Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136372e302f32342d3234203d3e203631333137.roa
File: 39352e3136392e3136372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: o1Z1gv8qcijmlxmof6KbMPtO3/EITyA/CsYVvnx8Ko0=
Subject key identifier: 7C:6B:F2:D4:97:4E:00:B4:90:32:C6:09:6F:B9:79:5F:4B:DD:59:BC
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 603834648048F8B67C9AB50DB6923CEAE49A4232
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136372e302f32342d3234203d3e203631333137.roa
Signing time: Wed 04 Jun 2025 21:54:08 +0000
ROA not before: Wed 04 Jun 2025 21:49:08 +0000
ROA not after: Wed 03 Jun 2026 21:54:08 +0000
asID: 61317
IP address blocks: 95.169.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:38:34:64:80:48:f8:b6:7c:9a:b5:0d:b6:92:3c:ea:e4:9a:42:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Jun 4 21:49:08 2025 GMT
Not After : Jun 3 21:54:08 2026 GMT
Subject: CN=7C6BF2D4974E00B49032C6096FB9795F4BDD59BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bf:32:67:f8:2f:6b:b0:62:77:5b:80:3d:0f:
71:d3:00:17:9e:15:44:15:a8:77:db:5e:b8:11:24:
d5:97:88:67:5d:c4:86:42:c3:51:aa:85:37:69:6c:
9b:e4:e5:36:95:7c:58:74:5f:4d:4f:13:a0:2c:9f:
2d:04:e7:75:08:bb:7e:99:7b:48:46:fd:2f:c2:3e:
62:62:8d:3a:a2:84:82:fb:16:6b:4d:d8:89:57:11:
e2:35:c2:ec:1b:6c:57:62:a4:47:9b:93:ef:96:70:
8e:ce:7d:d1:1a:67:04:43:c5:6c:33:bf:26:e1:93:
f2:8b:5d:1a:79:b9:ed:d4:ee:eb:a8:0f:d6:56:f5:
55:ae:fc:40:27:6a:79:2b:13:1a:40:d3:17:b7:16:
d4:1b:d6:67:ff:2a:df:03:ef:54:e9:86:3e:3a:05:
7e:13:58:f1:21:fe:35:9a:7a:41:02:86:90:77:47:
1e:a6:c3:65:a4:60:69:f3:09:38:b6:51:58:3d:2e:
d8:86:b2:e7:5a:1d:37:6d:14:a5:85:24:9c:bb:de:
f9:07:fa:97:4b:8c:24:f3:46:80:4c:ff:16:98:83:
18:aa:7c:6a:ae:3c:bd:51:a4:fc:df:40:93:88:48:
76:cc:4e:35:c1:ea:c6:35:37:dd:9b:46:6c:d2:03:
f0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6B:F2:D4:97:4E:00:B4:90:32:C6:09:6F:B9:79:5F:4B:DD:59:BC
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136372e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.167.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ba:64:d3:2c:b2:d4:c8:34:38:16:56:9f:61:2c:96:83:c3:
92:3d:fd:8c:aa:84:f4:16:9e:b4:bb:3f:bf:0e:84:85:e7:11:
3d:be:b6:1b:a9:b7:f6:84:2a:90:d6:1e:3a:46:3c:bb:ae:07:
df:d5:c2:16:97:b0:24:b0:af:89:8a:f6:c5:2c:1b:e8:3d:af:
84:1e:d5:89:32:d3:2c:b7:69:d0:99:78:b7:34:93:bf:a8:ba:
76:0c:9c:3d:71:b8:71:ea:cb:cc:d9:69:3f:a0:71:6f:fd:57:
76:d2:a7:df:2d:25:f4:a4:f8:33:b2:c3:1e:cc:5e:0a:43:6c:
05:ef:32:d9:44:ff:c4:95:4c:d7:65:ad:c6:26:e8:5d:46:62:
1a:9f:5a:08:14:95:dd:6a:ee:81:11:86:37:6d:5d:0d:d5:18:
75:38:a9:e3:33:ba:92:da:29:83:8f:83:51:9a:1b:78:0c:ce:
22:3c:75:70:83:3a:10:22:ff:4a:56:c9:53:47:a6:27:55:48:
b5:0e:e7:22:87:de:a3:49:84:c5:47:c8:f7:fe:f7:a7:21:09:
0e:ed:09:50:94:fe:f2:b8:4f:72:16:8c:08:82:e1:92:db:3f:
f9:b7:be:55:17:bf:37:6b:63:ef:8e:4f:da:a3:1d:f9:01:4a:
9b:fd:b0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:00:05 2025 by rpki-client