Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3232382e302f32342d3234203d3e203631333137.roa
File: 38352e3230392e3232382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: 6ZIwAJuKfurUtZE26sp2ltiaAarGLaToZlRl6ZPv/zM=
Subject key identifier: 16:91:8E:40:2A:47:3D:90:BF:22:8A:DB:D9:0E:CA:AF:D3:F3:23:1F
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 27EE04DE3D0A852E12FF2303F799D9CB3437B28A
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3232382e302f32342d3234203d3e203631333137.roa
Signing time: Thu 13 Feb 2025 18:53:55 +0000
ROA not before: Thu 13 Feb 2025 18:48:55 +0000
ROA not after: Thu 12 Feb 2026 18:53:55 +0000
asID: 61317
IP address blocks: 85.209.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 02:10:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ee:04:de:3d:0a:85:2e:12:ff:23:03:f7:99:d9:cb:34:37:b2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Feb 13 18:48:55 2025 GMT
Not After : Feb 12 18:53:55 2026 GMT
Subject: CN=16918E402A473D90BF228ADBD90ECAAFD3F3231F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:56:00:0f:be:2c:39:58:76:dd:69:6b:b4:
4c:6c:fc:9a:26:21:af:ea:25:0f:dd:56:95:b8:76:
1d:f4:6f:b2:db:c8:69:db:ac:29:b0:10:8f:a9:3e:
08:7e:ce:3f:e8:5a:68:e9:96:2f:0d:13:54:51:e4:
ab:70:80:b2:97:3a:05:9a:01:7c:ca:2c:f2:33:2a:
9b:43:ac:86:fc:2f:3b:eb:ca:8f:0f:16:f7:3d:eb:
cb:a2:c7:d1:73:ba:88:37:63:c8:42:60:80:73:14:
88:98:ed:8c:03:34:68:69:68:ca:99:6d:55:ad:bc:
f3:4a:c1:19:ee:e9:e4:22:86:40:18:03:5c:e9:a2:
10:46:15:f5:e8:ad:1c:ca:a1:03:ea:70:97:2f:d8:
54:37:e9:03:8e:63:a8:45:bd:27:d9:47:12:e2:17:
9d:a5:2b:4b:52:1c:62:d7:09:f9:b2:27:dd:69:c0:
75:f3:ce:29:14:7d:1f:16:b5:0a:00:04:c8:bc:d2:
e1:35:e5:7e:f1:74:fd:28:ac:9b:98:e2:d2:fe:97:
c7:65:8e:7d:a7:50:20:91:f6:a3:4e:bd:10:69:4e:
c0:3f:57:58:2f:10:57:0e:21:d8:18:c2:c7:e2:e5:
ab:eb:e3:bf:91:16:5d:b8:9f:dd:83:ca:30:3b:46:
ac:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:91:8E:40:2A:47:3D:90:BF:22:8A:DB:D9:0E:CA:AF:D3:F3:23:1F
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3232382e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.228.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:e9:17:cc:36:4a:b5:81:bc:06:21:93:ea:3c:34:14:26:d4:
69:cb:7b:c0:39:7a:f1:31:65:a9:02:56:9c:18:0a:6f:5e:75:
a1:a6:8f:bc:48:17:bd:25:48:bf:9f:eb:bc:96:5c:7a:11:42:
ad:67:b2:7a:05:57:85:74:08:b7:fa:7d:0c:df:dc:e4:0f:1d:
f7:82:2e:77:fd:b3:bd:94:a8:4c:c6:69:91:d4:0d:c8:11:05:
cc:e6:6a:d0:c8:1d:bb:20:bc:95:a0:e0:cc:23:fd:6d:79:e3:
bc:14:b3:c1:af:8c:69:6b:cf:04:fe:ae:58:ac:bc:d9:65:7a:
5f:64:5e:eb:76:52:b9:fc:1c:7c:70:26:3d:a7:77:33:5b:56:
b5:34:a5:59:c6:0f:78:99:fc:dd:de:1a:c7:db:48:5f:94:0d:
4a:bd:f3:ad:3d:7f:ef:a9:fb:2a:2b:9b:1f:43:28:d7:85:70:
b1:da:05:30:17:ed:fa:be:85:31:d0:e5:b0:cc:74:4e:d2:c8:
88:3b:02:04:12:35:6a:fd:ff:39:9f:79:ee:c3:a6:5a:bd:0b:
19:7b:e7:b0:45:68:6a:de:e8:36:0e:f3:08:17:90:8b:ad:34:
40:97:00:9e:a5:f5:79:c0:b9:79:eb:07:c4:b8:8e:c4:58:1b:
27:df:b2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:36 2025 by rpki-client