Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39342e302f32342d3234203d3e2039303039.roa
File: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: CZYh6lYb4N4Hi46B2oVp46GIE/gWlkXTwUlUU+TKpIw=
Subject key identifier: C6:85:AC:6C:76:9E:50:EE:9B:9A:76:CF:40:A8:04:65:16:73:BF:5B
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 0DA46DFA242ACA46935AB76776E1CCE9D56BAE8B
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39342e302f32342d3234203d3e2039303039.roa
Signing time: Tue 22 Apr 2025 08:54:03 +0000
ROA not before: Tue 22 Apr 2025 08:49:03 +0000
ROA not after: Tue 21 Apr 2026 08:54:03 +0000
asID: 9009
IP address blocks: 213.139.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 00:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:a4:6d:fa:24:2a:ca:46:93:5a:b7:67:76:e1:cc:e9:d5:6b:ae:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Apr 22 08:49:03 2025 GMT
Not After : Apr 21 08:54:03 2026 GMT
Subject: CN=C685AC6C769E50EE9B9A76CF40A804651673BF5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:55:05:33:dd:40:d4:c9:12:0c:f5:1c:e7:
60:e8:dc:0e:92:7c:16:d3:ca:e9:bc:df:3b:dd:a7:
ce:b8:ce:bb:6e:59:c7:47:c8:0a:4c:21:b2:66:71:
eb:23:bb:8d:6c:66:b2:ac:97:79:d6:e2:8e:ec:6d:
ff:62:7e:5e:9b:82:06:94:08:d1:51:5c:f1:2c:80:
5d:07:69:59:12:82:8a:6d:1d:b1:3f:81:c7:ab:3d:
a6:2f:48:c1:7c:e3:17:58:39:94:3a:96:b3:39:52:
4c:58:11:51:6d:1e:ef:aa:29:3c:d8:62:72:e2:94:
58:b9:99:7e:d5:12:6b:d4:0e:aa:6d:d6:a7:e3:09:
81:3d:7d:82:17:b3:04:56:9d:ec:ee:73:00:1c:9a:
da:bf:4e:f5:93:bf:f8:63:e7:a6:22:c8:2f:fa:b6:
c2:d2:b2:f2:1f:39:f2:a8:12:24:94:4b:34:fa:3a:
49:d1:b3:b5:de:2f:fc:b8:e6:bb:be:0e:fa:da:0c:
b8:cb:6b:ec:ba:3e:e6:89:94:6c:e5:2d:22:4c:ec:
4b:21:5c:15:5d:a0:c6:0d:74:63:92:e5:0d:2f:59:
30:26:c8:db:80:71:8b:eb:75:86:d2:0b:9b:11:e2:
8d:83:fa:bb:83:98:f5:f0:80:47:da:a2:0e:91:ba:
80:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:85:AC:6C:76:9E:50:EE:9B:9A:76:CF:40:A8:04:65:16:73:BF:5B
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39342e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.94.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ff:53:10:4b:6d:25:81:d7:e0:88:44:a1:98:d6:2a:9f:53:
d8:df:de:d4:c2:d8:00:ef:25:d6:71:1e:87:1a:58:89:d4:81:
ad:61:04:e4:48:2f:02:d2:59:a5:5f:b9:fd:f6:c0:54:ec:bb:
4d:f3:af:7b:94:cf:41:42:55:b1:f1:b8:85:19:ae:b6:2f:65:
95:35:48:3d:ec:93:55:e7:08:c6:42:1d:5e:a8:a2:f6:cb:a0:
20:62:90:93:ec:e9:4d:a1:a4:91:20:7b:94:25:4b:5b:e0:c1:
df:a4:d9:ab:1d:d2:09:a0:6f:3d:22:70:2b:cd:43:3f:69:b1:
43:ce:04:29:9d:df:22:36:c0:9b:52:24:e2:6a:3b:47:1c:57:
9e:e5:b8:84:b6:4d:52:7c:08:d2:ec:3f:ba:83:fe:d2:1d:54:
61:ab:da:34:96:ab:e2:13:44:fc:70:70:3e:c7:e6:3f:a2:20:
75:ba:ec:a3:c7:7e:a1:89:a8:14:0f:89:fb:7d:88:ae:f9:c4:
94:b8:a2:b9:de:c7:06:62:f6:48:4c:e3:05:44:bb:9d:ae:48:
6a:21:c6:a9:d0:9e:bc:0f:e8:ba:35:ae:dd:16:16:6e:b8:2a:
05:78:20:d6:65:8c:ea:33:56:a3:23:f0:89:83:c2:a8:fa:dc:
8b:23:81:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:30:33 2025 by rpki-client