Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e32342e3132372e302f32342d3234203d3e203331383938.roa
File: 3231322e32342e3132372e302f32342d3234203d3e203331383938.roa (raw, json)
Hash identifier: mRDnXMKuJaWwbQD+oeFODHhpxAepn6qdnI95rnFVJYU=
Subject key identifier: 6C:B0:27:79:FC:AE:CC:05:2D:55:4C:F2:AF:9B:FE:96:D9:7D:58:D6
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 27756FBC54DC99BC6BB754C7C0F7344FB2575578
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e32342e3132372e302f32342d3234203d3e203331383938.roa
Signing time: Thu 12 Jun 2025 09:01:36 +0000
ROA not before: Thu 12 Jun 2025 08:56:36 +0000
ROA not after: Thu 11 Jun 2026 09:01:36 +0000
asID: 31898
IP address blocks: 212.24.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:75:6f:bc:54:dc:99:bc:6b:b7:54:c7:c0:f7:34:4f:b2:57:55:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Jun 12 08:56:36 2025 GMT
Not After : Jun 11 09:01:36 2026 GMT
Subject: CN=6CB02779FCAECC052D554CF2AF9BFE96D97D58D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:9f:9a:bf:8c:2a:90:d0:c0:0f:ec:23:f4:
26:dd:08:37:cf:4e:ad:b2:72:4a:66:8f:e9:27:3c:
36:3e:68:07:56:48:a1:47:49:89:df:b7:5a:4c:58:
57:d6:57:1e:06:e7:f4:af:38:8a:d5:51:82:03:c7:
ff:2e:f3:1d:cf:40:5a:f8:f5:93:e6:d2:9f:55:f8:
59:93:47:c0:3a:bd:e5:04:f8:72:0e:c6:b8:7a:b8:
49:af:f2:72:a8:80:c2:39:f0:b3:8f:d8:45:5a:a6:
a1:87:83:e0:6c:cf:a6:cb:f3:b3:33:3c:fa:08:66:
d0:1a:ea:95:08:85:32:c9:79:7c:36:ad:cd:44:48:
ae:39:80:ea:b6:b9:a5:31:64:df:a2:c6:4c:e4:d1:
6b:c1:c1:91:18:07:6b:20:ec:00:06:02:1a:bc:a7:
19:99:9a:8a:a1:b5:6f:ed:b0:12:d3:42:e3:df:30:
55:b8:a2:e4:96:ff:71:f6:c3:af:97:49:e6:c9:cc:
c4:9c:f2:a6:8e:45:eb:aa:5b:8b:2f:60:a7:c7:fc:
06:3d:a6:db:59:14:7a:6c:c5:25:f5:28:aa:d5:9c:
4d:ca:a5:ea:ea:c4:a0:a8:b4:c0:67:9f:69:00:9f:
df:a1:39:7b:9f:72:4f:3d:80:57:eb:06:1d:81:d6:
da:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B0:27:79:FC:AE:CC:05:2D:55:4C:F2:AF:9B:FE:96:D9:7D:58:D6
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e32342e3132372e302f32342d3234203d3e203331383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.127.0/24
Signature Algorithm: sha256WithRSAEncryption
67:c5:e9:f7:08:df:48:81:fc:62:8f:73:47:db:6a:b0:22:39:
41:0f:f0:da:eb:97:40:40:41:be:b7:6e:f6:80:bb:b0:31:36:
3b:ad:6e:31:23:b1:5b:1e:80:2e:18:38:fd:31:68:67:85:22:
1e:02:5c:79:f5:38:b6:a7:48:01:bf:c5:70:51:27:21:51:23:
33:06:d7:e7:82:42:7f:5a:b5:9c:30:b8:07:cb:6c:8b:3d:44:
82:a7:80:6d:84:13:69:8f:76:81:f1:da:ff:e9:c6:55:63:52:
5d:0f:90:39:96:4d:a9:4b:67:3c:5f:73:ed:b6:53:55:1e:7c:
29:30:a8:b4:ea:2b:92:99:d1:d1:f1:a6:e3:33:e5:a4:00:72:
0c:8c:3b:90:55:e5:69:3a:42:4a:a0:4f:7a:32:12:9a:be:57:
e4:09:ad:52:3b:37:98:31:29:e4:bc:ba:21:d9:29:3f:47:bc:
8f:39:ed:17:2b:a3:eb:20:a2:12:f0:47:c3:ca:12:33:c1:89:
82:33:86:eb:cb:60:59:ed:ee:62:73:b1:e4:aa:89:8d:a7:0e:
dc:8e:88:f6:6e:b0:5a:f5:94:22:75:41:73:6a:ed:aa:95:61:
98:52:8b:73:a9:dd:bf:cf:0f:8f:7a:30:b7:14:9a:b3:49:0c:
9c:bc:bf:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:27:14 2025 by rpki-client