Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133302e302f32332d3234203d3e20383334.roa
File: 3130332e34392e3133302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: OUDRn3ApAjwFGTMXd9nkwMnp9rXV7YJ1c5+bK4pElRs=
Subject key identifier: DF:13:D0:39:59:29:50:88:B1:2F:BE:DA:F8:A0:43:75:66:6C:2C:AA
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 3167C0393EE4FA5A8C3C448275B9B906BE35A035
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133302e302f32332d3234203d3e20383334.roa
Signing time: Fri 11 Jul 2025 10:14:42 +0000
ROA not before: Fri 11 Jul 2025 10:09:42 +0000
ROA not after: Fri 10 Jul 2026 10:14:42 +0000
asID: 834
IP address blocks: 103.49.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 03:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:67:c0:39:3e:e4:fa:5a:8c:3c:44:82:75:b9:b9:06:be:35:a0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Jul 11 10:09:42 2025 GMT
Not After : Jul 10 10:14:42 2026 GMT
Subject: CN=DF13D03959295088B12FBEDAF8A04375666C2CAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:02:21:12:b6:04:33:31:10:22:6a:f6:04:f9:
db:3c:a9:a0:a1:38:1f:53:51:83:ce:1d:cb:82:6f:
62:4a:b8:18:0f:7a:c0:cc:fd:11:db:33:f0:c9:66:
94:2a:12:28:65:06:75:f6:a9:68:0c:eb:6d:dc:00:
b0:72:a9:4a:cf:97:4f:ee:b5:62:22:1e:ce:9b:ca:
67:4c:3c:69:eb:1c:2f:35:c0:d8:6c:7e:cc:dc:7e:
23:2d:d4:47:97:14:f2:f3:0e:a4:4a:8c:30:a0:dc:
b0:6e:ce:45:1c:e5:d4:45:bf:25:5f:95:e0:cb:7f:
72:ca:9f:d0:c7:ad:44:7d:36:5d:69:8c:8e:94:9c:
e8:48:54:9e:31:1a:b7:2a:78:48:61:93:51:2f:74:
36:35:51:f5:df:4b:f2:1f:2b:43:66:e9:d3:9c:fd:
03:eb:9d:72:61:f7:6b:ee:8c:70:9c:a5:6a:5c:d4:
c0:00:3d:72:fe:15:19:4e:2e:e5:0a:e0:e4:54:90:
c6:20:9d:53:0b:64:d0:6d:c2:f9:42:21:19:0d:17:
db:1f:c3:b1:ae:91:92:d7:c2:9a:34:a2:31:0f:3c:
24:50:24:27:fa:0e:f4:fe:da:bf:91:79:04:67:fc:
2d:77:0e:09:f2:2d:75:f4:08:e5:e1:07:b3:24:75:
e4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:13:D0:39:59:29:50:88:B1:2F:BE:DA:F8:A0:43:75:66:6C:2C:AA
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.130.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:2d:a9:e4:d4:b8:64:24:72:8f:5c:5a:62:e4:88:dc:86:f9:
ab:86:4b:d4:3e:9f:18:c7:3f:fe:15:8b:56:64:2b:c6:30:18:
4b:73:bf:30:3b:42:f1:f5:9c:76:1e:9f:2d:53:2a:7a:70:9b:
73:cc:5f:ba:31:04:7a:6c:17:ff:3d:19:f1:33:13:54:f6:92:
b9:7c:22:77:d6:98:9b:25:bb:a6:20:28:a3:e6:ba:65:d7:d6:
66:15:ec:94:cb:dc:ca:22:04:7a:05:36:ec:ec:82:2e:8b:3e:
60:86:bd:b3:98:91:37:08:ba:38:ce:f1:33:b6:9e:dc:a6:c6:
7e:38:83:16:85:6d:cf:3a:b9:04:26:3f:30:17:e8:9b:07:68:
44:99:8b:e8:06:33:21:09:2c:8e:a9:e4:e5:8e:3a:18:77:d8:
e9:51:30:e2:4a:95:84:71:ac:91:3a:4a:c3:30:a9:24:66:8b:
7a:75:20:cb:f5:e2:65:1e:23:d4:3a:9b:77:ab:6e:d4:27:8a:
55:19:aa:f5:e5:88:9d:4e:7f:8d:ac:17:40:72:7a:51:8e:92:
36:50:82:1b:3a:46:e2:4a:c5:4f:43:46:6b:80:c0:58:65:9d:
ba:36:8c:e6:ae:6e:83:86:7a:8e:ac:66:26:76:ce:f0:0b:2e:
07:24:37:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:21:45 2025 by rpki-client