Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: tbn52MbKRIzppfXvmb+QeLoKM5w8aKR4Jx6KJoUnmOw=
Subject key identifier: E8:C2:F5:77:FE:C1:1C:8F:D1:DB:7C:AF:B4:3D:16:14:1A:28:DB:41
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 33E98313493DDE9550F9EBDF5ABEEF035B8E85CE
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS0.roa
Signing time: Tue 15 Apr 2025 00:50:14 +0000
ROA not before: Tue 15 Apr 2025 00:45:14 +0000
ROA not after: Tue 14 Apr 2026 00:50:14 +0000
asID: 0
IP address blocks: 2a0f:85c1:295::/48 maxlen: 48
2a0f:85c1:340::/48 maxlen: 48
2a0f:85c1:343::/48 maxlen: 48
2a0f:85c1:354::/48 maxlen: 48
2a0f:85c1:35a::/48 maxlen: 48
2a0f:85c1:362::/48 maxlen: 48
2a0f:85c1:396::/48 maxlen: 48
2a0f:85c1:399::/48 maxlen: 48
2a0f:85c1:39a::/48 maxlen: 48
2a0f:85c1:3a0::/48 maxlen: 48
2a0f:85c1:3a7::/48 maxlen: 48
2a0f:85c1:3af::/48 maxlen: 48
2a0f:85c1:3b2::/48 maxlen: 48
2a0f:85c1:3bb::/48 maxlen: 48
2a0f:85c1:3c8::/48 maxlen: 48
2a0f:85c1:3d0::/48 maxlen: 48
2a0f:85c1:3f3::/48 maxlen: 48
2a0f:85c1:834::/48 maxlen: 48
2a0f:85c1:885::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:e9:83:13:49:3d:de:95:50:f9:eb:df:5a:be:ef:03:5b:8e:85:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Apr 15 00:45:14 2025 GMT
Not After : Apr 14 00:50:14 2026 GMT
Subject: CN=E8C2F577FEC11C8FD1DB7CAFB43D16141A28DB41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:57:29:52:77:60:c4:80:27:42:57:72:0b:
0c:76:01:6d:48:a2:21:77:eb:0b:9a:d8:b2:ab:e2:
2f:32:f4:ef:0c:3d:fb:a1:bc:d6:4e:c2:75:b8:73:
69:62:2e:81:ea:a4:b4:ec:90:b7:32:9c:9d:e7:0e:
78:70:43:ee:7a:a0:73:b8:f3:25:41:2e:39:2e:31:
28:a6:c2:3a:6f:c4:ea:32:e5:f9:fa:df:db:f0:44:
bb:17:e7:e5:b1:e8:55:d2:d5:7b:33:a9:1b:bc:bd:
6b:fa:c5:8b:88:71:67:eb:ce:7e:13:4f:61:db:25:
42:ae:89:13:da:c8:0c:7d:5a:df:e2:b3:27:07:66:
d2:40:b0:b9:1a:89:f8:60:94:42:c8:aa:3a:bc:58:
78:d0:c6:f3:2d:91:ce:a0:14:82:f1:7a:45:e0:8d:
23:32:f7:14:5e:73:eb:3d:8b:f9:50:55:03:bc:ef:
90:9a:bb:37:cb:09:80:ed:d5:be:9d:da:8b:dc:47:
40:30:c0:ea:72:74:62:27:f7:03:e5:09:bd:a7:9c:
e5:ef:31:1c:66:fc:1f:3c:e6:88:5c:30:b8:44:1c:
e7:c1:5c:67:2c:e6:9b:da:17:a9:d8:8e:c2:de:09:
87:66:68:98:f3:d1:be:a6:13:97:27:14:c8:8a:26:
41:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C2:F5:77:FE:C1:1C:8F:D1:DB:7C:AF:B4:3D:16:14:1A:28:DB:41
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:295::/48
2a0f:85c1:340::/48
2a0f:85c1:343::/48
2a0f:85c1:354::/48
2a0f:85c1:35a::/48
2a0f:85c1:362::/48
2a0f:85c1:396::/48
2a0f:85c1:399::-2a0f:85c1:39a:ffff:ffff:ffff:ffff:ffff
2a0f:85c1:3a0::/48
2a0f:85c1:3a7::/48
2a0f:85c1:3af::/48
2a0f:85c1:3b2::/48
2a0f:85c1:3bb::/48
2a0f:85c1:3c8::/48
2a0f:85c1:3d0::/48
2a0f:85c1:3f3::/48
2a0f:85c1:834::/48
2a0f:85c1:885::/48
Signature Algorithm: sha256WithRSAEncryption
4f:8e:3f:b2:46:88:9b:ed:a2:c7:c0:38:b1:c4:b7:b4:47:d0:
29:df:57:fc:47:95:fb:45:14:93:03:b7:7c:67:c3:77:56:0a:
33:a4:27:93:35:fb:3c:21:ed:76:c5:dd:a4:75:5c:06:0c:7b:
13:e8:73:13:93:5e:49:63:80:90:b2:86:b2:fa:19:3b:5f:1d:
6c:0e:79:fe:97:e2:83:1b:a2:11:c1:1e:b1:cd:48:05:38:a7:
d0:27:cf:18:b6:94:e0:2b:c2:f7:96:a1:c2:81:fd:34:71:bd:
aa:9b:0f:c9:5f:7a:23:bc:60:ce:bc:db:1f:2d:3f:53:b9:d0:
b8:e8:74:fe:55:cd:b6:6f:1e:4d:1a:2c:99:ca:01:3a:1e:33:
4f:03:fa:20:f9:a4:0e:72:0b:dd:21:2f:6a:69:bf:65:96:77:
26:b3:5b:a8:86:de:be:69:e7:e8:eb:8d:cb:9e:5b:6e:0b:e2:
ac:1f:7f:81:15:86:ed:35:f9:94:1e:de:f0:18:19:66:21:bc:
28:7c:d7:33:6f:07:e5:30:28:0f:84:8e:43:e7:a9:48:18:fe:
76:c9:7e:f7:8f:3e:7b:98:14:1c:1a:19:b9:cd:1b:27:16:e7:
77:e6:06:93:e4:88:ff:e7:e2:77:30:48:a8:86:b3:9a:eb:6b:
9d:29:04:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:53:55 2025 by rpki-client