Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132392e302f32342d3234203d3e20313531373334.roa
File: 3130332e34392e3132392e302f32342d3234203d3e20313531373334.roa (raw, json)
Hash identifier: 28TId/fsDF05nZ10xdOe7gDgnSUwJs5SpkbS0V0fefA=
Subject key identifier: F7:8B:A5:E2:A5:FC:2E:AB:77:81:DC:66:37:54:71:8E:50:5A:DF:89
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 7B0D21D6195A1ED7EAA1E10DC3DA889ECACC917D
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132392e302f32342d3234203d3e20313531373334.roa
Signing time: Mon 14 Jul 2025 13:04:05 +0000
ROA not before: Mon 14 Jul 2025 12:59:05 +0000
ROA not after: Mon 13 Jul 2026 13:04:05 +0000
asID: 151734
IP address blocks: 103.49.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 14:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:0d:21:d6:19:5a:1e:d7:ea:a1:e1:0d:c3:da:88:9e:ca:cc:91:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Jul 14 12:59:05 2025 GMT
Not After : Jul 13 13:04:05 2026 GMT
Subject: CN=F78BA5E2A5FC2EAB7781DC663754718E505ADF89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c4:7c:93:0a:70:2f:b4:33:7a:ac:7e:4f:e4:
38:10:63:19:d9:5b:5e:28:7e:d8:17:6c:c6:7a:71:
a1:cd:9e:f0:75:05:8e:d7:e2:2b:b3:a6:5b:0c:cd:
c5:5e:a6:57:63:cb:4a:01:72:1e:ad:1e:cc:00:9e:
d7:a3:db:9c:09:d2:22:61:01:78:3f:75:fb:b5:dd:
4f:14:1f:e4:98:34:5a:f6:d2:54:95:b9:cb:a3:78:
44:1b:45:86:74:85:fb:47:3c:f7:3b:84:2a:15:de:
a3:78:ff:9e:44:dc:a9:fc:4e:37:83:6b:5f:0e:9f:
7c:76:aa:f5:c2:74:79:3e:92:db:2c:bf:bc:1f:1d:
3c:98:98:62:80:50:d2:84:47:b3:89:46:3c:3a:d0:
2d:9e:84:72:9e:20:60:16:09:cb:29:71:b7:f2:26:
d9:3f:ed:40:fb:5e:b5:ae:72:90:17:23:a0:bb:92:
55:6d:8f:03:ea:d8:1b:da:04:2c:db:a4:2b:4d:6e:
f0:3d:75:cf:11:16:5f:23:86:f2:f4:72:bf:87:4b:
11:b5:a5:24:66:6f:a2:22:7d:f8:31:0d:a8:8d:8c:
03:e4:7a:66:b3:2f:98:6a:97:62:e7:13:29:88:43:
6b:61:19:b4:6e:d5:5e:5c:10:9c:7d:1a:0a:aa:44:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8B:A5:E2:A5:FC:2E:AB:77:81:DC:66:37:54:71:8E:50:5A:DF:89
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132392e302f32342d3234203d3e20313531373334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.129.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:87:80:7d:56:87:30:88:dc:3a:66:51:14:57:61:ac:9a:6c:
a3:ce:5e:1d:51:61:a1:42:e5:d3:8a:12:31:ee:53:55:97:ee:
64:f5:68:4d:96:a9:48:be:3f:01:09:2e:a0:3c:fa:ab:c9:f4:
76:fb:0b:5b:c5:19:cd:0b:48:17:9a:0f:c4:d2:11:32:3b:ae:
05:9f:e4:88:60:dd:fd:2c:d1:e3:07:ee:92:17:c3:9b:b2:27:
41:c5:5e:59:b2:c5:a4:e0:fb:28:79:83:b3:89:1c:e1:a4:a6:
47:4d:66:83:34:37:91:b1:e2:a7:9e:d6:37:83:41:23:90:bc:
d9:3a:4b:01:26:8a:dd:62:17:70:a8:58:7e:40:7c:c1:1a:27:
e9:69:93:94:2e:99:0c:bb:80:9e:30:eb:b2:5d:68:b9:bd:d2:
8e:54:08:9f:16:58:38:92:ab:e1:a7:b7:20:d4:9f:a9:df:6f:
26:6c:6d:33:9f:69:e5:ca:df:1d:f7:1f:38:25:ee:97:78:82:
2a:e3:26:3f:70:50:40:06:d8:1d:81:1c:3c:a5:e7:9a:35:96:
5a:5f:12:ae:0f:ed:1e:7a:40:f2:b2:56:c1:4b:bc:ae:b0:b7:
f5:4e:48:ee:be:8f:a0:9b:c5:76:87:d6:7a:c0:d3:1b:81:f8:
f5:41:55:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:05:49 2025 by rpki-client