Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/3139342e32362e3232332e302f32342d3234203d3e20343030313735.roa
File: 3139342e32362e3232332e302f32342d3234203d3e20343030313735.roa (raw, json)
Hash identifier: yzlstLnidlbzwukvV9D/QvVE7rWc67Q28lja1LYs6xM=
Subject key identifier: 7E:39:36:A3:9F:01:A6:0B:AD:56:02:07:F4:CD:01:57:17:AB:DA:F8
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 5AB8CF7FECC812493609B2C26AE4B55C584AB221
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/3139342e32362e3232332e302f32342d3234203d3e20343030313735.roa
Signing time: Mon 10 Mar 2025 18:38:45 +0000
ROA not before: Mon 10 Mar 2025 18:33:45 +0000
ROA not after: Mon 09 Mar 2026 18:38:45 +0000
asID: 400175
IP address blocks: 194.26.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 03:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:b8:cf:7f:ec:c8:12:49:36:09:b2:c2:6a:e4:b5:5c:58:4a:b2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Mar 10 18:33:45 2025 GMT
Not After : Mar 9 18:38:45 2026 GMT
Subject: CN=7E3936A39F01A60BAD560207F4CD015717ABDAF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:cb:6b:cc:2f:f5:ba:7f:5b:c3:7d:92:a9:
39:e2:a1:7b:20:01:f0:cc:e5:ac:6e:9b:e8:bd:f4:
7e:7c:8b:7a:5f:a1:23:04:4b:1d:b2:68:4c:dd:12:
1c:00:eb:c9:8f:3e:e5:3a:48:7e:17:a1:cd:53:77:
b7:52:65:c2:13:15:82:77:52:9c:59:3d:49:b0:09:
8f:77:10:00:35:b9:34:b5:a1:4b:fb:77:c1:82:e1:
05:e5:70:6b:13:f8:64:c1:4d:48:26:b5:e9:f7:34:
12:31:fb:53:ae:e3:fb:a7:f1:d3:20:2c:db:9f:10:
94:25:ec:b5:2f:6b:de:a5:1a:90:16:73:25:52:18:
41:9d:49:e5:27:b9:a1:58:84:88:7a:b8:f8:a7:f4:
b6:d1:c5:53:f9:00:38:43:47:3e:f6:58:c1:a5:9f:
d5:18:ee:d1:fd:be:b8:09:b8:6b:cb:57:c3:c6:ca:
74:2f:23:d4:b2:0e:7c:c8:e9:d7:13:40:ab:14:83:
39:99:d2:d7:22:02:0b:27:85:d4:c2:3b:bb:55:e1:
b7:c1:37:b3:38:8b:28:42:01:ab:1a:f8:79:50:e5:
84:3f:d8:c8:e0:0a:fc:18:f0:60:2b:01:f5:54:f1:
06:03:35:82:69:37:39:44:91:e7:cd:c3:9a:51:b2:
39:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:39:36:A3:9F:01:A6:0B:AD:56:02:07:F4:CD:01:57:17:AB:DA:F8
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/3139342e32362e3232332e302f32342d3234203d3e20343030313735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:20:56:1f:60:fe:28:4b:15:31:19:33:fb:00:4f:b5:cd:75:
95:9a:2d:4b:c4:04:fa:33:5f:96:77:f8:86:b7:de:0f:4e:70:
d7:90:79:83:d1:6a:b6:29:dc:af:0e:bd:ec:b8:cf:c2:94:f4:
f2:e7:61:b3:0a:bc:f4:ad:8f:af:60:14:eb:8d:c7:42:fd:f9:
29:ed:ac:1b:b3:93:0d:13:54:c6:9a:1e:fd:44:5f:21:1d:8f:
0a:ab:9a:32:cd:b8:ca:0f:42:28:35:32:a2:37:0e:54:7a:ff:
2b:64:d7:0d:1c:fd:a1:35:cd:e9:ce:b0:b0:73:79:30:ce:3a:
e8:42:ef:3d:21:74:18:ca:65:d3:27:d5:0c:f3:47:a7:e2:7f:
9f:25:a0:b5:23:e0:59:ee:a2:94:0a:14:eb:ef:78:a3:6e:58:
df:9c:64:c6:aa:fe:8d:d3:4b:7b:ed:5e:f3:1b:f2:4f:29:d0:
5c:79:54:5a:19:7d:0e:88:c9:56:ec:1b:b6:40:3c:ba:fa:46:
5e:d2:90:c9:53:89:d7:7f:c9:ff:75:f5:84:5c:7b:fb:0c:65:
e2:b8:c8:2d:cc:14:c2:b8:26:7c:3c:57:39:ad:41:4e:ab:4a:
75:bf:23:df:68:9d:74:35:89:ae:e9:0d:36:e9:07:ef:e1:6e:
0c:18:09:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 15:48:49 2025 by rpki-client