Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a646130313a3a2f33322d3332203d3e20323134393637.roa
File: 326131333a646130313a3a2f33322d3332203d3e20323134393637.roa (raw, json)
Hash identifier: zj1ARbGG0KKWVGhyBIQnR9Ua0u7oCe2HCtyMecubnF8=
Subject key identifier: 10:E7:3B:B6:8F:CA:98:3E:FB:D3:A9:36:5C:12:FC:DC:64:2B:B5:81
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 1201896258A6B898B3CC4111BB239FB6BD0EB56B
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a646130313a3a2f33322d3332203d3e20323134393637.roa
Signing time: Mon 10 Mar 2025 18:38:09 +0000
ROA not before: Mon 10 Mar 2025 18:33:09 +0000
ROA not after: Mon 09 Mar 2026 18:38:09 +0000
asID: 214967
IP address blocks: 2a13:da01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 03:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:01:89:62:58:a6:b8:98:b3:cc:41:11:bb:23:9f:b6:bd:0e:b5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Mar 10 18:33:09 2025 GMT
Not After : Mar 9 18:38:09 2026 GMT
Subject: CN=10E73BB68FCA983EFBD3A9365C12FCDC642BB581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:df:7e:05:92:30:ea:f3:13:c1:7b:05:2a:d7:
38:c3:ca:1a:64:c5:8e:f2:80:d3:a8:4e:57:7b:d1:
c9:09:b4:ef:ab:86:72:dd:fc:77:89:5d:49:bb:ac:
31:ad:de:6b:f1:21:fa:bb:f9:a9:78:b1:c8:39:ca:
8f:2b:d6:ac:27:99:cd:18:e1:c1:e9:82:ca:b0:f6:
7c:cb:17:ca:98:ae:02:de:29:94:e2:0e:79:2d:da:
f4:91:4d:39:51:82:f4:2b:f2:88:9e:77:4a:8e:36:
81:d3:7d:04:9d:00:03:c9:37:5b:1b:28:bb:cb:e3:
1e:59:40:12:6c:62:cb:d4:ef:ab:51:4f:32:9b:27:
2c:26:75:8b:4d:4a:d6:26:c2:2a:82:55:ae:23:db:
8f:7c:7e:35:57:31:4f:66:59:1a:85:d1:20:4d:b3:
d5:b3:fe:19:81:85:21:93:4a:1d:4d:29:ac:02:5a:
64:32:07:10:86:c6:7a:36:e3:25:53:0c:b1:c1:a2:
1b:2c:69:71:aa:62:dd:10:34:46:db:8f:aa:04:1f:
e7:4b:53:b5:15:ac:cc:91:e2:c9:7d:d9:b6:80:b0:
9b:12:35:96:c4:be:2f:f1:f7:30:84:68:41:dc:db:
27:a9:85:49:ef:38:77:b8:13:a2:a2:56:86:5c:79:
1a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E7:3B:B6:8F:CA:98:3E:FB:D3:A9:36:5C:12:FC:DC:64:2B:B5:81
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a646130313a3a2f33322d3332203d3e20323134393637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:da01::/32
Signature Algorithm: sha256WithRSAEncryption
a1:65:1c:76:0c:55:49:4d:4c:bc:12:1f:ff:98:69:e6:1c:73:
1b:3c:38:d9:45:ab:79:d6:96:b6:6e:97:25:14:68:c6:9f:9b:
b1:92:2c:e7:52:0b:5e:af:4f:06:5e:16:6a:2f:62:20:79:cb:
06:8f:5a:ab:11:96:16:ae:c2:52:38:0d:57:31:84:ba:ca:72:
5f:5a:7e:c8:19:8b:f2:1e:18:51:e7:f7:07:23:b4:5d:f0:b7:
0d:48:0c:36:08:44:56:7c:a6:c6:b1:6b:b5:83:1b:94:18:e9:
c4:84:6b:0f:73:05:96:05:bd:65:b4:37:c5:6b:4f:b2:7d:52:
1c:2b:c1:ab:cd:a2:bf:61:db:63:73:f4:64:e2:b8:32:fc:09:
fd:dd:92:ac:63:3e:ce:a7:db:54:a5:ba:3b:a8:d6:8d:ed:53:
65:2f:57:5f:ba:2c:a1:b4:14:e9:b2:cf:dd:e9:58:00:7f:67:
32:38:4e:82:17:2b:e2:b1:f3:47:f3:fc:42:7a:57:57:dc:77:
9b:c9:3a:5d:6f:2f:36:91:5c:f7:33:50:e3:cc:4a:4b:8f:d0:
49:ab:64:30:7a:50:79:de:0f:35:d4:4c:1c:af:b7:9c:91:19:
6b:4c:a3:e5:01:50:a2:7a:f7:bf:2f:25:ee:af:86:2f:7f:61:
f8:ce:3e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 15:51:20 2025 by rpki-client