Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3230382e302f32342d3234203d3e2039323332.roa
File: 3130392e3233342e3230382e302f32342d3234203d3e2039323332.roa (raw, json)
Hash identifier: 5NSQUssnpHxq31TditVRCOjbCirLEcMHfF76GuFM7co=
Subject key identifier: 5F:68:58:14:A2:0F:B9:C1:15:BF:4C:14:9A:0E:18:1A:E5:7E:5B:B9
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 4290DAD4D525A917D5ADC99733045268FDA12DA1
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3230382e302f32342d3234203d3e2039323332.roa
Signing time: Tue 04 Feb 2025 11:40:43 +0000
ROA not before: Tue 04 Feb 2025 11:35:43 +0000
ROA not after: Tue 03 Feb 2026 11:40:43 +0000
asID: 9232
IP address blocks: 109.234.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 22:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:90:da:d4:d5:25:a9:17:d5:ad:c9:97:33:04:52:68:fd:a1:2d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Feb 4 11:35:43 2025 GMT
Not After : Feb 3 11:40:43 2026 GMT
Subject: CN=5F685814A20FB9C115BF4C149A0E181AE57E5BB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:30:a9:96:6b:1f:a5:05:15:1e:f4:9f:3d:01:
ad:ba:26:31:79:9e:16:0d:21:39:92:15:67:99:81:
36:32:83:f6:53:92:8d:ed:58:7d:ce:66:02:f1:7f:
d4:89:bd:e0:a0:21:d7:90:4a:43:23:b4:16:30:a0:
cc:1d:fe:a1:9f:a4:79:78:4f:63:0a:99:15:b7:e0:
5d:fc:62:3c:57:85:83:70:9e:4f:a2:5b:84:40:cb:
f6:7e:42:3b:f3:55:29:f8:cf:9b:61:c9:72:89:2a:
c1:13:93:5c:29:77:f1:0f:7d:1e:99:63:88:50:f1:
5d:80:a5:cf:5c:82:a8:59:42:3f:3c:15:8d:cb:53:
d2:5b:4a:b0:df:20:4f:77:83:f8:3f:42:bf:04:28:
3c:8f:98:cf:bf:34:67:77:3f:77:9f:a0:0c:22:10:
d9:c9:c6:ac:4a:71:32:59:0b:01:d9:cd:64:4d:85:
40:f6:10:5a:65:d3:e2:a5:08:10:25:f4:22:6c:62:
ea:c5:ab:3c:00:ca:82:61:db:03:10:d5:0f:47:5b:
de:84:ba:46:9d:f2:2b:29:7e:1e:2c:7b:79:fc:eb:
0c:23:24:d7:40:92:43:c0:ec:53:ec:d3:35:ef:64:
54:a8:00:40:de:fd:a9:ba:af:9d:ff:5e:0b:60:03:
04:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:68:58:14:A2:0F:B9:C1:15:BF:4C:14:9A:0E:18:1A:E5:7E:5B:B9
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3230382e302f32342d3234203d3e2039323332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.208.0/24
Signature Algorithm: sha256WithRSAEncryption
43:e9:83:8b:3f:de:4d:8b:c2:c6:c3:69:9c:9e:60:a8:bf:e8:
81:f3:42:08:fb:c6:46:83:91:f0:c3:30:2a:4b:ed:2a:6e:4b:
b2:aa:54:35:b7:db:5d:73:86:44:42:51:92:65:8c:b8:da:17:
d9:c4:e7:8b:21:ba:1f:18:a3:29:47:e0:36:b7:b9:90:24:e7:
ac:ce:26:f3:b8:65:fc:a8:15:74:df:f5:85:43:eb:8e:de:93:
4d:52:62:4d:54:32:f4:37:03:c0:17:17:91:27:fe:e3:ba:cd:
f5:64:8d:ba:e6:64:bb:db:d8:cd:ed:0e:ff:7c:23:93:82:c2:
7e:17:14:73:85:1a:01:81:65:3f:c4:e5:e2:62:4e:b4:95:88:
07:9e:2f:b2:c9:da:ef:14:43:ae:d9:22:b0:19:f5:e3:47:95:
23:df:f2:fc:95:26:c2:10:2c:b9:1a:5c:03:f8:4b:1b:23:b3:
26:66:c8:2f:dc:87:5b:29:f3:06:68:37:da:95:9e:c1:0a:93:
5e:88:62:75:2b:b3:d5:ca:9e:32:c6:57:1e:93:09:60:9a:97:
27:e8:aa:2b:cc:d1:f7:48:7b:6f:53:c8:ba:65:a4:34:4e:89:
ba:75:f5:41:8e:58:db:b0:56:ac:e0:ac:b1:80:87:26:a9:b5:
b0:62:75:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:24:14 2025 by rpki-client