Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3630383a3a2f34362d3436203d3e20323134353433.roa
File: 326130623a346530373a3630383a3a2f34362d3436203d3e20323134353433.roa (raw, json)
Hash identifier: /fYD3X48cBI4S+00mnTdDdznPjIp5zuvcGajx6UjFQA=
Subject key identifier: 63:2C:D3:C9:BF:F5:E8:2A:7F:C8:9D:EF:9E:FB:D1:1D:E1:A9:84:D2
Certificate issuer: /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Certificate serial: 3E33CCEE820E6D47D8FB093DF5C698E16263BFA5
Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3630383a3a2f34362d3436203d3e20323134353433.roa
Signing time: Tue 25 Mar 2025 10:59:31 +0000
ROA not before: Tue 25 Mar 2025 10:54:31 +0000
ROA not after: Tue 24 Mar 2026 10:59:31 +0000
asID: 214543
IP address blocks: 2a0b:4e07:608::/46 maxlen: 46
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl
rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 03:56:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:33:cc:ee:82:0e:6d:47:d8:fb:09:3d:f5:c6:98:e1:62:63:bf:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Validity
Not Before: Mar 25 10:54:31 2025 GMT
Not After : Mar 24 10:59:31 2026 GMT
Subject: CN=632CD3C9BFF5E82A7FC89DEF9EFBD11DE1A984D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:42:65:da:0f:e2:d9:d1:a5:90:2f:d8:08:
f3:66:39:1b:29:b6:0b:0e:ec:7c:ef:8e:4e:85:b5:
58:62:7c:32:3b:37:56:72:1e:c7:82:9f:5f:f1:b6:
c9:78:86:d0:e1:ad:6d:06:02:1a:e2:ca:37:07:57:
19:a5:c9:f0:e1:2c:e5:cf:a8:89:bf:02:50:c5:b0:
13:1d:6c:ba:57:92:58:f9:80:bc:61:93:96:99:38:
4a:03:48:bf:03:f9:c6:91:5a:38:f1:66:11:e1:fc:
98:41:25:ea:20:93:8b:e2:37:f8:3b:29:dd:63:cf:
9c:7e:b9:a2:49:d7:4f:7c:08:c2:b0:af:00:c8:bd:
62:f1:9f:92:61:4e:9a:5f:6f:ff:fd:5c:7b:8f:87:
86:e6:25:46:5e:6f:84:5c:47:0a:63:65:95:88:d4:
52:c2:d0:f1:78:f9:94:0f:dd:12:d5:b5:9d:a9:df:
ac:09:9d:b3:74:6c:69:8c:b8:e9:64:fd:73:31:ab:
41:f9:6b:ca:56:f9:15:c4:01:c5:9e:17:eb:4d:d7:
8f:3b:13:db:e9:28:89:61:cb:15:a6:77:54:a1:43:
03:b1:a2:fa:e4:9a:aa:1b:63:f0:23:43:8e:73:33:
f0:7f:fd:91:6a:0f:64:11:0a:9d:9d:ee:fd:2f:75:
1d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2C:D3:C9:BF:F5:E8:2A:7F:C8:9D:EF:9E:FB:D1:1D:E1:A9:84:D2
X509v3 Authority Key Identifier:
keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3630383a3a2f34362d3436203d3e20323134353433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:608::/46
Signature Algorithm: sha256WithRSAEncryption
7f:09:28:ae:e5:f3:57:fb:f1:4b:93:8b:c9:ae:53:5d:7d:05:
f4:09:1d:cc:66:c4:f8:d4:bc:2c:a0:a1:83:88:c6:f7:6c:ba:
43:4f:99:62:c0:87:8e:2e:ff:3a:73:1e:b5:aa:69:e8:b4:3a:
14:09:23:13:51:f9:b6:82:a5:8c:3d:e0:bf:d8:dc:04:56:06:
03:3a:cf:9d:52:a6:2a:c9:b0:df:e2:20:fd:26:35:fd:e8:49:
de:17:c4:99:fe:70:77:47:78:70:8d:62:dd:ae:d7:38:79:3c:
45:74:95:44:3d:7d:10:5e:2f:80:31:10:b7:61:d7:f4:17:42:
0e:15:72:d3:9a:97:5b:94:6c:35:05:64:27:88:3b:a5:ed:1d:
10:25:76:51:25:ad:f3:17:6c:27:30:db:bd:3c:60:a6:ab:51:
e9:4b:25:27:36:85:52:27:b4:37:e9:ad:ed:eb:01:85:f2:f2:
32:b1:6a:e3:92:c2:eb:91:c2:c1:11:5b:7c:f9:0c:f8:4b:6f:
ad:50:66:0b:8c:5c:d7:4f:97:85:8b:47:68:e0:f9:3d:71:d2:
ee:b2:58:35:d6:ab:d2:8c:ba:ad:b3:d7:72:c3:57:f8:c9:d0:
bb:9f:c7:4c:6b:fd:b7:6b:1c:2a:ba:0b:57:7f:85:cc:ae:c8:
aa:4c:f4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:13:37 2025 by rpki-client