Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa
File: 3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa (raw, json)
Hash identifier: wE97ifCwuCsHZoyv+UtvDLCrOhOpwPEVh3JX3wVqIpE=
Subject key identifier: 60:9E:A3:72:06:DD:27:9D:56:A6:EC:26:B2:C5:4B:31:23:95:A0:52
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 6FB2977E6983E90A2B7BFA714936BA2A655EBD40
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa
Signing time: Mon 10 Mar 2025 18:37:58 +0000
ROA not before: Mon 10 Mar 2025 18:32:58 +0000
ROA not after: Mon 09 Mar 2026 18:37:58 +0000
asID: 206092
IP address blocks: 185.251.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 03:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:b2:97:7e:69:83:e9:0a:2b:7b:fa:71:49:36:ba:2a:65:5e:bd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Mar 10 18:32:58 2025 GMT
Not After : Mar 9 18:37:58 2026 GMT
Subject: CN=609EA37206DD279D56A6EC26B2C54B312395A052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cd:68:97:2f:ac:ca:3a:df:40:25:9e:fa:b8:
ee:cd:27:3d:83:0a:26:fb:79:99:9c:24:6f:99:fb:
b4:b4:04:af:6d:07:c1:d5:9c:b4:4d:2b:f4:6d:f2:
cc:94:15:41:70:56:9a:40:57:dd:5b:ea:cf:ee:b6:
47:3e:4a:f8:ac:ed:cc:3e:22:5f:14:81:f2:86:71:
d1:f2:cf:3a:bd:e3:ba:3b:29:22:89:2f:a4:6b:35:
7c:4e:6f:36:2c:18:de:8c:b8:2e:60:f8:db:26:69:
02:2b:91:ca:bc:0d:b0:f8:f9:1e:74:80:72:3a:7d:
e8:e6:af:47:3f:90:fe:97:ef:c5:ac:57:12:04:d6:
cf:75:93:8a:df:29:d7:c6:7a:1f:eb:21:e9:cd:1d:
8b:30:a0:95:3e:4c:97:ce:80:25:08:fe:86:1d:31:
b0:31:4c:29:41:c6:03:38:ae:9f:3b:ff:1c:fb:ec:
e0:05:d3:91:e4:73:e6:a5:44:35:4a:32:4e:dc:86:
ba:58:97:dc:a9:c5:15:e2:06:06:b7:f6:b8:c4:f8:
4c:a6:81:63:26:40:82:e5:15:4b:96:fe:dc:1e:77:
98:10:20:5e:42:78:4c:96:c5:0a:06:3d:ad:da:7a:
d9:26:40:43:06:cf:04:95:2a:4d:63:a0:21:ab:f4:
ee:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9E:A3:72:06:DD:27:9D:56:A6:EC:26:B2:C5:4B:31:23:95:A0:52
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.19.0/24
Signature Algorithm: sha256WithRSAEncryption
01:f6:ea:8e:f5:1c:24:14:0e:82:5b:eb:93:06:a8:e8:0b:51:
d2:df:6c:56:f2:e4:fd:31:0e:54:c8:f6:7d:e5:25:e2:3a:ce:
62:08:09:ac:b2:9c:46:cf:8d:01:c7:f2:51:5e:5e:6e:78:e5:
2b:9a:61:4d:e8:8d:48:20:b7:6a:a0:79:ad:92:f4:a5:ce:86:
57:ab:7e:bc:63:4a:3a:a2:7f:a6:1a:e2:d9:b7:e4:25:ee:a3:
c5:f7:05:e9:c7:d1:8f:91:92:41:d6:98:e6:1b:73:c3:be:cd:
50:13:0c:e7:7d:05:d8:10:d2:79:8f:be:23:b3:9f:b6:aa:1c:
e7:56:a5:75:8a:25:ac:94:6c:f4:76:8e:ed:76:f6:65:9d:c6:
57:11:4d:c4:b0:04:e8:2b:7a:47:b4:1f:62:bf:30:99:85:b0:
ea:d1:45:a2:9a:28:fa:f0:21:96:b0:ca:38:18:94:1e:8f:d1:
62:33:d8:ba:c6:d7:61:c5:5f:4c:41:70:09:e5:ca:7e:d6:5a:
1b:d0:4e:4b:d4:59:a2:4d:39:69:93:93:36:08:36:8e:a9:21:
1f:c4:34:05:87:90:28:d3:73:7a:37:5e:27:cc:5d:69:0e:dc:
88:b3:21:a2:ae:f1:78:42:d6:78:42:ae:b5:b9:2e:37:27:ec:
a1:5e:37:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 16:00:49 2025 by rpki-client