Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963313a623030623a3a2f34382d3438203d3e20323132313439.roa
File: 326131313a323963313a623030623a3a2f34382d3438203d3e20323132313439.roa (raw, json)
Hash identifier: qcNkIIIY4Qi6Na/6TEfz/wTuuGWMEolQY7qGa56GGoQ=
Subject key identifier: AA:BE:25:EC:F3:E4:64:0B:46:52:A2:55:94:D6:07:44:F3:51:4B:F5
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 2414C3EDD6E174ACECB740DEB9052E1D97E9E5EF
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963313a623030623a3a2f34382d3438203d3e20323132313439.roa
Signing time: Wed 21 May 2025 14:05:54 +0000
ROA not before: Wed 21 May 2025 14:00:54 +0000
ROA not after: Wed 20 May 2026 14:05:54 +0000
asID: 212149
IP address blocks: 2a11:29c1:b00b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:14:c3:ed:d6:e1:74:ac:ec:b7:40:de:b9:05:2e:1d:97:e9:e5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: May 21 14:00:54 2025 GMT
Not After : May 20 14:05:54 2026 GMT
Subject: CN=AABE25ECF3E4640B4652A25594D60744F3514BF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:68:d3:ee:fb:26:fc:ac:97:f4:b2:3a:2d:f4:
8d:96:49:b5:1a:41:7d:ce:fd:5c:8a:18:99:3a:f5:
53:84:1d:ac:2a:2d:1d:c0:60:e2:0f:8e:2d:9a:fa:
09:dc:b9:35:d5:ca:b5:87:af:36:4e:e2:25:67:b5:
f3:98:21:57:aa:ee:40:df:26:10:cd:a9:ec:77:83:
0f:15:01:72:d3:b8:e5:ae:e5:0d:0f:88:bf:47:c9:
7b:c3:8d:35:92:4f:ec:7a:3f:1d:80:5d:05:c6:e8:
04:e1:81:29:4c:49:37:60:00:a0:6d:d2:09:91:f2:
9b:0e:38:91:ab:ee:40:cf:07:aa:57:bd:f4:ec:d3:
8b:b3:1e:2e:ca:07:d9:40:2f:6c:be:f1:8d:53:80:
f8:f3:c7:37:2b:a8:fa:01:0c:2a:0c:b3:8d:fb:57:
44:aa:a5:4f:80:19:b6:88:96:5d:66:ef:cd:c2:20:
10:2c:63:4d:ad:26:2a:dc:25:63:7b:0d:7c:6c:2a:
b0:bc:bc:7e:04:f3:cd:8b:75:b5:89:e5:c5:66:32:
f0:95:81:a8:23:7b:30:ba:a1:da:bc:6c:90:18:48:
a9:7c:1a:a9:91:9d:91:5c:0b:db:b0:62:21:73:31:
ea:51:bd:66:30:4d:76:22:91:21:45:ad:4c:10:d7:
dc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BE:25:EC:F3:E4:64:0B:46:52:A2:55:94:D6:07:44:F3:51:4B:F5
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963313a623030623a3a2f34382d3438203d3e20323132313439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c1:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
ab:f6:02:d1:ee:5b:d7:e1:f0:a4:60:b4:ae:40:9c:30:ef:ef:
48:b0:45:a4:14:4e:e3:5d:1f:d9:7c:80:5f:a9:45:95:7b:d4:
58:6f:ca:1d:c8:fd:e7:8f:2c:80:8b:b1:ef:dd:16:ba:68:27:
42:94:87:ad:48:78:ed:ca:c6:6f:df:86:fe:c2:23:55:5e:a1:
00:ba:7c:a3:41:6d:ca:ee:43:4a:92:49:e9:8f:6d:e8:2b:9e:
ea:75:f3:04:2c:56:b0:8e:40:6a:be:8d:26:66:46:c9:c0:b8:
ed:4e:86:40:12:01:5b:6c:1d:c5:f8:7d:5d:cb:ce:24:1f:ea:
b3:cd:41:cf:bf:f9:cb:a9:ca:e9:90:5d:3c:4a:b6:2f:28:5b:
a4:c1:b9:73:4d:b4:80:50:0d:9e:61:f3:6a:dc:78:b4:22:22:
30:63:91:f3:f6:c6:2e:7c:fd:b6:1e:76:63:95:0f:8c:a7:bb:
40:f7:46:5b:0b:e2:14:75:4c:42:eb:ca:31:8c:ea:8c:e3:bf:
1b:af:6e:4c:c0:99:5a:f6:4f:91:2a:e9:f9:8a:8e:64:0a:66:
f6:91:b1:f0:bc:11:ea:ce:4a:35:7b:b8:d2:3e:08:5c:39:d0:
e0:bb:25:5a:3f:b1:12:39:8b:37:0b:46:21:85:6f:9a:40:56:
90:3c:95:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:18:14 2025 by rpki-client