Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3566313a3a2f34382d3438203d3e20323134353433.roa
File: 326130623a346530373a3566313a3a2f34382d3438203d3e20323134353433.roa (raw, json)
Hash identifier: /8N0RfTOT6tDgbSH6KVeE6ZnYUeE3Vlp7olqVZUwrts=
Subject key identifier: E5:DC:A5:23:8E:32:E8:BF:08:B1:D9:01:35:B6:EA:59:FA:6B:A5:77
Certificate issuer: /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Certificate serial: 3F2826DFD209227D5AAB3D2BAFC81E9DD812BADE
Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3566313a3a2f34382d3438203d3e20323134353433.roa
Signing time: Tue 25 Mar 2025 11:01:27 +0000
ROA not before: Tue 25 Mar 2025 10:56:27 +0000
ROA not after: Tue 24 Mar 2026 11:01:27 +0000
asID: 214543
IP address blocks: 2a0b:4e07:5f1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl
rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 03:56:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:28:26:df:d2:09:22:7d:5a:ab:3d:2b:af:c8:1e:9d:d8:12:ba:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Validity
Not Before: Mar 25 10:56:27 2025 GMT
Not After : Mar 24 11:01:27 2026 GMT
Subject: CN=E5DCA5238E32E8BF08B1D90135B6EA59FA6BA577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fb:08:96:26:28:61:b3:a2:9c:28:8c:70:76:
64:aa:c8:42:b3:79:44:ef:b6:c5:22:d7:04:84:08:
c1:f0:64:8e:ff:bc:4a:63:1a:18:6d:70:e7:05:79:
72:e3:64:3b:84:dd:1f:fe:31:46:79:52:f2:77:72:
8b:48:b4:49:97:c1:4d:e2:47:2c:6b:03:5b:85:a4:
6e:53:9d:2c:38:0b:fc:32:e9:11:8a:6a:b6:a5:3d:
37:a6:44:fc:8f:79:ae:4f:72:7f:47:db:d7:21:49:
fc:d2:e4:a1:43:90:22:f4:74:af:21:d0:fc:49:f9:
9a:e6:27:fb:8b:37:ee:ec:2d:60:68:18:b9:a7:0a:
78:8b:04:19:ee:3b:61:fb:ae:22:08:d6:95:29:b5:
e3:05:3e:6b:7e:1e:8f:78:bb:83:bd:a6:b1:ec:4c:
57:6f:ad:c0:17:e1:e8:17:8b:79:2b:e8:73:17:6b:
f8:af:df:81:0a:5e:ea:13:b2:91:ab:97:67:af:86:
6c:de:70:ed:ba:23:aa:61:83:31:96:ba:46:78:92:
20:21:ea:02:4f:76:d4:90:9e:a3:51:96:b4:a8:f0:
7f:10:4f:50:eb:2a:06:fe:b2:a7:87:f5:53:7f:14:
8d:03:d4:3d:5e:1b:03:71:7f:5c:4c:0d:af:ed:1e:
8c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DC:A5:23:8E:32:E8:BF:08:B1:D9:01:35:B6:EA:59:FA:6B:A5:77
X509v3 Authority Key Identifier:
keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3566313a3a2f34382d3438203d3e20323134353433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:5f1::/48
Signature Algorithm: sha256WithRSAEncryption
b5:27:a7:61:10:ca:ca:cc:2a:37:38:50:30:93:9f:81:0b:af:
e2:73:44:73:7b:10:08:c6:fc:b1:2f:da:de:d8:0f:21:f4:e4:
4f:31:27:68:2b:30:3d:fc:33:b3:2b:e1:13:e0:dc:ff:bf:2d:
21:52:2e:9b:56:c4:86:2b:54:e9:88:9f:66:2f:94:4c:f8:dd:
b0:ae:a7:d9:89:c1:b2:58:f2:06:f5:e9:2e:29:52:63:cb:0c:
a7:e3:d6:0b:b7:45:28:81:3a:97:e0:ab:12:79:9b:c4:9c:22:
c8:75:87:ca:9c:8e:75:05:d9:99:4a:f1:17:0d:15:d2:08:f1:
42:6f:d9:0e:0c:7c:e0:98:83:85:06:58:ee:21:f8:7e:4d:d1:
b5:d7:f7:b8:1e:d8:e6:0b:77:8d:36:73:f9:af:92:57:47:41:
33:8e:0a:8e:5e:c3:91:b0:4e:82:8f:a1:61:0b:ff:2b:2c:e8:
9d:f5:a0:ad:26:d5:3d:fe:3f:28:55:d5:b6:cc:57:a2:f4:ff:
38:0a:72:e4:6d:1e:c8:3d:13:20:ae:e6:35:12:96:a4:c3:71:
6c:f5:c1:a4:fe:24:03:6d:17:6a:ad:fa:71:ab:a4:4b:41:aa:
8c:48:50:ef:ed:ca:75:66:9e:8c:5b:72:a8:43:bc:ec:43:de:
21:64:8f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:17 2025 by rpki-client