Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31382e302f32342d3234203d3e203534333339.roa
File: 39332e39322e31382e302f32342d3234203d3e203534333339.roa (raw, json)
Hash identifier: WMxtcl2Ju6TLrgTtLUBAyAfGF8Gn9pZV9umXAbbzoJo=
Subject key identifier: 28:F0:18:73:EF:B1:75:52:EA:AB:4B:41:17:C3:04:D1:BF:F5:A1:0D
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 1AA3B1B70F3E2C505F212A5C8471727AC31852E4
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31382e302f32342d3234203d3e203534333339.roa
Signing time: Fri 25 Apr 2025 18:54:04 +0000
ROA not before: Fri 25 Apr 2025 18:49:04 +0000
ROA not after: Fri 24 Apr 2026 18:54:04 +0000
asID: 54339
IP address blocks: 93.92.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:a3:b1:b7:0f:3e:2c:50:5f:21:2a:5c:84:71:72:7a:c3:18:52:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Apr 25 18:49:04 2025 GMT
Not After : Apr 24 18:54:04 2026 GMT
Subject: CN=28F01873EFB17552EAAB4B4117C304D1BFF5A10D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:48:5e:0f:22:13:c6:b4:53:d5:ef:0c:ce:de:
9b:45:50:a9:7b:80:dc:f8:9c:59:6f:b7:46:af:80:
75:a1:bf:69:6f:82:a4:7b:f8:c1:53:bf:d1:d8:44:
6c:65:bd:4f:da:6a:a9:6f:2a:5d:72:61:c1:64:1c:
54:1a:1b:01:89:17:ac:75:2a:41:10:3f:83:83:e4:
fa:4a:d1:e2:02:d8:90:b7:86:00:cd:ab:58:cf:25:
53:6d:68:e5:f9:72:f7:63:48:27:71:24:0c:1d:b1:
84:d2:ad:80:dc:f0:82:21:5b:59:2e:1c:e7:2d:15:
0a:ec:24:83:a5:ab:63:ef:33:38:6f:bb:98:56:f6:
6b:f3:a9:40:81:ec:39:bd:c6:c7:1d:d1:f1:22:e5:
12:37:f6:e7:5c:1a:49:f8:ae:a9:23:64:c6:1b:87:
14:83:5a:23:5c:1d:44:5a:d3:1a:94:e4:cf:47:ee:
3c:8c:5d:45:4a:7a:e1:4d:ce:26:64:93:21:c5:b2:
cf:ed:c3:ba:18:e3:11:55:86:1b:f7:f8:84:2f:f7:
48:02:cd:49:63:0e:b4:0d:8b:0a:8e:15:90:59:1b:
af:a4:0b:c5:89:95:1b:42:8c:fa:9d:d8:e9:f3:4c:
1a:8b:41:93:cf:80:00:ff:cf:bd:da:48:01:16:2c:
be:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F0:18:73:EF:B1:75:52:EA:AB:4B:41:17:C3:04:D1:BF:F5:A1:0D
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31382e302f32342d3234203d3e203534333339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.18.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:15:b3:61:4d:77:93:2e:72:6e:25:fa:e3:59:48:8a:d5:72:
c7:c6:03:1b:0e:05:47:b1:34:c6:8d:81:8c:f1:a0:61:79:ce:
d7:8a:9d:ce:1f:e4:23:b7:b4:f8:b9:e9:2d:df:07:ba:e7:51:
93:dc:ff:4c:62:9a:59:39:d7:6e:e5:78:f5:23:d5:b3:85:e0:
55:3c:4d:dd:f0:61:ab:68:a8:1b:a9:75:41:7c:9f:a8:79:8f:
27:84:a4:d9:8b:2e:ac:cc:1b:a1:6d:dc:9a:a7:bc:3e:7e:1b:
82:ed:cc:0c:da:b2:be:41:00:db:d8:7d:4f:89:64:13:57:0e:
d6:66:e9:d4:88:3a:d2:0e:89:30:87:18:24:5f:d1:fc:7b:d9:
67:a1:e2:c6:20:16:fa:4f:6d:5c:89:8f:30:0f:01:fd:8b:30:
e7:eb:15:a5:a0:04:69:80:e1:40:5c:ca:65:a6:c2:b5:b6:06:
52:0b:25:5b:15:d1:80:16:a9:b3:ae:91:5f:70:8b:5c:6e:9b:
47:bb:59:56:44:0f:ba:d6:ed:49:21:6b:82:91:26:49:97:13:
4c:b8:8b:c3:c5:af:93:3a:2e:48:4a:a7:3b:ca:9e:d7:10:cb:
ce:06:11:80:ac:64:a1:ec:75:49:5d:99:8f:1c:90:3e:d1:18:
18:44:40:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:10:34 2025 by rpki-client