Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36322e302f32342d3234203d3e203136323736.roa
File: 33312e362e36322e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: jyCfEKW/17oZjUW0nRcbBO4WUVhyEvjWG50QSSwQC1s=
Subject key identifier: 69:39:34:3E:A8:DA:12:BE:3D:DF:5D:34:36:4E:23:57:9B:00:6C:DD
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 2D2404C7C89D92F9AD143B95708148B4C7E0F014
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36322e302f32342d3234203d3e203136323736.roa
Signing time: Fri 23 May 2025 15:54:08 +0000
ROA not before: Fri 23 May 2025 15:49:08 +0000
ROA not after: Fri 22 May 2026 15:54:08 +0000
asID: 16276
IP address blocks: 31.6.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:24:04:c7:c8:9d:92:f9:ad:14:3b:95:70:81:48:b4:c7:e0:f0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: May 23 15:49:08 2025 GMT
Not After : May 22 15:54:08 2026 GMT
Subject: CN=6939343EA8DA12BE3DDF5D34364E23579B006CDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ec:dc:80:16:b1:92:7b:b2:0b:1c:f4:c8:57:
d6:ed:8c:08:73:34:c6:e4:72:89:01:fe:e9:fb:07:
ae:65:0a:e2:6a:8d:f3:84:7b:09:2b:d2:cc:3f:d2:
aa:1a:bb:7e:b5:fd:8a:c2:f1:a2:8e:51:29:f1:03:
48:2e:1f:8e:be:71:2b:b6:1c:92:40:d2:34:f6:80:
34:c9:42:38:67:20:65:fa:2a:f0:98:a6:e1:5d:dd:
4e:bc:62:ec:7a:74:f9:fb:74:80:71:8f:28:4f:57:
ef:47:df:44:93:72:6b:15:d0:73:98:e5:60:c0:4e:
57:00:dd:c5:b9:5c:f3:8c:05:c9:01:01:21:01:48:
e9:c5:92:d1:44:19:9e:c1:da:11:b4:dd:22:0a:07:
8f:d9:c7:73:24:2c:4e:e2:b2:df:e6:78:5c:e5:93:
de:f0:04:56:9c:6d:5a:5d:59:4e:5b:ec:9e:c0:9c:
6a:65:7a:a3:5f:fd:3d:c6:de:e8:da:a3:13:23:2b:
cf:27:77:63:2f:22:5a:f2:b4:b9:e1:4f:5c:89:7e:
c8:92:8c:74:a6:44:69:c2:17:21:3a:b4:b0:29:35:
7b:31:09:4f:d1:65:5b:f1:2e:1e:f8:59:a5:e8:c5:
24:9c:80:3a:a5:88:33:7a:14:b7:8a:b7:90:ee:69:
d0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:39:34:3E:A8:DA:12:BE:3D:DF:5D:34:36:4E:23:57:9B:00:6C:DD
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36322e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.62.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:38:a9:25:87:1a:35:27:88:6c:bb:f7:19:d4:26:fe:3e:60:
2c:3a:87:0e:52:cb:70:46:8a:cd:f1:92:c3:66:c0:6f:6d:07:
af:59:f6:75:94:b0:52:6b:bb:c0:7a:9b:2a:fa:7d:b9:61:a9:
21:a7:d0:0e:e0:23:43:0b:22:a6:9b:cf:88:96:cc:29:ce:06:
e7:90:31:35:5b:33:bf:60:ea:b3:fd:36:a8:79:7e:32:97:42:
40:56:44:ec:06:4b:7a:6a:a8:63:c8:2c:3d:cd:cb:8c:e7:cf:
da:06:4e:b0:b9:f8:31:8e:04:2b:e9:b0:cf:61:5a:0f:e1:02:
05:0d:01:f1:4d:ec:93:0e:76:ba:3d:94:ee:e5:f0:55:77:6f:
ae:35:86:fc:c5:25:44:37:59:97:b5:b6:3d:35:71:d3:ad:b1:
83:52:93:fe:ae:b1:12:5a:f1:63:2a:62:05:0b:b2:e9:6c:7e:
d5:2b:ca:31:32:70:db:69:e4:17:9c:60:57:e3:fe:75:a2:a5:
91:25:2b:2b:25:c4:96:5e:93:e1:bb:34:d6:e5:fa:a1:e9:b9:
b7:65:83:33:c2:38:34:2d:11:b0:f6:73:17:62:f7:3c:98:6c:
b4:fb:68:0e:25:b3:ff:be:1e:10:98:74:1e:cc:fc:8f:0f:57:
38:e2:58:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:33:28 2025 by rpki-client