Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138382e302f32342d3234203d3e203236303432.roa
File: 352e3232362e3138382e302f32342d3234203d3e203236303432.roa (raw, json)
Hash identifier: uRkqeorrbsNjgFEcWLCjOwjAqUjIe+aXx6dkkyCeRRk=
Subject key identifier: B7:35:9E:4D:94:1F:67:BB:D4:28:8D:64:DA:47:B5:66:AA:18:AA:33
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 5F95ED86B4060E89ED30A7B97CB419FCA3EB5658
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138382e302f32342d3234203d3e203236303432.roa
Signing time: Thu 30 Jan 2025 17:23:35 +0000
ROA not before: Thu 30 Jan 2025 17:18:35 +0000
ROA not after: Thu 29 Jan 2026 17:23:35 +0000
asID: 26042
IP address blocks: 5.226.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:95:ed:86:b4:06:0e:89:ed:30:a7:b9:7c:b4:19:fc:a3:eb:56:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Jan 30 17:18:35 2025 GMT
Not After : Jan 29 17:23:35 2026 GMT
Subject: CN=B7359E4D941F67BBD4288D64DA47B566AA18AA33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:da:12:0c:e3:48:57:a3:d1:7b:64:44:bc:c8:
37:2c:b0:b5:91:fd:64:d2:e6:4a:da:6b:d5:d3:4e:
e6:aa:f9:e5:a0:6e:6b:24:ef:35:92:c2:a5:d9:e8:
b3:ad:2f:b2:19:38:84:1c:34:50:78:f5:1e:ff:ee:
a5:f3:fa:bf:a6:29:dd:c2:72:75:d9:7c:60:52:67:
52:05:84:8e:46:de:d3:1e:55:e2:37:8d:b2:a6:c3:
da:de:3e:9a:be:99:1b:d1:44:ab:ef:7c:36:8c:0b:
8e:ef:e4:0e:c6:7b:14:8d:9c:d2:f5:63:f5:aa:7c:
14:93:d6:95:76:f9:ab:d4:c0:a4:d2:cc:d0:5b:18:
f8:8c:73:16:9a:d3:c2:61:ec:1c:6e:7c:4f:ac:91:
d7:ef:e5:f3:7c:ef:64:e2:20:35:d9:4c:da:45:d1:
88:38:3e:7b:75:4b:cd:d1:f5:d4:f9:59:4c:91:a4:
f7:60:62:02:6f:d1:de:2c:fd:f3:b8:7d:ee:18:ac:
34:cd:04:62:89:c8:ba:86:48:b4:cb:16:43:17:03:
36:ab:d5:c1:a1:24:f5:bb:0e:40:29:7d:a6:ff:91:
e5:27:8d:71:ea:31:38:99:dc:9a:ee:a8:e4:d2:0a:
9f:8f:d1:53:d2:a3:ea:0c:dd:e8:24:76:47:5e:66:
c0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:35:9E:4D:94:1F:67:BB:D4:28:8D:64:DA:47:B5:66:AA:18:AA:33
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138382e302f32342d3234203d3e203236303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.188.0/24
Signature Algorithm: sha256WithRSAEncryption
19:6f:56:39:13:ab:d1:b0:24:8e:ea:3a:ab:e2:a0:e7:1b:f0:
b4:1d:6a:dd:e4:ea:a0:5b:ed:1e:62:93:5d:4b:9f:95:e4:ef:
47:65:66:6e:d6:34:ee:61:9e:a0:d3:85:b4:ca:8d:fa:29:a8:
db:70:6b:53:53:4a:bf:aa:b9:f9:06:8e:34:07:14:92:a4:21:
50:11:d8:53:e8:cb:65:f2:f4:ed:42:24:74:1b:f5:a6:97:11:
05:42:74:2e:54:6f:ab:9d:e4:40:28:80:ea:d7:47:1f:a8:40:
36:a0:73:f7:95:7f:5f:36:e0:f0:c4:5c:6a:02:5d:35:00:f2:
77:26:c0:86:4b:0c:77:a9:ea:a9:ff:c3:b5:5d:97:be:f3:82:
76:c6:d1:ee:d3:6a:9c:4f:07:6a:5b:db:a7:6c:92:bb:06:d7:
32:79:16:cc:c2:40:ba:1d:74:76:2e:e3:58:24:d8:85:1b:94:
cf:50:8d:2f:ee:b6:54:f7:0b:b7:ad:74:6f:d5:f5:0e:73:bb:
4f:c6:77:c8:8e:86:62:64:9b:40:33:3e:de:1a:c6:e1:0d:24:
d6:30:98:11:6e:59:dd:7b:26:91:7a:06:f2:51:3b:5c:82:63:
19:5c:26:69:84:7c:fa:82:71:90:e0:15:9b:fc:d9:46:54:81:
55:b8:30:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:00:00 2025 by rpki-client