Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35392e302f32342d3234203d3e203634323637.roa
File: 33312e362e35392e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier: puZImWC1cbRx70EE8hJkEB8272kQUm9fDa83MJuUeLw=
Subject key identifier: 67:86:E8:02:D3:11:58:7B:D3:72:B9:65:55:70:9F:97:0B:6C:C4:E4
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 4887BF65E677AA8AA42C463F76B7DD652C4EAD8C
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35392e302f32342d3234203d3e203634323637.roa
Signing time: Wed 23 Apr 2025 04:54:04 +0000
ROA not before: Wed 23 Apr 2025 04:49:04 +0000
ROA not after: Wed 22 Apr 2026 04:54:04 +0000
asID: 64267
IP address blocks: 31.6.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 15:42:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:87:bf:65:e6:77:aa:8a:a4:2c:46:3f:76:b7:dd:65:2c:4e:ad:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Apr 23 04:49:04 2025 GMT
Not After : Apr 22 04:54:04 2026 GMT
Subject: CN=6786E802D311587BD372B96555709F970B6CC4E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:92:73:ee:ef:de:90:82:3a:64:a5:4e:98:ab:
6c:06:43:4d:17:57:5f:27:f3:52:ee:21:de:dd:f8:
84:4f:e8:ea:02:65:61:a0:81:08:e2:d8:91:3f:b0:
6c:77:6d:c4:0c:9d:9b:ba:ec:84:fc:4f:b3:89:1e:
56:f0:ef:de:ce:aa:d1:42:9c:ec:8f:9f:3f:60:1b:
fd:89:fd:3b:d6:ce:5d:01:a8:98:37:f0:7b:6e:c4:
79:b7:55:6d:d7:42:e5:38:7e:89:70:ed:70:70:e0:
7a:d2:f6:b8:03:9a:fe:e5:97:11:20:0d:01:59:8d:
e1:58:c1:02:1b:7b:c0:a6:f9:69:51:ed:c2:1f:30:
9a:f7:22:db:12:ee:ce:32:e2:c5:54:7c:7f:e8:34:
4b:9c:b0:05:50:5b:6e:ca:a8:3e:21:da:78:00:3d:
ec:90:9a:51:3c:20:b6:59:64:98:a5:df:83:6b:6b:
b8:e2:fa:a0:42:14:e4:ea:22:3a:e5:10:5f:05:14:
21:71:e0:bc:4b:8e:29:69:fe:c1:c4:e8:67:af:fc:
93:1f:00:48:1e:cb:a7:54:66:d8:d9:13:fe:a7:3d:
18:4e:b0:29:10:eb:82:16:79:73:b8:bc:c5:fc:6c:
84:1d:79:31:2a:ab:f2:99:16:c6:af:fe:b8:14:24:
3b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:86:E8:02:D3:11:58:7B:D3:72:B9:65:55:70:9F:97:0B:6C:C4:E4
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35392e302f32342d3234203d3e203634323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.59.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:e1:96:f4:78:98:11:d4:a5:36:10:64:3e:4c:df:c9:54:06:
64:54:90:fe:02:86:27:61:f7:09:bf:4f:1c:c7:f1:cc:d5:18:
c8:96:27:90:d8:6e:29:a6:c1:9f:84:34:db:7a:03:34:bb:24:
94:3c:4c:d9:42:60:c5:e7:0a:27:ac:da:b6:c1:aa:02:69:14:
cc:62:1a:5e:64:ca:e7:41:df:fd:fb:98:ec:b1:b4:22:82:e0:
da:c2:3e:10:3c:4d:51:82:62:81:35:35:2d:95:a1:65:36:d5:
ce:b7:c1:16:2c:b9:fd:25:6a:2e:48:ec:56:43:a2:ff:fd:7a:
4b:98:ed:22:32:cc:10:86:c0:37:eb:aa:85:c5:be:fa:05:97:
e2:28:7d:48:c6:a9:29:65:e3:51:30:94:dc:b7:b2:13:bf:59:
34:97:1e:63:80:6e:f1:d6:bf:3b:df:37:8a:a5:e2:34:37:39:
cf:c3:1a:92:25:94:d5:11:27:a1:fd:5a:9d:b8:17:c0:2e:e5:
86:2c:ae:cd:c0:f9:5f:c7:f9:9a:52:c6:ca:76:c0:fb:ce:63:
33:86:9f:0b:ca:79:fe:23:b4:c7:50:8f:77:81:d2:1e:91:d3:
65:08:65:6b:4e:3b:54:26:34:ae:ff:3e:35:98:2c:d3:e4:41:
4d:57:73:3e
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUSIe/ZeZ3qoqkLEY/drfdZSxOrYwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNTA0MjMwNDQ5MDRaFw0yNjA0MjIwNDU0MDRaMDMxMTAvBgNV
BAMTKDY3ODZFODAyRDMxMTU4N0JEMzcyQjk2NTU1NzA5Rjk3MEI2Q0M0RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUknPu796QgjpkpU6Yq2wGQ00X
V18n81LuId7d+IRP6OoCZWGggQji2JE/sGx3bcQMnZu67IT8T7OJHlbw797OqtFC
nOyPnz9gG/2J/TvWzl0BqJg38HtuxHm3VW3XQuU4folw7XBw4HrS9rgDmv7llxEg
DQFZjeFYwQIbe8Cm+WlR7cIfMJr3ItsS7s4y4sVUfH/oNEucsAVQW27KqD4h2ngA
PeyQmlE8ILZZZJil34Nra7ji+qBCFOTqIjrlEF8FFCFx4LxLjilp/sHE6Gev/JMf
AEgey6dUZtjZE/6nPRhOsCkQ64IWeXO4vMX8bIQdeTEqq/KZFsav/rgUJDujAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUZ4boAtMRWHvTcrllVXCflwtsxOQwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM1MzkyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzNjM0MzIzNjM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwY7MA0G
CSqGSIb3DQEBCwUAA4IBAQB74Zb0eJgR1KU2EGQ+TN/JVAZkVJD+AoYnYfcJv08c
x/HM1RjIlieQ2G4ppsGfhDTbegM0uySUPEzZQmDF5wonrNq2waoCaRTMYhpeZMrn
Qd/9+5jssbQiguDawj4QPE1RgmKBNTUtlaFlNtXOt8EWLLn9JWouSOxWQ6L//XpL
mO0iMswQhsA366qFxb76BZfiKH1IxqkpZeNRMJTct7ITv1k0lx5jgG7x1r873zeK
peI0NznPwxqSJZTVESeh/VqduBfALuWGLK7NwPlfx/maUsbKdsD7zmMzhp8Lynn+
I7THUI93gdIekdNlCGVrTjtUJjSu/z41mCzT5EFNV3M+
-----END CERTIFICATE-----
Generated at Sat Apr 26 22:49:05 2025 by rpki-client