Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/3137362e39372e3231332e302f32342d3234203d3e20323136303330.roa
File: 3137362e39372e3231332e302f32342d3234203d3e20323136303330.roa (raw, json)
Hash identifier: x+RYo6wjWwk6+BVxPpNh5bRjqAt+Gok7rpn9qho5bkg=
Subject key identifier: 70:CE:06:0E:91:9C:B3:33:B6:39:B6:44:05:04:64:13:97:C1:D0:6A
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 616D4AC178AD4073E1BE5DF3BEB9E1FFBE4A0D2D
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/3137362e39372e3231332e302f32342d3234203d3e20323136303330.roa
Signing time: Mon 10 Mar 2025 18:38:31 +0000
ROA not before: Mon 10 Mar 2025 18:33:31 +0000
ROA not after: Mon 09 Mar 2026 18:38:31 +0000
asID: 216030
IP address blocks: 176.97.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 03:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:6d:4a:c1:78:ad:40:73:e1:be:5d:f3:be:b9:e1:ff:be:4a:0d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Mar 10 18:33:31 2025 GMT
Not After : Mar 9 18:38:31 2026 GMT
Subject: CN=70CE060E919CB333B639B6440504641397C1D06A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:43:43:fb:96:af:36:37:2a:93:06:4b:cc:
4d:11:24:0d:58:dd:76:a0:5a:94:b7:79:21:8f:06:
08:6b:1f:c2:b5:f7:50:64:53:f4:1e:1d:3d:17:ec:
68:07:17:d9:c8:da:33:60:c4:95:b0:0c:e5:2b:48:
17:a0:68:46:0a:e3:d2:5f:10:0a:69:fa:2f:b8:fa:
51:3d:b6:76:ba:bd:fb:9a:2a:a8:b4:d7:10:df:24:
42:07:46:15:c9:5c:f3:6d:fc:09:7a:00:5b:2b:59:
ab:ed:e1:9a:d5:f3:34:c3:bb:2f:59:54:17:0d:6d:
8f:3e:86:6d:8e:51:72:da:83:55:8b:e4:c6:b4:e5:
ff:44:38:c8:55:2e:a7:41:2f:be:14:bf:6e:15:58:
df:14:1d:2f:a3:3b:bb:1f:65:d4:76:ae:f2:34:83:
61:79:d4:43:da:f5:b8:5c:59:62:28:cd:3c:b1:6e:
50:41:0f:0b:3d:87:b9:5a:cd:a8:0b:43:7d:41:89:
47:06:bd:09:c3:47:20:0e:63:48:eb:19:89:d0:f6:
69:7c:23:63:74:05:a5:29:a5:a4:15:2a:3d:0b:3f:
59:cb:44:69:82:b0:14:90:c3:65:f5:45:6b:e7:1d:
32:6e:7d:58:c5:87:68:91:d5:40:91:6b:91:fe:f3:
a2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CE:06:0E:91:9C:B3:33:B6:39:B6:44:05:04:64:13:97:C1:D0:6A
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/3137362e39372e3231332e302f32342d3234203d3e20323136303330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.213.0/24
Signature Algorithm: sha256WithRSAEncryption
76:52:e6:6c:58:21:c7:2c:9a:74:57:6b:1a:8b:17:2e:b4:3f:
17:ab:33:1c:cd:e3:2b:ab:87:2b:9a:fa:16:77:18:26:2b:c8:
b7:94:95:a4:f2:bc:62:37:07:5e:c5:0c:ec:58:08:1a:e3:2c:
69:cb:75:a9:f6:dc:83:f8:90:49:70:56:3a:a3:8a:88:c5:ec:
a4:f8:69:ed:57:50:bd:ae:99:f1:3c:67:c9:a3:eb:5f:6c:15:
54:33:10:ca:18:c2:86:2b:f9:7a:74:e0:74:07:36:05:54:a2:
9f:79:4d:60:cb:85:e1:a4:14:50:31:dc:21:ef:5c:d7:e4:db:
a9:97:22:cc:b7:dd:7b:51:78:4a:48:6d:64:99:0e:55:cc:be:
30:b7:8a:c2:4a:79:cb:37:81:6e:74:08:7c:89:61:ab:c3:8b:
7f:52:eb:40:fe:4a:98:c5:2e:42:9a:07:99:96:6c:63:07:c6:
92:22:fd:bd:7b:3b:aa:42:91:e3:ae:46:c5:4f:5e:02:4e:74:
ec:0d:15:83:a7:df:3e:fb:da:c0:c1:a9:8d:91:4c:a4:35:43:
e3:2b:44:bc:f6:26:78:7b:f2:7b:2f:cc:dd:43:16:1c:28:b6:
f5:af:fb:c2:ff:f4:f4:4d:58:46:aa:93:b3:ad:83:7f:7b:6f:
d4:ab:14:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 15:58:54 2025 by rpki-client