Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a623930323a3a2f33322d3332203d3e2035363530.roa
File: 326131333a623930323a3a2f33322d3332203d3e2035363530.roa (raw, json)
Hash identifier: fgX7JOs0CLQUJu45+RMzl8sB0KWTVxumN6S/L327z0k=
Subject key identifier: 41:EE:E7:C8:93:FA:F5:5C:37:5A:76:6A:6D:BB:CB:CA:FB:AC:DD:C6
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 1B1DBB375E675300FDF70C1F32F4CC957C5EE2ED
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a623930323a3a2f33322d3332203d3e2035363530.roa
Signing time: Mon 10 Mar 2025 18:37:42 +0000
ROA not before: Mon 10 Mar 2025 18:32:42 +0000
ROA not after: Mon 09 Mar 2026 18:37:42 +0000
asID: 5650
IP address blocks: 2a13:b902::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 03:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:1d:bb:37:5e:67:53:00:fd:f7:0c:1f:32:f4:cc:95:7c:5e:e2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Mar 10 18:32:42 2025 GMT
Not After : Mar 9 18:37:42 2026 GMT
Subject: CN=41EEE7C893FAF55C375A766A6DBBCBCAFBACDDC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:be:e4:7c:e2:34:d1:e0:fd:ac:14:66:69:a4:
67:17:32:2b:ae:d6:7d:ce:98:b4:95:c3:02:78:7e:
c7:ca:e6:d9:44:c2:b9:0a:c8:e0:4b:f0:0a:99:3a:
c1:f8:a0:ee:7a:ba:e4:77:22:71:b6:27:f1:d7:89:
69:48:5a:f1:ac:fa:a0:99:62:e3:ec:6c:55:84:e9:
7c:9d:5e:69:7e:6c:8f:e7:d4:94:dd:2f:bb:5b:e9:
8b:48:24:07:97:54:46:69:2c:50:3d:4a:2a:74:10:
7b:42:28:50:8d:b4:34:9a:95:42:70:19:d4:4e:13:
d3:65:26:65:a0:f1:fc:b0:7a:cb:15:97:cd:73:ff:
af:55:43:fe:73:50:18:4e:3f:c8:8c:da:c3:54:4f:
6d:a5:8f:1d:fe:39:23:0d:78:1b:27:63:b9:ba:b3:
53:91:74:0d:0b:80:32:c5:6b:8b:c0:27:d2:22:e6:
e1:f3:88:7b:e0:65:c0:3a:d6:d3:e6:2c:50:bd:73:
50:21:bb:21:2f:b1:9f:56:a4:15:5d:28:c4:a4:04:
29:f0:45:e1:af:64:a8:ce:b4:dc:20:23:06:28:f4:
13:3b:3c:0c:f4:f4:e1:62:21:a8:9a:17:77:fc:f6:
75:1d:70:f5:89:e5:e1:b1:e7:58:c3:a6:6d:ca:06:
e1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EE:E7:C8:93:FA:F5:5C:37:5A:76:6A:6D:BB:CB:CA:FB:AC:DD:C6
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a623930323a3a2f33322d3332203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b902::/32
Signature Algorithm: sha256WithRSAEncryption
77:1e:3a:75:b6:65:84:00:4d:ef:af:08:53:e2:ab:ee:25:79:
d8:47:3c:90:a0:c1:11:6b:c7:f5:1e:de:07:bb:c2:c3:38:a4:
58:98:95:b3:48:d4:46:5d:33:ca:2e:a4:78:ed:b5:b0:9c:f4:
90:c2:c5:9c:fe:55:d5:b0:55:71:53:5f:6a:52:88:8a:cc:25:
6f:84:9e:e7:6d:c4:e2:33:5e:79:87:49:d2:d1:58:81:b0:0c:
18:2d:65:97:1f:67:a9:82:e2:91:ad:fa:82:60:e0:e4:6e:ed:
50:d9:cb:fc:3d:36:cf:44:03:70:29:df:1b:f3:b4:df:83:72:
96:15:0e:be:92:e8:cb:57:05:48:ab:8c:13:7d:62:c2:f5:96:
0a:16:ad:97:46:c4:ca:c8:79:d8:eb:a0:15:4f:94:a9:fa:e6:
c7:46:1d:86:ba:5c:eb:4b:29:2b:69:7d:a7:d5:05:24:d5:00:
a2:e3:e7:a4:6b:b1:7c:cb:88:13:15:5f:6a:67:07:a4:23:d5:
e9:02:22:01:f0:17:b7:53:6b:ec:6d:10:99:0f:0b:a9:ff:aa:
ec:ce:60:43:4c:81:b5:c9:1f:e3:e7:7c:48:bb:f1:2a:dd:ec:
1c:f8:09:5b:7c:a6:dc:72:f0:80:18:0b:a0:5c:47:99:21:31:
00:72:cc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 16:27:04 2025 by rpki-client