Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/3231332e352e3133322e302f32342d3234203d3e203530333931.roa
File: 3231332e352e3133322e302f32342d3234203d3e203530333931.roa (raw, json)
Hash identifier: uCCFEGTg9nCGvQX2RZ1yZrXwDuhUdKmnRIwAT1ElxFc=
Subject key identifier: 28:5E:62:D6:06:4C:E5:04:04:52:07:B0:EF:2A:E3:29:D6:20:C6:CB
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 1D15EFBCB5D308A6EDEEAC1BCBC9C1F12B4046AD
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/3231332e352e3133322e302f32342d3234203d3e203530333931.roa
Signing time: Wed 21 May 2025 14:05:55 +0000
ROA not before: Wed 21 May 2025 14:00:55 +0000
ROA not after: Wed 20 May 2026 14:05:55 +0000
asID: 50391
IP address blocks: 213.5.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:15:ef:bc:b5:d3:08:a6:ed:ee:ac:1b:cb:c9:c1:f1:2b:40:46:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: May 21 14:00:55 2025 GMT
Not After : May 20 14:05:55 2026 GMT
Subject: CN=285E62D6064CE504045207B0EF2AE329D620C6CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5f:d4:be:b0:89:be:38:9f:f8:ec:97:ef:66:
a7:15:2c:3b:17:43:e4:3f:04:6d:a1:33:db:96:fa:
39:3e:4a:5b:a3:ae:de:a3:14:99:bb:7d:8f:ce:1e:
70:3f:60:c9:c7:a1:53:88:31:60:8e:fc:c2:25:af:
d8:dd:ed:22:fc:cb:97:05:f6:19:f4:4b:b6:fb:c5:
ff:c7:5c:e8:33:1f:86:fe:40:13:d4:62:6e:26:fe:
89:66:ad:75:03:54:a9:51:60:10:3f:ac:a8:a1:1d:
f0:b0:09:72:08:db:41:ca:4e:d5:71:11:74:b4:13:
89:1b:a9:34:6d:af:cf:f4:35:0a:b8:36:96:e6:be:
f5:cf:06:bc:a2:c1:00:79:10:6a:a1:4d:da:27:f7:
11:cf:aa:5b:6c:9d:77:18:5a:cc:c2:e1:88:6c:8b:
63:b6:4a:63:b9:e1:a0:f6:c9:eb:9d:77:67:21:f3:
c6:0e:04:24:a4:ce:13:32:63:a3:8a:d2:9a:db:86:
51:ad:bf:ff:2a:ae:62:22:75:8f:4c:f4:49:51:1a:
60:a4:0f:b2:9f:38:cc:69:52:9f:a1:49:93:89:dd:
ba:2d:29:b8:8d:e6:f1:c7:59:cd:48:b8:14:a0:f9:
5b:cf:85:87:f9:a8:8d:70:a2:9f:c7:d3:ef:9f:66:
03:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5E:62:D6:06:4C:E5:04:04:52:07:B0:EF:2A:E3:29:D6:20:C6:CB
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/3231332e352e3133322e302f32342d3234203d3e203530333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.132.0/24
Signature Algorithm: sha256WithRSAEncryption
20:64:1d:68:01:79:5f:9b:1f:52:24:4f:a6:9b:ea:48:18:dc:
0f:21:de:bc:f8:f6:df:c0:a1:57:8c:f6:cb:bc:90:04:9f:d1:
54:86:d6:bd:fd:44:24:51:1c:6c:63:fe:a5:c4:3a:17:e4:16:
78:67:19:be:a2:dc:6f:b2:30:21:4f:66:7a:b6:10:f2:1c:3c:
01:26:28:7f:18:a2:50:b4:3b:dd:57:2a:d9:17:f2:0f:ba:00:
11:64:29:4e:4b:99:43:f5:9f:af:07:a3:73:4e:aa:fd:26:c5:
12:91:2b:f0:84:04:ed:ef:35:e9:be:09:52:d4:71:47:8d:7b:
8d:ab:25:42:c4:dd:45:27:3f:49:64:af:df:85:a8:4d:d9:a8:
d7:02:8e:6d:f5:f6:c6:2d:be:d4:ad:6f:e8:02:a5:0b:58:32:
8b:1c:53:33:f4:bd:87:ec:87:71:e4:1a:d6:02:1c:ec:2a:5c:
49:8d:de:cd:7d:de:79:85:2f:aa:00:ef:eb:5e:f7:01:b7:30:
09:73:23:9a:76:c1:03:e7:90:a2:ba:87:23:d1:bf:8a:cf:98:
ab:33:46:96:32:4f:7b:2a:6a:f3:58:ed:64:7b:61:2e:7a:42:
8c:b3:76:20:b7:c0:a9:59:e8:a4:79:6d:93:5e:80:f3:63:9e:
62:29:7c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:57:21 2025 by rpki-client