Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3139302e302f32342d3234203d3e203239383032.roa
File: 352e3232362e3139302e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: IcG7713dyebDFbZHRU+x1BJJOLqYlSEgaSMS202odCw=
Subject key identifier: B1:D9:38:33:F0:D8:EB:E0:4C:2C:67:1B:71:6B:80:BA:6E:ED:8F:A7
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 767077A8B4B1D95FCDA02295B5C9A9848BE4C907
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3139302e302f32342d3234203d3e203239383032.roa
Signing time: Wed 28 May 2025 15:56:21 +0000
ROA not before: Wed 28 May 2025 15:51:21 +0000
ROA not after: Wed 27 May 2026 15:56:21 +0000
asID: 29802
IP address blocks: 5.226.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:70:77:a8:b4:b1:d9:5f:cd:a0:22:95:b5:c9:a9:84:8b:e4:c9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: May 28 15:51:21 2025 GMT
Not After : May 27 15:56:21 2026 GMT
Subject: CN=B1D93833F0D8EBE04C2C671B716B80BA6EED8FA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:e0:fb:3e:b2:88:82:e9:b8:28:03:16:39:
0f:fa:cf:34:d2:36:d0:54:c9:27:25:b8:ac:29:4c:
ed:a0:ee:45:e6:3d:f0:09:fd:29:b8:6f:00:ed:d3:
f4:da:14:7a:46:a8:ca:f6:c3:26:57:3a:a9:a2:b6:
5c:8c:25:6b:01:56:33:0d:f4:e0:cf:75:01:31:d1:
99:6f:52:bd:f4:36:1e:72:c5:e5:e4:4f:a3:98:ba:
4a:71:8d:89:04:fc:48:8e:bb:dd:76:f6:51:34:81:
38:84:10:bb:9e:21:f5:6d:63:33:d3:0c:40:ff:a1:
d9:11:31:d7:9a:8f:58:ae:2b:a5:14:88:36:05:30:
6a:8c:94:e2:21:fa:ab:68:7a:85:31:3f:84:29:99:
a8:7e:f5:be:21:4b:bf:bd:e9:fa:16:29:8e:1a:35:
ec:60:78:0a:c6:0b:c7:01:d2:e1:a5:e3:c6:38:d5:
78:ae:0a:07:fb:5a:0d:20:63:2b:d0:a2:68:97:40:
f0:5f:3c:08:3d:60:5b:cb:68:c2:1d:54:38:bb:61:
71:f8:8d:07:d1:07:b6:f1:16:04:e9:b5:a0:af:93:
e9:7c:20:d1:e9:c1:44:72:26:cc:a8:00:b9:cd:34:
a5:25:28:69:1a:3b:cc:bb:c5:8f:e8:18:02:2e:b4:
05:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D9:38:33:F0:D8:EB:E0:4C:2C:67:1B:71:6B:80:BA:6E:ED:8F:A7
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3139302e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.190.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:25:0b:24:5c:c3:76:51:f7:1d:54:7c:10:cf:c4:e3:21:db:
7f:cf:03:5e:bb:14:8b:40:c7:c3:3d:27:3d:21:e1:1c:ea:3a:
39:50:0b:85:87:06:3f:07:5a:9f:60:ef:10:3f:0e:4a:f4:6b:
db:fa:c1:9c:7f:31:4e:aa:2c:79:ef:20:76:bf:ac:db:8e:3d:
a7:66:96:04:8b:84:84:72:c8:b1:57:d2:0a:e8:d4:c9:cf:3d:
24:58:a9:09:af:23:ea:ba:d9:55:6a:44:b3:1e:cf:d5:b5:13:
2f:4e:69:55:f2:c2:15:e4:6a:7a:3b:cb:b4:11:31:be:a6:fc:
8f:cd:1b:5c:55:6e:dd:9f:6e:f5:9d:d6:28:ed:4b:2e:08:02:
87:34:53:81:02:70:12:f2:14:c4:da:20:23:4a:12:29:5a:f1:
ad:19:3b:18:8f:b5:6d:97:84:3c:7e:e6:e5:34:84:38:71:05:
41:6b:c1:d4:bf:8c:4d:24:a7:94:62:56:dd:a4:cb:c6:9b:d7:
f3:21:4c:1b:bb:63:67:af:a5:eb:91:3b:96:27:ca:fc:0b:a8:
08:82:16:60:8e:a9:a7:9e:32:19:f2:9b:ab:0a:b8:48:66:fa:
7b:69:7d:0f:c6:25:1e:45:c1:88:d0:7c:25:ee:8d:bd:8d:91:
b6:64:50:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:43:13 2025 by rpki-client