Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39302e302f32342d3234203d3e2039303039.roa
File: 3231332e3133392e39302e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: 4HobDf2IR5LvPu11gvXGRRjA/4KYDCBMeX1L5falDQI=
Subject key identifier: 7C:5A:11:05:77:48:B3:DA:81:F5:77:F0:A9:F0:CE:7F:3C:5F:88:1E
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 5E36083D920FCB736889F5D6FB21211679403157
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39302e302f32342d3234203d3e2039303039.roa
Signing time: Tue 22 Apr 2025 08:54:03 +0000
ROA not before: Tue 22 Apr 2025 08:49:03 +0000
ROA not after: Tue 21 Apr 2026 08:54:03 +0000
asID: 9009
IP address blocks: 213.139.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:36:08:3d:92:0f:cb:73:68:89:f5:d6:fb:21:21:16:79:40:31:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Apr 22 08:49:03 2025 GMT
Not After : Apr 21 08:54:03 2026 GMT
Subject: CN=7C5A11057748B3DA81F577F0A9F0CE7F3C5F881E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f1:05:63:fa:b4:35:70:8b:a8:60:ca:40:81:
66:64:09:c1:6a:d0:8e:be:1b:8c:97:da:c3:d2:d0:
96:15:8c:6f:92:60:4d:09:0c:d9:3b:5a:be:e8:b6:
8f:0e:b9:ff:80:5e:b3:ee:8e:d6:19:80:fd:a8:82:
ef:0b:45:92:35:55:e8:1c:69:9c:31:fc:20:64:f7:
43:f5:10:a6:bd:e9:e6:b7:12:95:3e:c1:59:90:b5:
ce:08:0e:9a:89:28:a4:1c:92:f8:5a:dc:58:23:da:
3b:13:9a:fe:ca:c7:25:16:71:e3:7a:cd:b3:84:45:
b6:e4:e6:f5:b5:40:81:aa:82:fe:c7:1b:bd:e8:66:
6e:0c:f4:50:72:a3:a6:7f:c0:73:56:84:bf:b0:87:
61:1b:dd:7a:77:d3:a4:30:fa:d6:67:74:66:ad:d2:
3d:78:13:e1:d8:91:3a:dd:84:d2:4f:04:00:48:d9:
4b:d1:4c:1c:5e:30:7f:ba:d1:50:3e:63:e7:b0:ca:
7d:77:bb:52:36:09:22:c1:af:6b:6f:e7:56:70:9c:
5a:e7:d0:61:36:a6:95:25:c7:66:b9:bd:a0:e7:4b:
00:bd:89:ae:99:0d:49:27:cf:1e:a8:b1:9a:b6:83:
e8:00:03:e1:3c:28:c3:69:8c:ef:80:55:59:d6:8b:
5d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5A:11:05:77:48:B3:DA:81:F5:77:F0:A9:F0:CE:7F:3C:5F:88:1E
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39302e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.90.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:05:da:79:cf:98:68:fc:69:e8:8c:4a:e9:ce:7f:05:eb:6c:
e4:56:ea:46:39:16:49:e5:64:16:60:98:80:bd:b0:6f:03:29:
71:43:dc:23:c2:84:46:6f:09:05:83:b8:23:bf:7d:9f:3c:cc:
0f:15:2d:3e:42:d5:b6:a2:fb:75:0f:59:0b:9a:20:57:54:39:
67:98:08:e4:0d:7e:3f:e5:18:cc:6c:2c:39:a4:61:c9:11:60:
9b:c8:c4:e3:69:ad:e1:b3:45:09:7d:dc:df:a8:c9:6c:73:94:
8c:67:ae:85:82:93:78:3d:f0:ba:66:8c:07:bc:6a:17:c8:11:
21:d7:9a:f4:ce:4e:3f:98:8a:46:fe:73:90:c1:e7:17:90:1c:
2b:c1:32:e2:be:d1:c4:f4:71:c5:58:1f:d9:17:a9:95:b8:c2:
5a:77:a4:93:82:50:d2:7c:18:4d:a7:40:0f:82:35:e0:c2:72:
b5:0d:fb:f5:5a:78:c4:c9:9e:6d:ac:26:44:40:99:8d:eb:6f:
0b:36:17:e1:6a:f7:42:f8:65:7f:46:73:b7:d1:7e:02:51:f6:
82:fb:3a:2a:1e:5a:fd:87:7b:8f:8f:f8:69:36:e1:42:6a:3e:
74:df:13:10:88:51:b7:26:2e:b7:4f:74:0e:ce:b3:a0:2e:00:
c9:73:b7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:52:04 2025 by rpki-client