Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3232392e302f32342d3234203d3e203536353934.roa
File: 38352e3230392e3232392e302f32342d3234203d3e203536353934.roa (raw, json)
Hash identifier: QX9ueohVOd3OqmtIdot9+eGuIdzLX4v81/D0nXHE6p0=
Subject key identifier: AC:C6:62:9E:24:54:03:ED:A3:8B:4C:30:7D:7E:FE:BC:AF:20:A5:82
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 40F3F6F72F04AEE73B448AF13E7E58E9709AABBD
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3232392e302f32342d3234203d3e203536353934.roa
Signing time: Sun 12 Jan 2025 06:32:43 +0000
ROA not before: Sun 12 Jan 2025 06:27:43 +0000
ROA not after: Sun 11 Jan 2026 06:32:43 +0000
asID: 56594
IP address blocks: 85.209.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:f3:f6:f7:2f:04:ae:e7:3b:44:8a:f1:3e:7e:58:e9:70:9a:ab:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jan 12 06:27:43 2025 GMT
Not After : Jan 11 06:32:43 2026 GMT
Subject: CN=ACC6629E245403EDA38B4C307D7EFEBCAF20A582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:38:2f:cf:f4:f0:d7:41:7d:9e:33:7c:e8:06:
92:1a:f8:2d:cb:0c:d6:34:0a:e4:04:4c:08:f7:18:
7f:4e:bf:f9:ee:dd:1d:f1:08:f5:34:45:2f:dd:da:
60:50:60:1f:6a:51:09:f7:8f:57:23:30:89:e2:2f:
f2:67:ea:17:2d:3a:f0:a4:fc:b6:89:9c:59:c8:ed:
b5:57:69:15:53:36:f3:d1:07:3e:ab:48:2d:fe:3e:
05:4c:83:8b:9d:88:04:69:9d:fa:c6:a4:0e:d2:2a:
a6:e2:dd:e8:6e:df:b0:1c:c7:39:31:6e:a2:9c:84:
ec:fa:a5:6b:34:b4:84:e7:ae:98:d9:50:29:e5:5d:
04:b8:7c:0c:93:f6:c7:66:3e:77:c0:9e:2c:25:98:
d8:0f:ee:b9:a6:bd:b0:1b:7d:ca:16:2c:da:e2:d0:
22:f1:4e:6b:82:f8:f0:67:76:c3:b2:32:91:75:38:
ba:dd:ce:0f:8d:fc:4d:35:9a:6e:b8:a1:3c:e1:61:
82:a3:53:dc:ec:07:34:2a:6a:b1:91:dd:e6:80:c8:
76:05:1a:df:92:51:96:27:6d:b8:a2:c6:1f:5a:df:
28:17:eb:ba:d4:46:c7:72:10:9e:14:e3:99:9e:08:
ce:cc:18:b6:f5:d5:bc:9a:5d:f5:b5:1d:15:de:98:
f5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C6:62:9E:24:54:03:ED:A3:8B:4C:30:7D:7E:FE:BC:AF:20:A5:82
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3232392e302f32342d3234203d3e203536353934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.229.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:bc:dd:d4:5f:4a:26:c2:d0:c1:07:fd:42:91:cb:2e:21:8e:
86:41:0a:a6:a8:7d:7a:a6:1e:a4:57:cf:d5:9f:21:bd:b8:0d:
db:78:76:6e:5f:37:85:51:b7:3f:83:04:94:2a:94:03:bf:fe:
69:39:30:73:8b:d9:d3:15:2a:4b:46:59:d5:27:3b:60:98:84:
4f:a6:b9:5b:97:07:71:65:6f:e1:c5:07:5a:94:96:ff:bb:13:
0f:42:d8:40:6f:26:3e:3d:35:a1:71:d9:88:ae:18:2e:b6:c0:
78:fc:60:f4:51:96:c2:76:c1:f8:92:bb:37:2f:f3:03:30:7f:
5a:5f:7a:2a:47:d1:42:54:4d:dc:63:c8:71:8c:8d:1b:81:4a:
b7:cd:aa:01:99:36:c6:c1:dd:49:b3:56:b9:6f:7b:ca:35:ae:
da:c8:1b:1b:c5:59:a6:e2:4f:74:fc:6b:d1:f2:a6:d7:42:2b:
f1:16:40:b0:bd:0e:95:db:15:1d:94:47:52:24:a0:b2:29:f8:
91:52:6f:fa:60:b4:5a:c5:f7:46:2e:33:1b:d5:67:6a:72:0c:
7a:87:cb:c7:6b:fc:44:d4:af:bf:ae:c1:45:de:4b:83:68:3e:
be:49:11:76:e7:a9:2a:86:72:66:5a:87:4d:fc:1c:f6:89:e8:
ac:b0:45:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:50:40 2025 by rpki-client