Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a31313a3a2f34382d3438203d3e203530333931.roa
File: 326131313a323963303a31313a3a2f34382d3438203d3e203530333931.roa (raw, json)
Hash identifier: 3luTj8DLPGspmJEZQ25xRBR8Q7tciHcMkuvbEPFC8RI=
Subject key identifier: 5F:74:22:2D:F1:BC:57:B9:1F:1B:EB:EF:84:55:AC:CD:ED:F0:3D:32
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 0644844FA00C5C3063415D14841F21725188387F
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a31313a3a2f34382d3438203d3e203530333931.roa
Signing time: Wed 21 May 2025 14:05:55 +0000
ROA not before: Wed 21 May 2025 14:00:55 +0000
ROA not after: Wed 20 May 2026 14:05:55 +0000
asID: 50391
IP address blocks: 2a11:29c0:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:44:84:4f:a0:0c:5c:30:63:41:5d:14:84:1f:21:72:51:88:38:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: May 21 14:00:55 2025 GMT
Not After : May 20 14:05:55 2026 GMT
Subject: CN=5F74222DF1BC57B91F1BEBEF8455ACCDEDF03D32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2b:0e:20:d5:fd:cb:92:58:97:ac:d5:9f:a0:
a5:96:12:9e:b7:e7:42:b7:9f:ff:02:2a:9e:c1:c5:
a4:d9:fe:2f:16:37:66:0b:ac:88:0d:c8:22:87:11:
e8:b2:02:b4:11:a7:04:56:9d:89:77:5b:14:f8:b7:
fe:b8:fc:ab:2f:86:63:8a:b6:c3:8e:97:0e:94:ce:
7e:3e:b3:95:73:80:b0:ac:7a:bf:aa:22:f2:e1:ac:
74:82:97:bc:85:cb:19:a1:d5:03:63:9f:a4:cc:d1:
35:07:70:b8:27:10:38:cd:f3:0a:3d:fe:94:3e:d9:
f0:be:c4:32:e5:10:3b:d3:77:e8:14:99:d4:3c:0a:
c8:f8:5e:dc:d1:2e:90:81:ae:32:9a:af:f3:33:29:
2d:6f:b5:3f:0a:59:ed:c1:e0:07:8e:0b:0a:c0:f0:
69:4c:c8:e4:9b:0d:0f:e5:d5:da:b5:45:c0:b6:62:
72:09:61:3c:b6:06:3a:90:e8:0b:d9:23:73:20:d7:
0a:a1:36:d9:9d:b0:bd:a8:8f:05:9a:71:f8:18:ed:
f2:65:6e:e4:a4:44:85:76:dd:0e:62:b6:1e:bb:56:
79:6c:0e:ec:79:99:9f:cc:3f:ef:13:0a:ad:61:1a:
d4:28:75:ad:7d:f3:50:79:8e:c3:d9:b1:be:c2:84:
91:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:74:22:2D:F1:BC:57:B9:1F:1B:EB:EF:84:55:AC:CD:ED:F0:3D:32
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a31313a3a2f34382d3438203d3e203530333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:11::/48
Signature Algorithm: sha256WithRSAEncryption
af:49:8b:8e:46:78:40:c9:03:be:4e:74:f0:f1:c6:0f:45:7f:
f1:a3:56:a5:78:40:c4:63:48:8e:48:bb:dc:89:2b:64:9d:b5:
0f:11:a6:cc:77:36:2b:e4:c1:4e:ef:f4:f3:b5:62:42:0a:bf:
03:61:73:f7:51:6a:b4:68:cc:56:79:db:83:dd:0f:03:5c:17:
41:7c:5b:b1:7c:13:5c:b5:2e:11:85:8d:ca:f4:2e:bf:cb:b8:
46:e9:d8:86:03:3c:c3:5e:32:4e:43:db:14:6d:00:d9:e9:7a:
48:43:7e:1c:4e:22:61:e2:7f:e7:d4:8a:1f:05:d5:5b:92:7b:
e5:0d:82:5c:ba:49:c4:1b:0a:cc:8e:49:85:de:e5:c4:a7:a3:
27:46:69:f5:cf:35:b2:29:1b:00:d7:8c:9c:76:18:af:56:49:
8f:dc:c9:47:e7:51:cf:c3:7d:8c:47:d5:8f:5a:d3:9f:78:30:
35:f9:11:27:d6:b4:b7:9c:41:bc:e8:ea:17:5b:9d:f3:6a:16:
7d:5d:d3:11:e0:18:3c:ef:f8:a7:83:99:b4:03:05:c9:00:e1:
45:47:5e:56:27:91:38:03:4e:01:5b:1d:f0:ca:ef:5c:5c:28:
93:5d:d0:e5:a8:54:39:a5:09:45:4e:40:32:e5:7c:1b:8b:24:
b9:cc:37:b1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 06:19:35 2025 by rpki-client