Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3231342e302f32342d3234203d3e203632323430.roa
File: 3130392e3233342e3231342e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: yJVBSNvtQsHe0PNYzL5JRIv242s6ICu9PWhfIuLAOZQ=
Subject key identifier: 5B:10:BF:2E:18:4F:BF:59:21:65:36:9B:5C:10:A3:75:A8:4F:25:E1
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 707A5F67C8473BBB49E8C902853DC9C6C0F706CF
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3231342e302f32342d3234203d3e203632323430.roa
Signing time: Thu 13 Feb 2025 09:15:36 +0000
ROA not before: Thu 13 Feb 2025 09:10:36 +0000
ROA not after: Thu 12 Feb 2026 09:15:36 +0000
asID: 62240
IP address blocks: 109.234.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Apr 2025 13:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:7a:5f:67:c8:47:3b:bb:49:e8:c9:02:85:3d:c9:c6:c0:f7:06:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Feb 13 09:10:36 2025 GMT
Not After : Feb 12 09:15:36 2026 GMT
Subject: CN=5B10BF2E184FBF592165369B5C10A375A84F25E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:1f:62:b7:c2:74:1b:55:04:c0:43:20:3e:
90:07:1b:9c:78:bb:90:84:6b:97:63:f1:66:af:89:
da:a9:fb:a0:5c:7d:c4:78:6d:f9:ad:43:fe:e0:25:
1f:b1:04:32:98:f0:e3:db:18:f0:72:2d:08:aa:2c:
47:ec:61:35:51:de:7a:06:5e:b4:8a:31:be:ab:2e:
44:45:68:9c:fa:96:c6:10:e5:86:32:b0:7e:71:4f:
25:80:96:84:a4:77:58:05:3f:b6:9a:a7:7e:00:89:
61:4e:7f:48:96:f7:66:90:9a:12:31:48:3e:ac:d4:
8f:2b:68:8d:96:d6:4a:94:7e:da:00:0f:1d:61:18:
d5:e8:71:56:b2:56:6b:5d:c7:e7:d0:3f:ad:d6:d2:
92:ea:49:54:8e:97:c4:7b:ca:ed:32:2a:ee:ca:69:
38:54:f3:fa:0b:0e:68:bb:44:c1:9d:a2:f6:af:df:
30:88:7d:bd:7a:19:9f:0c:00:52:71:cd:26:50:e0:
7d:01:3c:2f:43:4a:98:72:6b:d7:d6:9c:a9:ae:47:
00:96:31:05:3b:25:62:4e:bf:c4:d5:09:85:15:96:
94:2d:46:4c:1c:14:7c:c4:4b:14:de:0b:b5:c6:fe:
ed:3c:16:1e:04:b8:8a:f9:47:cb:17:26:e1:93:95:
8f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:10:BF:2E:18:4F:BF:59:21:65:36:9B:5C:10:A3:75:A8:4F:25:E1
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3231342e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.214.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ce:fd:39:ca:a5:d7:4d:a8:5d:74:00:4a:ed:55:71:a0:41:
9f:d4:0c:f0:cb:64:4a:f7:3d:87:bd:93:1c:79:df:59:1e:bc:
f6:e3:63:75:5d:5f:ac:96:d3:5c:cb:aa:de:48:a9:48:07:23:
37:6c:94:f4:e6:bb:7d:fd:b0:e8:61:20:2e:8c:74:57:d3:b9:
39:16:b5:d2:58:46:76:30:78:c4:58:3d:6e:d1:56:5b:62:25:
49:ca:e0:93:dc:55:db:63:94:46:98:03:20:e7:b3:76:65:c9:
39:d9:1c:3a:9b:5a:0f:2f:36:a2:37:78:66:c4:96:08:e1:64:
a8:4b:88:53:48:b7:41:ef:93:9b:af:68:23:16:83:1b:8e:de:
e6:e2:87:b9:49:2b:b9:e3:48:6f:9b:6e:21:cb:de:b4:10:e6:
1e:1f:27:cf:34:40:06:54:eb:1f:eb:70:92:76:d7:99:f7:24:
3a:e0:37:97:50:bd:10:9f:60:49:06:a8:12:94:4d:5e:d2:e1:
27:ac:d2:2e:e2:8a:e7:f0:06:76:3c:e5:9e:97:31:68:37:15:
ac:bf:f1:59:ee:99:75:cc:85:39:ca:9b:0c:0f:09:ba:fe:bc:
54:1c:33:83:19:c5:46:dd:42:c7:e7:b9:8d:be:df:19:f9:84:
39:96:06:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:32:27 2025 by rpki-client