Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa
File: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (raw, json)
Hash identifier: +yFHbjFdcl3OkH9bM82B/wbQvRBlEBGqJ0LTOyulC0Q=
Subject key identifier: 9F:81:F4:C8:2D:1F:30:6E:75:44:01:D1:1B:45:0A:3E:DE:C9:C0:D2
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 08A2F4CA2A71BFFDB9BA6226BCCD42D33826458D
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa
Signing time: Sun 08 Jun 2025 18:14:20 +0000
ROA not before: Sun 08 Jun 2025 18:09:20 +0000
ROA not after: Sun 07 Jun 2026 18:14:20 +0000
asID: 396064
IP address blocks: 103.149.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:a2:f4:ca:2a:71:bf:fd:b9:ba:62:26:bc:cd:42:d3:38:26:45:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: Jun 8 18:09:20 2025 GMT
Not After : Jun 7 18:14:20 2026 GMT
Subject: CN=9F81F4C82D1F306E754401D11B450A3EDEC9C0D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:48:cb:8b:e0:29:d8:29:47:bc:de:10:30:d3:
1f:d1:f0:73:80:9e:75:db:c9:b4:a0:98:4a:25:3c:
61:36:d5:c1:a3:c5:90:db:36:82:c9:6d:57:1a:80:
5e:3a:e1:06:2c:76:03:77:59:23:20:47:32:4c:f3:
58:e3:38:90:a8:f6:4a:f8:29:b3:28:86:ed:bf:00:
29:0c:fb:39:36:44:34:7c:8a:88:95:21:68:51:a0:
a0:37:d1:fb:ee:04:21:b7:4f:ff:ec:83:14:40:8d:
46:9f:c3:32:35:52:1f:fb:c1:81:bc:d4:05:3d:14:
5b:31:84:77:fb:5b:b9:04:2e:7e:f9:5e:2c:59:c5:
99:b7:9b:1c:d4:99:2c:11:be:c1:af:ab:37:5a:35:
7b:93:8d:ee:c5:3c:89:37:cd:f8:dd:93:fc:5d:d8:
1d:d2:35:fa:dd:f5:88:59:fa:5c:1f:75:1c:3e:60:
19:42:ee:51:76:87:04:48:2a:bf:26:70:19:c5:1a:
10:fe:28:f9:bd:9f:49:4d:35:97:26:01:bd:b4:ad:
56:24:be:4b:e7:2d:ea:49:18:c0:b1:6d:31:1b:fe:
8a:c2:86:c2:51:38:1e:f8:b6:53:cc:fd:b8:0d:3e:
8c:42:3b:d9:7c:bc:7b:9d:41:ec:fb:36:67:29:43:
67:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:81:F4:C8:2D:1F:30:6E:75:44:01:D1:1B:45:0A:3E:DE:C9:C0:D2
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.149.168.0/24
Signature Algorithm: sha256WithRSAEncryption
da:e5:55:ed:bb:b2:24:14:14:7a:10:6d:3b:b0:31:35:b0:50:
1f:07:35:8d:6b:60:23:95:cc:e2:46:63:f3:1d:1e:a5:93:e1:
41:b2:dc:17:86:20:41:91:ea:1b:f6:47:2a:6e:f2:f9:dc:32:
28:9d:45:f0:c8:b9:b4:d8:02:15:4f:b4:1c:cd:2c:b9:d8:75:
7f:ec:17:a7:81:c1:89:8d:10:71:14:81:80:9f:54:ad:78:3a:
70:74:31:c8:fb:fb:90:c0:2d:d4:dc:a7:19:9c:70:ac:1a:0d:
19:bd:e7:ba:7c:72:db:01:3e:9a:15:50:b4:43:7b:25:59:7d:
02:22:5b:fd:05:10:80:1f:3b:09:6f:51:43:86:67:4d:77:3d:
02:2b:cb:c2:29:e4:9a:84:14:81:66:cd:47:40:3b:19:a1:ac:
77:9c:9d:bf:27:cd:f3:6d:f5:58:91:81:57:82:01:f8:51:4c:
43:45:1f:61:47:32:94:4d:d5:88:67:61:79:24:a7:23:ba:64:
fa:cd:ec:ef:7b:1d:f7:4f:21:8c:a3:cf:81:ba:02:59:3c:d4:
81:54:cb:d5:b6:84:37:95:65:01:8c:ba:7c:d4:23:4e:63:9b:
67:67:78:e9:d6:10:1b:8b:f4:85:0d:9f:9c:96:b2:7b:1d:56:
5c:8c:7b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:42:55 2025 by rpki-client