Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa
File: 3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa (raw, json)
Hash identifier: gBowB4M9spFJyhtGeGBV6pXmZemrPQZEhgmMEW2ghgQ=
Subject key identifier: 0B:A0:7B:5C:0A:85:1D:56:00:3C:3E:BE:35:29:FB:F0:BA:7A:CF:7F
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 1E9521AE19DEE2A97B425174859BC327D4AED330
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa
Signing time: Mon 10 Mar 2025 18:38:01 +0000
ROA not before: Mon 10 Mar 2025 18:33:01 +0000
ROA not after: Mon 09 Mar 2026 18:38:01 +0000
asID: 211439
IP address blocks: 188.244.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 03:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:95:21:ae:19:de:e2:a9:7b:42:51:74:85:9b:c3:27:d4:ae:d3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Mar 10 18:33:01 2025 GMT
Not After : Mar 9 18:38:01 2026 GMT
Subject: CN=0BA07B5C0A851D56003C3EBE3529FBF0BA7ACF7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b6:72:7d:ad:7f:ba:a2:0e:3c:ff:9e:a9:f7:
fa:50:f9:c6:4e:a3:f7:07:04:a6:ff:e6:4f:4c:d2:
8b:6a:4e:e9:78:c7:91:1f:16:e5:1a:1d:05:b4:8a:
6f:1f:4f:7c:a2:65:0e:f2:99:1e:a4:3a:90:04:df:
26:14:f6:7f:8b:14:ca:2f:96:96:de:29:8c:3d:95:
af:39:e1:58:47:5d:9e:a5:13:09:5e:6b:6b:6e:c1:
eb:1a:a8:d5:84:1e:43:44:55:f3:61:06:42:c0:b5:
e7:6d:bb:52:2f:cd:af:67:27:85:4d:ec:5b:97:e5:
2d:0a:9b:d9:70:bf:2c:82:55:0e:37:b5:48:f1:8c:
07:bc:9a:e6:29:59:bd:f1:83:89:31:22:9d:23:db:
c6:8b:12:ac:ff:05:6f:68:01:38:24:52:89:a0:cd:
a2:e9:a3:2d:3e:8c:b3:5a:2e:51:a0:ed:fa:07:ed:
66:3e:0b:e8:05:78:dd:a1:ce:b2:19:85:26:68:f9:
ff:3b:81:f9:0c:ad:ef:23:db:29:4e:db:5c:3b:f1:
61:b7:0d:7d:1c:fd:6e:7c:b6:29:25:94:fa:d0:d5:
4a:b6:85:e4:df:be:a3:5f:b3:cd:5f:6d:8b:61:96:
51:cc:79:15:90:48:be:ac:4a:5f:ce:14:3b:76:25:
fc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A0:7B:5C:0A:85:1D:56:00:3C:3E:BE:35:29:FB:F0:BA:7A:CF:7F
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.113.0/24
Signature Algorithm: sha256WithRSAEncryption
92:51:66:dc:10:e4:2d:b2:a6:0a:64:1b:df:ae:ec:06:62:6b:
40:a4:28:4d:b3:0a:77:69:a3:c9:d0:d8:87:b9:b0:e5:2f:c1:
f9:a6:2b:26:b6:eb:a4:a1:8e:61:44:76:34:1a:42:df:8e:b1:
df:7b:38:65:87:3b:cf:58:38:c0:8c:60:f0:4f:ce:47:69:2b:
bb:3a:be:f8:81:81:77:48:51:f2:1b:fa:32:89:ef:9d:42:43:
19:ef:05:79:a0:6d:5b:97:22:d5:11:d7:25:4d:d6:b0:1f:3a:
df:d8:cc:62:92:fc:4d:10:fa:53:6b:ee:07:a2:0b:24:9b:81:
f7:a4:f0:dd:ae:73:b1:c7:b2:66:26:ab:45:b2:ed:df:a1:8b:
d5:2b:5c:2e:64:7c:e4:9c:13:56:c2:16:8a:86:48:af:c8:10:
51:1f:43:03:09:8a:28:1d:50:b6:ac:68:d1:dc:d4:7b:5c:3d:
ba:69:54:16:ce:f5:6d:c7:99:99:44:f9:b0:46:08:a2:e6:b6:
b8:0a:e0:3e:5b:0c:65:34:d0:f2:12:02:1f:81:b1:97:94:95:
bb:e6:d3:68:27:6b:78:ee:70:57:7e:94:d2:8f:dd:8e:a3:a4:
05:9c:7c:93:e2:cd:fc:c7:db:c5:b9:c7:bc:62:2d:ea:b1:51:
4b:63:ba:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 16:16:53 2025 by rpki-client