06:0b:e0:b4:de:67:5b:7b:
91:dd:af:75:36:d8:55:27:b9:0d:7f:d8:5e:0d:a0:
51:1f:7f:92:c0:ca:47:c9:80:25:6a:7a:8e:59:b4:
6e:f3:aa:5f:49:ee:a3:3f:e2:56:da:e9:e6:61:5b:
b4:f1:65:b9:1e:88:15:ad:1e:ec:fb:9b:d1:10:ad:
d8:7c:5f:04:5e:7a:8f:91:ef:97:b0:24:9c:7c:48:
a1:f3:40:30:38:e3:3d:05:43:99:c1:7b:78:ce:c2:
7c:06:3c:41:ba:00:a1:b9:48:56:40:35:be:82:fc:
66:2a:35:20:84:1f:c7:c1:0b:53:c4:b8:b7:92:90:
83:e3:53:a2:36:11:c3:ab:43:c6:bb:27:fb:23:fa:
97:99:66:31:48:67:cb:e6:0c:84:03:a3:7a:29:52:
6e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D7:36:A2:D2:70:F8:3A:EF:25:12:5F:76:D9:93:28:7B:A2:7D:86
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32362e302f32332d3234203d3e203439323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.26.0/23
Signature Algorithm: sha256WithRSAEncryption
25:01:0f:8a:12:f9:42:e2:0f:0e:ff:1d:e2:ab:3d:ee:a8:0e:
8b:79:c7:28:1a:da:b1:ec:bd:d9:46:6a:16:a5:25:10:65:31:
ce:a7:e8:6a:28:51:4f:aa:58:0d:68:7d:13:4e:5c:56:e7:ba:
27:58:c0:52:e9:44:85:dc:18:29:84:ab:0d:5c:b6:b2:37:53:
49:bf:8c:78:04:1c:88:0d:75:2a:03:05:80:00:76:99:9b:49:
1d:8e:4c:43:12:ed:50:65:e6:76:e5:4d:6f:c8:ff:7b:99:a0:
2b:df:45:ce:5a:cb:7d:eb:bf:7e:f2:e5:6c:21:2a:76:d6:e9:
b1:93:4d:f5:0c:2a:d4:0a:32:3a:2f:a6:0c:de:e6:01:a4:e8:
a9:1a:50:3a:9f:d4:05:02:a4:20:9c:cd:c6:94:89:b8:f7:27:
db:2b:4d:e4:8f:b4:12:69:a5:c0:a7:a3:de:ec:c7:e1:89:62:
8e:ed:6c:13:bb:dc:c0:8a:b8:39:96:fa:cb:bb:a2:68:11:2c:
10:71:53:c0:d7:f9:ca:62:b9:06:da:9a:61:f5:28:3e:26:b0:
08:f0:07:8d:bf:fd:06:64:42:e0:c2:cc:17:7f:c2:af:64:80:
e9:a1:83:7c:b1:b2:6b:90:40:a0:d3:d1:0b:5c:e4:4e:d5:fe:
f9:0a:16:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:23:20 2025 by rpki-client