Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38392e302f32342d3234203d3e2039303039.roa
File: 3231332e3133392e38392e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: pjnqIb4dxS7ohemcNICs3/5MSebDeHfZm+o3ScY7Wbs=
Subject key identifier: 81:9A:B2:77:F2:22:4D:62:B0:6A:98:D0:3B:CC:93:E2:F6:FE:AE:F7
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 4AD08E2E6355A97880A34CB2F3E0FCD62ADB7A2F
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38392e302f32342d3234203d3e2039303039.roa
Signing time: Mon 21 Apr 2025 10:54:03 +0000
ROA not before: Mon 21 Apr 2025 10:49:03 +0000
ROA not after: Mon 20 Apr 2026 10:54:03 +0000
asID: 9009
IP address blocks: 213.139.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 04:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:d0:8e:2e:63:55:a9:78:80:a3:4c:b2:f3:e0:fc:d6:2a:db:7a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Apr 21 10:49:03 2025 GMT
Not After : Apr 20 10:54:03 2026 GMT
Subject: CN=819AB277F2224D62B06A98D03BCC93E2F6FEAEF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e1:a3:94:8b:f0:b9:87:7a:2b:8f:b0:3a:34:
e9:66:a4:f3:d2:3c:84:61:d8:cd:97:af:b7:9d:22:
bd:3f:9b:16:ca:c6:7b:ac:14:35:17:56:ce:53:6c:
1e:23:c5:92:c1:49:a3:1f:da:51:8a:c0:90:78:7a:
fe:02:fe:52:fb:7e:92:ec:f7:49:b2:b8:d5:13:f4:
2b:e4:d7:e1:7d:96:b3:af:d5:1c:4d:cd:ae:61:ec:
98:c0:86:2b:a3:b6:ad:f7:e6:75:4a:d1:a2:8d:21:
7d:09:87:64:ad:c6:3c:2d:36:f8:c4:74:62:ca:3a:
d9:dc:a4:e5:fa:2a:4e:5c:a7:24:d0:55:b3:e8:cb:
b8:1e:73:6b:cf:c4:29:79:1f:96:b7:5d:91:85:e1:
a2:d1:ba:a5:73:b9:75:89:37:d7:db:34:8a:ab:7e:
8d:95:64:0a:c3:8b:eb:ba:f6:14:69:ce:21:10:74:
a5:6c:a9:f5:d3:8c:3a:1c:34:10:14:1f:95:cf:66:
07:bc:85:aa:66:ab:38:de:0e:23:0c:ef:6e:65:ff:
5a:99:4a:70:c1:17:ff:0b:2f:5f:6f:22:78:da:f7:
58:f0:1f:65:ea:70:b3:a9:ef:ff:0e:5c:cf:9c:06:
06:68:02:3f:4d:45:7d:d7:a8:44:72:39:99:e8:15:
2b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9A:B2:77:F2:22:4D:62:B0:6A:98:D0:3B:CC:93:E2:F6:FE:AE:F7
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38392e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.89.0/24
Signature Algorithm: sha256WithRSAEncryption
85:b1:3b:98:ce:1d:73:c2:8e:82:4c:71:e1:8f:bd:d3:c8:ad:
a2:58:77:9c:2e:3f:80:4c:3c:ac:98:c0:78:e7:eb:1c:63:35:
0b:89:43:ad:22:44:05:72:4d:71:cb:73:93:22:e8:ba:6f:f4:
93:05:55:d9:e3:70:93:98:63:42:99:5c:f3:f2:c6:79:9f:3a:
e2:5c:39:54:69:6a:24:90:99:c5:33:08:a1:22:e9:b4:b6:b8:
de:81:48:b1:51:17:ad:21:de:34:9e:a0:aa:44:60:94:ac:55:
3b:df:57:70:b8:75:3f:68:1e:3b:7f:27:1f:b6:51:a2:36:69:
ea:3b:c1:f8:ae:de:d4:5b:bf:be:ec:fb:2b:22:ff:46:08:d7:
41:f2:41:fb:6c:79:b1:cc:34:21:53:7b:69:90:d7:e6:ba:a5:
2d:bd:4d:73:d9:e6:6d:f6:03:b3:0e:13:69:63:e0:e4:48:42:
2b:b6:18:14:05:a0:1d:87:c9:fe:dc:cf:20:7c:f6:c0:06:19:
ce:1e:e0:d5:ef:28:1b:27:79:4c:6c:ec:a6:a7:da:91:ab:0b:
6e:04:e5:ab:13:28:35:1a:66:48:14:ad:6c:ce:29:d8:84:b4:
3f:cb:df:05:4a:04:f2:27:df:cb:d6:a4:24:66:d9:1a:e7:4b:
b2:1c:32:db
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUStCOLmNVqXiAo0yy8+D81irbei8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk
NDhjN2QzZTAeFw0yNTA0MjExMDQ5MDNaFw0yNjA0MjAxMDU0MDNaMDMxMTAvBgNV
BAMTKDgxOUFCMjc3RjIyMjRENjJCMDZBOThEMDNCQ0M5M0UyRjZGRUFFRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc4aOUi/C5h3orj7A6NOlmpPPS
PIRh2M2Xr7edIr0/mxbKxnusFDUXVs5TbB4jxZLBSaMf2lGKwJB4ev4C/lL7fpLs
90myuNUT9Cvk1+F9lrOv1RxNza5h7JjAhiujtq335nVK0aKNIX0Jh2StxjwtNvjE
dGLKOtncpOX6Kk5cpyTQVbPoy7gec2vPxCl5H5a3XZGF4aLRuqVzuXWJN9fbNIqr
fo2VZArDi+u69hRpziEQdKVsqfXTjDocNBAUH5XPZge8hapmqzjeDiMM725l/1qZ
SnDBF/8LL19vInja91jwH2XqcLOp7/8OXM+cBgZoAj9NRX3XqERyOZnoFSsvAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUgZqyd/IiTWKwapjQO8yT4vb+rvcwHwYDVR0j
BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj
MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT
TWZUNC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt
YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM4
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTMwMzAzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANWL
WTANBgkqhkiG9w0BAQsFAAOCAQEAhbE7mM4dc8KOgkxx4Y+908itolh3nC4/gEw8
rJjAeOfrHGM1C4lDrSJEBXJNcctzkyLoum/0kwVV2eNwk5hjQplc8/LGeZ864lw5
VGlqJJCZxTMIoSLptLa43oFIsVEXrSHeNJ6gqkRglKxVO99XcLh1P2geO38nH7ZR
ojZp6jvB+K7e1Fu/vuz7KyL/RgjXQfJB+2x5scw0IVN7aZDX5rqlLb1Nc9nmbfYD
sw4TaWPg5EhCK7YYFAWgHYfJ/tzPIHz2wAYZzh7g1e8oGyd5TGzspqfakasLbgTl
qxMoNRpmSBStbM4p2IS0P8vfBUoE8iffy9akJGbZGudLshwy2w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:23:58 2025 by rpki-client