Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336532303a3a2f34342d3438203d3e20323134343830.roa
File: 326131313a323963303a336532303a3a2f34342d3438203d3e20323134343830.roa (raw, json)
Hash identifier: jA4QS2MMAxsoXMAG9I3qOWVVnmdMlrY5BKekFv4p6ok=
Subject key identifier: F5:CB:8B:F4:60:3F:E1:87:E5:E8:84:73:EF:60:26:B4:9D:65:67:77
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 63E98163DB46AFF9D13C50586B72A0D80F7C7DD5
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336532303a3a2f34342d3438203d3e20323134343830.roa
Signing time: Tue 15 Apr 2025 12:42:59 +0000
ROA not before: Tue 15 Apr 2025 12:37:59 +0000
ROA not after: Tue 14 Apr 2026 12:42:59 +0000
asID: 214480
IP address blocks: 2a11:29c0:3e20::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 18:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:e9:81:63:db:46:af:f9:d1:3c:50:58:6b:72:a0:d8:0f:7c:7d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Apr 15 12:37:59 2025 GMT
Not After : Apr 14 12:42:59 2026 GMT
Subject: CN=F5CB8BF4603FE187E5E88473EF6026B49D656777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e6:f8:49:24:af:63:28:3b:7a:5f:92:05:84:
d0:ca:d4:b2:19:91:c3:ba:ce:6a:7c:ef:fb:33:cb:
3a:ce:0b:1e:1c:f7:82:ea:d4:1b:25:00:41:73:d1:
57:12:65:e7:74:ea:32:6c:72:d7:e7:e3:b2:0a:e7:
70:03:7b:f1:9b:22:96:ff:35:4c:9f:b5:02:3f:58:
74:04:ad:d3:c4:a0:ba:be:ac:b1:fa:aa:51:4f:0c:
41:f0:52:7d:0e:d7:d9:94:73:d1:c9:63:70:19:a5:
31:7b:ab:7c:07:bb:06:c5:fb:27:20:e1:f5:85:43:
97:a3:cf:27:3c:eb:2a:23:86:d5:19:37:60:41:ba:
01:55:9b:df:b5:0d:15:2d:56:96:15:ce:59:4e:23:
5c:b8:e8:4d:43:a9:8c:26:c9:06:7a:a2:67:c9:ba:
69:34:2d:30:10:96:b6:bb:7a:fc:89:32:8b:ab:b7:
6d:bb:a9:58:5a:d1:ba:d2:03:f8:59:5d:f7:23:b9:
35:f3:ab:15:80:55:54:41:d4:4d:9f:e4:c2:cc:4f:
ac:ef:ea:ef:88:0c:65:5f:c8:17:29:a1:98:e8:7a:
df:3b:4c:8a:a9:3b:8b:8c:60:20:b3:4a:fc:92:f6:
96:fa:a7:46:cf:38:84:3e:e3:e3:c3:0e:ba:7c:7a:
a4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CB:8B:F4:60:3F:E1:87:E5:E8:84:73:EF:60:26:B4:9D:65:67:77
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336532303a3a2f34342d3438203d3e20323134343830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3e20::/44
Signature Algorithm: sha256WithRSAEncryption
0b:48:cb:6d:07:11:1d:98:90:68:a4:f9:83:8d:69:ef:4c:d8:
b1:a8:8d:5a:6c:23:d7:dd:2d:43:a2:f6:66:99:6f:3c:14:75:
47:11:4b:e0:6b:4d:cf:dd:01:2c:0d:49:74:92:fb:2e:e6:21:
0e:7d:0d:ed:bb:d2:73:9d:0e:d3:91:6a:50:8d:f4:9f:07:0a:
03:08:cd:17:4e:53:2e:73:55:b0:af:dc:54:db:b4:b5:2c:38:
7b:b4:ff:d1:05:ce:6d:b0:23:a3:e4:15:4f:44:68:3d:7b:d5:
57:4d:e0:ca:96:c2:37:1f:51:3b:8c:52:bf:30:6c:27:2d:84:
c0:0a:81:cf:66:22:d8:68:82:88:6f:39:e6:74:a7:20:d8:67:
65:d0:6e:e5:b9:88:41:75:cb:7a:b6:16:23:44:f6:6d:a6:7e:
18:c7:93:dd:1d:24:0d:d9:0b:d0:6c:d5:30:d4:e8:62:fc:a4:
e3:a2:92:3f:92:e9:b6:ac:79:a6:bd:05:40:8d:c0:ee:a0:6e:
28:01:e5:bc:31:df:da:a8:1a:1a:53:b9:64:68:f6:03:c5:7d:
0f:7d:42:67:73:ee:ad:fa:1f:88:6b:b6:5b:7f:5b:47:21:f8:
20:2c:fc:44:cd:c3:ef:e8:46:ed:8a:cf:1c:ca:0c:3c:5f:84:
83:e2:46:30
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUY+mBY9tGr/nRPFBYa3Kg2A98fdUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTk2ZDg1OTk2ZTkzNTRkMTAwNWU0NGM3ODFkMzhhZGNm
MTA4Mjg3MzAeFw0yNTA0MTUxMjM3NTlaFw0yNjA0MTQxMjQyNTlaMDMxMTAvBgNV
BAMTKEY1Q0I4QkY0NjAzRkUxODdFNUU4ODQ3M0VGNjAyNkI0OUQ2NTY3NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY5vhJJK9jKDt6X5IFhNDK1LIZ
kcO6zmp87/szyzrOCx4c94Lq1BslAEFz0VcSZed06jJsctfn47IK53ADe/GbIpb/
NUyftQI/WHQErdPEoLq+rLH6qlFPDEHwUn0O19mUc9HJY3AZpTF7q3wHuwbF+ycg
4fWFQ5ejzyc86yojhtUZN2BBugFVm9+1DRUtVpYVzllOI1y46E1DqYwmyQZ6omfJ
umk0LTAQlra7evyJMourt227qVha0brSA/hZXfcjuTXzqxWAVVRB1E2f5MLMT6zv
6u+IDGVfyBcpoZjoet87TIqpO4uMYCCzSvyS9pb6p0bPOIQ+4+PDDrp8eqTbAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQU9cuL9GA/4Yfl6IRz72AmtJ1lZ3cwHwYDVR0j
BBgwFoAU6W2FmW6TVNEAXkTHgdOK3PEIKHMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm
YmY1LzAvRTk2RDg1OTk2RTkzNTREMTAwNUU0NEM3ODFEMzhBRENGMTA4Mjg3My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZXMkZtVzZUVk5FQVhrVEhnZE9LM1BF
SUtITS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExMTViYzYt
MTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvMzI2MTMxMzEzYTMyMzk2MzMw
M2EzMzY1MzIzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzEzNDM0MzgzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHBCoRKcA+IDANBgkqhkiG9w0BAQsFAAOCAQEAC0jLbQcRHZiQaKT5
g41p70zYsaiNWmwj190tQ6L2ZplvPBR1RxFL4GtNz90BLA1JdJL7LuYhDn0N7bvS
c50O05FqUI30nwcKAwjNF05TLnNVsK/cVNu0tSw4e7T/0QXObbAjo+QVT0RoPXvV
V03gypbCNx9RO4xSvzBsJy2EwAqBz2Yi2GiCiG855nSnINhnZdBu5bmIQXXLerYW
I0T2baZ+GMeT3R0kDdkL0GzVMNToYvyk46KSP5Lptqx5pr0FQI3A7qBuKAHlvDHf
2qgaGlO5ZGj2A8V9D31CZ3PurfofiGu2W39bRyH4ICz8RM3D7+hG7YrPHMoMPF+E
g+JGMA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:33 2025 by rpki-client