Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa
File: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (raw, json)
Hash identifier: gjwDheXZBS8eOtwo7Ja5xPFcujfV7TC07EH1z972oQ4=
Subject key identifier: 53:DA:2D:2C:6E:7B:F8:CD:BD:3F:74:40:1B:BB:ED:8A:DA:A0:C1:30
Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Certificate serial: 4967DD8822E69DFB2272A73E3843370873C79EEE
Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa
Signing time: Mon 30 Jun 2025 13:05:06 +0000
ROA not before: Mon 30 Jun 2025 13:00:06 +0000
ROA not after: Mon 29 Jun 2026 13:05:06 +0000
asID: 208483
IP address blocks: 213.254.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 12:21:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:67:dd:88:22:e6:9d:fb:22:72:a7:3e:38:43:37:08:73:c7:9e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Validity
Not Before: Jun 30 13:00:06 2025 GMT
Not After : Jun 29 13:05:06 2026 GMT
Subject: CN=53DA2D2C6E7BF8CDBD3F74401BBBED8ADAA0C130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5e:47:c0:44:a5:d4:a2:17:45:a0:32:36:72:
1a:ee:9f:81:18:e4:6b:56:a7:2d:7b:23:ad:12:58:
b3:39:57:97:4c:94:f1:b7:bf:d4:db:16:bf:b3:41:
80:de:24:6f:02:c8:e8:25:c3:a1:fb:d6:0b:ab:d1:
1f:e2:a5:64:a1:d1:97:34:40:de:7a:97:9e:09:07:
d8:76:36:da:79:94:4e:5f:05:96:4c:52:0a:73:82:
95:cb:76:b9:d5:93:3c:8c:96:ae:14:b2:f5:c8:9a:
99:50:76:26:c5:6b:af:9c:3d:17:2e:77:19:50:49:
1d:1f:7d:29:f4:4e:aa:5b:96:d8:1e:2b:6c:5a:15:
5d:4d:c4:74:de:51:94:de:e8:4d:04:55:0c:3c:af:
c6:00:1f:ce:72:2e:e2:c0:8c:29:1d:27:a1:4e:a4:
11:24:5d:88:1e:ee:51:7e:b6:49:7b:81:ef:88:71:
b6:9e:29:f4:47:14:d9:47:5f:c9:62:17:b9:5d:ac:
79:1e:f6:0e:59:b9:e8:ce:33:0c:e7:30:9b:ca:83:
df:67:fb:58:80:fb:b9:4b:6c:ad:6d:d2:ca:f6:0d:
04:f2:0f:92:f0:9e:44:b5:b9:8f:3c:13:4e:cf:b5:
7d:3d:ff:a2:e9:e4:11:ee:21:05:f2:94:99:07:b3:
6a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DA:2D:2C:6E:7B:F8:CD:BD:3F:74:40:1B:BB:ED:8A:DA:A0:C1:30
X509v3 Authority Key Identifier:
keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.254.170.0/24
Signature Algorithm: sha256WithRSAEncryption
93:8d:a1:04:ef:5e:af:62:51:82:40:50:c1:7a:4c:14:60:9f:
31:39:88:70:c5:cb:c8:83:88:39:aa:9b:93:2d:37:63:6d:b2:
26:39:75:92:1e:4d:82:18:0d:67:14:55:d6:47:32:6d:96:70:
4f:45:7d:cd:34:2f:ac:e0:f4:3f:b5:62:89:cb:d6:aa:8d:0c:
0a:21:4e:ca:d8:24:2c:4d:a5:5a:3c:d6:8c:ec:3f:30:6e:0f:
b3:36:59:2c:18:58:84:81:0e:52:c9:3f:98:e6:77:4d:c6:dc:
70:5e:71:22:af:33:8b:1e:3a:b7:f5:97:9b:7d:c3:71:94:d4:
d0:25:55:20:f2:0b:32:1d:1f:41:5b:7f:7c:17:22:84:a2:12:
a0:32:a5:a4:05:83:be:60:aa:af:f8:f4:df:4a:ed:78:18:f7:
ae:83:0b:b6:c8:ec:32:f7:19:36:f0:ba:16:b1:af:5f:c3:3c:
9a:8b:48:fb:1c:90:ab:72:63:b3:93:81:53:b1:f1:e3:d9:35:
12:f5:75:1f:39:ba:3a:62:30:85:6a:d3:b4:29:f3:6a:b3:59:
0b:1b:30:78:7e:82:56:39:bd:e1:28:58:66:bf:57:a2:90:62:
39:ce:df:32:c4:81:88:7f:0d:51:ad:e4:42:0c:f2:a6:3e:bd:
ed:13:5e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 03:56:54 2025 by rpki-client