Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38372e302f32342d3234203d3e2039303039.roa
File: 3231332e3133392e38372e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: euqkb79t1OVkqJLV4h0sY2Fb9LyHpO6FssRdPdeta2o=
Subject key identifier: 7D:5F:2B:D6:31:00:15:00:31:26:7F:71:1E:D0:98:47:8D:93:68:71
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 0DCE0460302158F2696590EA4008E5FEAC53A79D
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38372e302f32342d3234203d3e2039303039.roa
Signing time: Mon 21 Apr 2025 10:54:03 +0000
ROA not before: Mon 21 Apr 2025 10:49:03 +0000
ROA not after: Mon 20 Apr 2026 10:54:03 +0000
asID: 9009
IP address blocks: 213.139.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 00:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:ce:04:60:30:21:58:f2:69:65:90:ea:40:08:e5:fe:ac:53:a7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Apr 21 10:49:03 2025 GMT
Not After : Apr 20 10:54:03 2026 GMT
Subject: CN=7D5F2BD63100150031267F711ED098478D936871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fa:a7:cf:3b:a0:d0:48:d5:ab:c8:ea:00:78:
87:d0:7a:d1:69:01:5c:07:15:d0:5f:b7:12:6b:87:
16:d5:7d:3a:00:57:94:5c:1c:1d:31:77:c9:1d:1b:
de:38:69:2a:6d:8b:63:a0:03:8f:db:d4:a7:f5:26:
c3:e1:17:ae:00:5d:9b:f9:34:bc:10:92:ff:f1:6b:
53:8f:fd:4d:bd:60:ce:be:0d:18:3f:c6:73:91:6f:
7c:56:14:62:2a:21:24:80:d6:23:f4:3b:fc:13:7f:
8a:6b:18:c4:c0:b6:7c:0e:ac:ca:10:5d:a4:9d:97:
aa:14:e2:49:e8:ab:44:ef:46:9b:13:3f:fa:ca:c7:
3f:63:b4:cd:82:c9:5a:21:40:96:7c:5d:1a:f7:74:
7e:25:4c:db:a0:7c:39:41:30:56:e2:e2:2b:76:aa:
63:b9:c9:17:82:6d:f7:e9:b6:f9:d3:22:ca:77:01:
a6:cb:4a:01:90:49:4e:cb:59:a3:4d:49:b5:9b:06:
7b:6d:5e:ad:f9:d9:7e:ce:02:e5:8e:bd:39:d2:61:
7d:4a:8c:fb:3e:f7:ca:23:0f:07:61:b0:c6:d6:8d:
72:05:eb:c2:69:f5:1e:36:d5:70:2a:cf:61:68:1c:
cb:2a:80:60:1f:c2:e0:28:6c:e2:05:ff:ac:ec:03:
6a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5F:2B:D6:31:00:15:00:31:26:7F:71:1E:D0:98:47:8D:93:68:71
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38372e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.87.0/24
Signature Algorithm: sha256WithRSAEncryption
37:0f:87:f0:a6:2e:4f:a0:a0:1c:7f:cc:a8:da:0e:de:c1:14:
76:bc:ef:e6:07:ee:1a:79:53:83:56:6e:65:77:f1:4b:ad:b9:
db:7a:d2:3a:bf:30:34:54:27:23:2a:39:c9:5c:d6:d9:b7:dd:
e8:83:bc:d3:3c:05:f2:45:0e:2d:0a:23:e5:d2:5c:bf:c1:3f:
bb:00:6e:4b:21:3f:11:02:8f:22:20:96:68:f6:70:33:74:4d:
3e:04:46:89:ac:20:7c:55:26:e2:b1:21:40:4d:9a:b1:22:0b:
65:ed:f9:25:32:5d:fe:69:f4:ca:fc:bd:90:6e:04:ba:9b:e1:
28:ee:46:04:f6:50:7b:ab:b2:e0:33:13:f8:89:ef:ef:51:09:
57:38:b1:98:3b:82:0c:30:11:c1:52:c8:0f:0d:84:e6:41:77:
27:0c:bd:51:af:e8:69:78:c0:fd:77:61:f4:b9:eb:21:c7:8c:
03:dd:91:83:6d:9d:4e:1c:09:c3:46:27:81:b7:3c:d4:c7:0c:
e6:8b:98:2d:cd:ea:1f:b2:9a:69:77:12:e7:4f:c2:c9:ca:30:
7f:c9:39:a8:26:34:f2:30:b7:67:a6:1d:31:dc:14:2c:a9:ed:
b6:59:d3:01:08:76:12:16:ae:a1:38:7a:b4:e0:e5:42:d7:9c:
90:35:15:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:31:37 2025 by rpki-client