Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136352e302f32342d3234203d3e20323131343339.roa
File: 3130392e3131302e3136352e302f32342d3234203d3e20323131343339.roa (raw, json)
Hash identifier: SsczY0ITxahjV0Fu1MdgPBG7PkISqWqL8mKj/PboHSQ=
Subject key identifier: 6A:3E:54:2B:CF:0A:21:99:BC:A4:33:B1:F1:9E:55:F3:5E:8B:BF:E7
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 26DD5256D620CC210678A08C703F837032C7EE4D
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136352e302f32342d3234203d3e20323131343339.roa
Signing time: Thu 17 Apr 2025 09:54:01 +0000
ROA not before: Thu 17 Apr 2025 09:49:01 +0000
ROA not after: Thu 16 Apr 2026 09:54:01 +0000
asID: 211439
IP address blocks: 109.110.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:dd:52:56:d6:20:cc:21:06:78:a0:8c:70:3f:83:70:32:c7:ee:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Apr 17 09:49:01 2025 GMT
Not After : Apr 16 09:54:01 2026 GMT
Subject: CN=6A3E542BCF0A2199BCA433B1F19E55F35E8BBFE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:97:5c:83:63:dc:a6:b6:09:92:90:cd:cb:
54:3e:83:f2:c5:00:81:d7:23:8b:70:45:4c:f2:71:
72:9d:a1:d4:e8:8f:49:de:8f:40:a5:39:aa:96:87:
fe:c2:8c:13:c0:d0:be:e0:a7:4b:c3:51:be:27:dc:
b5:51:b0:bc:e3:2e:ea:1c:f5:47:79:0c:04:06:56:
37:e7:3a:56:5e:4d:4e:bb:99:e8:c5:e2:5f:e9:b0:
0f:4b:6a:e5:60:fa:a8:34:35:59:4e:ec:7b:36:df:
54:6b:67:d9:c5:42:54:86:cf:f9:0d:15:f6:a2:af:
bc:f0:c2:99:bf:f5:46:6b:9b:75:37:21:36:0b:18:
de:e6:29:9c:56:8c:d4:c7:90:5c:4c:31:bd:df:49:
f0:18:f7:e8:c9:41:d4:39:29:07:d9:9c:60:36:dc:
ae:3a:be:48:84:56:9c:cd:f7:dc:68:af:d1:aa:aa:
3e:61:4d:ca:46:7a:75:de:ad:ee:8d:4e:90:42:df:
a4:23:3d:75:90:f2:0c:a3:81:51:42:f8:c7:f0:f8:
0b:04:1d:07:7b:d1:87:dd:c7:52:60:af:87:22:66:
4c:65:bc:83:30:bd:0f:5a:6f:08:76:21:08:d0:ad:
01:d8:07:3b:50:36:00:0e:8d:53:dc:10:0f:3c:45:
ca:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3E:54:2B:CF:0A:21:99:BC:A4:33:B1:F1:9E:55:F3:5E:8B:BF:E7
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136352e302f32342d3234203d3e20323131343339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.165.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:13:3e:21:f5:03:dc:7f:c8:d9:57:b9:18:26:3c:2f:ea:d5:
90:43:38:c9:85:b5:b4:91:d0:8b:43:56:fe:cb:2d:2a:6a:3b:
4e:85:2f:66:fb:45:1e:ef:d7:f9:cd:8b:22:c5:26:2a:47:7e:
fd:f2:52:10:75:da:1e:46:ce:a3:f4:e4:b6:8e:28:89:43:5f:
48:0a:84:04:9e:6e:e7:3e:58:4b:25:a5:95:0a:58:c1:a1:1d:
74:28:ad:88:89:65:61:b1:72:b4:a3:3b:fe:14:1e:34:0e:de:
e2:07:2d:30:19:f5:50:85:b4:42:60:e1:ef:f1:39:bc:40:4f:
fd:f5:53:bb:b0:e0:f8:36:8e:e0:22:c6:26:be:6c:6b:07:27:
0b:d0:05:01:fb:50:6a:e8:ae:cf:82:df:f0:2e:93:e1:04:01:
22:26:7d:56:da:bf:a3:e0:bf:7d:cf:b4:1d:2a:59:41:03:84:
3f:ff:37:57:71:cd:47:7b:ee:ec:f6:a9:09:93:b4:88:8e:8d:
1c:9a:f9:e9:1e:fa:2b:88:e7:b2:18:6d:e5:d5:83:85:de:f5:
ca:a9:5a:e6:e2:fc:b9:92:36:7b:f0:28:04:00:fc:41:97:1a:
7f:90:21:15:b4:4f:e3:fa:b4:df:7d:c2:a0:28:c3:c2:1f:44:
95:f6:0b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:29:50 2025 by rpki-client