Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/323030313a3637383a3132303a3a2f34382d3438203d3e20323130343430.roa
File: 323030313a3637383a3132303a3a2f34382d3438203d3e20323130343430.roa (raw, json)
Hash identifier: V1PYIWEGKTBSZpsDsi4hBMAUOytWnRs9tofp7Cv0sO0=
Subject key identifier: CA:D7:C9:2C:C9:F2:F0:D5:C3:54:45:89:C2:D5:83:8D:92:CA:7C:9D
Certificate issuer: /CN=c0d6d353c935e0fe15c81690dca11d31ed250300
Certificate serial: 2958125E1CF980D4A367A6B7EA067FF966CE8D91
Authority key identifier: C0:D6:D3:53:C9:35:E0:FE:15:C8:16:90:DC:A1:1D:31:ED:25:03:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNbTU8k14P4VyBaQ3KEdMe0lAwA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/323030313a3637383a3132303a3a2f34382d3438203d3e20323130343430.roa
Signing time: Wed 16 Jul 2025 12:00:35 +0000
ROA not before: Wed 16 Jul 2025 11:55:35 +0000
ROA not after: Wed 15 Jul 2026 12:00:35 +0000
asID: 210440
IP address blocks: 2001:678:120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/C0D6D353C935E0FE15C81690DCA11D31ED250300.crl
rsync://rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/C0D6D353C935E0FE15C81690DCA11D31ED250300.mft
rsync://rpki.ripe.net/repository/DEFAULT/wNbTU8k14P4VyBaQ3KEdMe0lAwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 16:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:58:12:5e:1c:f9:80:d4:a3:67:a6:b7:ea:06:7f:f9:66:ce:8d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d6d353c935e0fe15c81690dca11d31ed250300
Validity
Not Before: Jul 16 11:55:35 2025 GMT
Not After : Jul 15 12:00:35 2026 GMT
Subject: CN=CAD7C92CC9F2F0D5C3544589C2D5838D92CA7C9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:bf:47:fb:91:a2:ef:6a:e4:cb:5a:77:71:
08:b3:b5:5e:7f:f2:54:dc:85:2c:bf:ad:1c:74:4b:
c1:b2:dc:f2:47:2e:a3:1e:86:ba:f2:4b:23:41:a4:
8f:8e:e1:e7:d0:d4:3c:99:0d:20:20:6e:a9:29:d3:
a9:92:d2:20:01:7d:1f:b8:df:ba:2c:9f:4d:d6:5b:
b2:e7:22:58:71:67:80:84:a3:c3:80:67:b6:0a:80:
26:f1:5d:24:b5:0e:39:d4:9c:0e:21:65:d3:10:0e:
36:66:33:e0:a8:cd:22:58:ca:92:85:76:d7:83:8c:
be:5f:c6:28:28:f9:7d:4b:83:a2:eb:d6:1a:d8:98:
b3:2a:cb:a9:75:14:4e:05:b5:27:b7:64:e2:24:99:
e8:5f:fc:50:da:71:8d:2b:d7:d9:bd:e8:a5:41:4c:
ea:e6:fb:87:c2:a4:66:f3:c7:cd:31:42:52:94:c0:
78:c0:2f:d5:84:5e:30:98:db:93:5b:92:3b:9f:b3:
af:bf:bc:7d:26:96:49:e6:a2:b2:49:c1:ab:08:6c:
69:78:f3:7f:a4:b6:3b:54:8d:eb:e0:4f:e6:0e:a5:
68:4d:fa:90:90:d5:c3:f9:ef:ad:31:67:f6:98:15:
d5:19:32:eb:8d:f2:e2:68:6f:34:51:62:34:ed:b1:
68:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D7:C9:2C:C9:F2:F0:D5:C3:54:45:89:C2:D5:83:8D:92:CA:7C:9D
X509v3 Authority Key Identifier:
keyid:C0:D6:D3:53:C9:35:E0:FE:15:C8:16:90:DC:A1:1D:31:ED:25:03:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/C0D6D353C935E0FE15C81690DCA11D31ED250300.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNbTU8k14P4VyBaQ3KEdMe0lAwA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/323030313a3637383a3132303a3a2f34382d3438203d3e20323130343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:120::/48
Signature Algorithm: sha256WithRSAEncryption
01:6d:48:cf:2f:6e:47:c5:b6:04:42:2a:20:a7:21:3c:3c:d2:
85:cf:9f:43:00:6e:dd:66:bf:40:88:11:8b:4e:27:e8:ed:f4:
01:23:f1:05:5b:0f:5f:6d:03:ab:c6:79:cb:2d:f9:5c:91:14:
0c:c4:66:75:5b:2e:c3:a1:56:25:d8:ad:30:9c:48:99:26:cb:
37:1f:06:0a:a8:43:5b:94:b8:8c:29:83:5a:97:b2:d7:d0:89:
6c:78:cf:88:0c:3f:71:31:a3:43:87:58:b7:fe:30:f4:39:d3:
e5:a7:39:2c:94:09:65:d1:b7:71:e7:c9:9a:70:e0:21:03:81:
79:6e:2b:6b:3b:96:28:84:06:ba:f7:3b:8d:4e:ab:e5:d5:e0:
1b:ce:6b:b2:80:89:5e:f1:68:b5:79:10:bf:24:50:7d:e4:5b:
91:bb:0b:74:06:86:eb:d9:7e:05:9a:9b:a1:91:84:47:c2:29:
30:f7:9c:9a:80:ed:e6:09:7b:99:c7:83:e9:86:8e:6c:73:5a:
67:a7:bd:eb:84:70:b4:60:ad:36:8c:de:ce:7c:75:63:f6:41:
e6:5e:99:ab:fb:e0:6f:db:c0:9e:25:fa:ae:c8:14:18:b7:7e:
88:dd:c5:5e:be:1b:8f:62:3c:2a:eb:c6:d3:b8:10:f9:b0:f6:
56:46:aa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 01:53:23 2025 by rpki-client