Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a653430343a3a2f33322d3332203d3e20323135333130.roa
File: 326131333a653430343a3a2f33322d3332203d3e20323135333130.roa (raw, json)
Hash identifier: uyzQxNfCQuPRUilhbFb9igirZqWyG0ghryABccswsyE=
Subject key identifier: B0:1A:C2:CD:0C:60:08:F5:7A:14:0C:1E:EA:1C:E6:E1:72:91:86:2D
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 5A63E5F3804597798A949348DFE21863A8014D91
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a653430343a3a2f33322d3332203d3e20323135333130.roa
Signing time: Mon 10 Mar 2025 18:38:17 +0000
ROA not before: Mon 10 Mar 2025 18:33:17 +0000
ROA not after: Mon 09 Mar 2026 18:38:17 +0000
asID: 215310
IP address blocks: 2a13:e404::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 03:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:63:e5:f3:80:45:97:79:8a:94:93:48:df:e2:18:63:a8:01:4d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Mar 10 18:33:17 2025 GMT
Not After : Mar 9 18:38:17 2026 GMT
Subject: CN=B01AC2CD0C6008F57A140C1EEA1CE6E17291862D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2d:1e:1e:88:05:3c:02:34:09:28:c1:6f:4a:
7c:3d:99:96:e7:7a:f5:ef:84:92:7b:d9:8a:26:e5:
38:6a:39:da:5d:ff:19:fd:ea:da:03:6a:cc:8f:42:
1a:2a:09:93:e7:7f:7d:69:29:02:e1:f1:90:31:ce:
cd:36:d5:d8:a3:d2:43:a9:88:ca:35:41:51:38:f3:
c9:c1:bf:03:46:50:d1:c3:60:82:e5:8e:bf:f9:2c:
cb:72:e9:31:e4:39:d5:b8:00:39:b7:9b:6f:c6:01:
94:36:f7:af:6f:69:c7:eb:2c:96:fc:47:44:4c:18:
77:15:d5:76:19:7f:61:60:78:5b:b8:fd:f4:33:53:
83:44:31:17:fe:ea:10:99:f1:22:bd:60:cd:09:1b:
98:6d:69:73:a3:e9:0c:ad:87:da:a7:6a:89:cd:7e:
ce:10:aa:66:72:29:70:d1:60:32:a5:c0:fe:f1:b5:
3d:ac:bc:21:1d:20:a6:db:ad:36:c3:f1:43:f9:33:
9d:81:da:4d:9e:27:b3:13:33:69:48:e5:3b:90:20:
01:6e:dd:bc:31:ae:e1:16:c7:0f:70:ee:3b:ad:27:
87:ed:ba:b1:24:22:87:7f:de:7f:db:c1:a2:ae:68:
ae:d9:eb:53:79:ef:07:59:08:90:c5:5d:f4:f2:7c:
a5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1A:C2:CD:0C:60:08:F5:7A:14:0C:1E:EA:1C:E6:E1:72:91:86:2D
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a653430343a3a2f33322d3332203d3e20323135333130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e404::/32
Signature Algorithm: sha256WithRSAEncryption
19:64:5a:4a:48:32:fc:b4:3f:a9:3d:eb:91:f8:a6:e0:e9:e8:
f9:48:76:f9:1c:a3:63:a0:42:e0:4c:43:35:43:35:a5:6b:4d:
d5:62:41:08:68:cb:ee:39:3e:f1:28:d2:51:7b:58:79:4c:f2:
8f:e8:30:67:6c:7f:63:75:d5:b9:62:b2:08:05:4b:a1:3b:d8:
19:c0:f5:66:ca:f8:e0:68:60:e0:75:fa:e3:37:af:d3:51:6d:
bb:40:de:f7:d5:98:99:c7:b7:a9:fe:44:65:47:74:f3:1f:a0:
e2:b1:6c:98:1c:2d:c5:16:7d:44:aa:b1:8c:a5:a1:de:c8:cd:
6a:26:20:b2:e3:cd:25:b7:16:dc:49:d2:cf:3b:2d:34:f0:b0:
41:2b:2d:14:e8:5a:54:03:22:46:dc:c6:db:52:01:0e:a1:d2:
2d:94:f8:1f:6e:c1:9a:f2:38:5c:29:68:91:1c:01:bc:8a:91:
3c:76:44:63:42:a2:c1:e3:c8:07:35:db:21:97:c9:76:ab:3b:
ea:ff:36:bf:b6:7a:44:20:43:a1:94:af:fe:a4:8e:c1:a4:3d:
84:fc:9d:05:23:7a:48:49:8c:29:f8:f7:23:b4:62:b5:5a:48:
89:44:cc:e0:c5:24:17:38:3b:d4:bb:b1:48:91:e5:ef:93:ef:
bb:29:a4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 15:49:08 2025 by rpki-client