Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a653430353a3a2f33322d3332203d3e20323134393430.roa
File: 326131333a653430353a3a2f33322d3332203d3e20323134393430.roa (raw, json)
Hash identifier: HZ1FcP6uKIG0ErisyoB210/El4Tl/fdKRO4f//GIOhY=
Subject key identifier: 2D:C5:14:24:D5:9F:37:FB:23:ED:10:56:B3:B9:8B:70:58:72:DD:0A
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 18473F240C1C2250D9DD85EBC79ADE584C5510C4
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a653430353a3a2f33322d3332203d3e20323134393430.roa
Signing time: Mon 10 Mar 2025 18:38:07 +0000
ROA not before: Mon 10 Mar 2025 18:33:07 +0000
ROA not after: Mon 09 Mar 2026 18:38:07 +0000
asID: 214940
IP address blocks: 2a13:e405::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 03:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:47:3f:24:0c:1c:22:50:d9:dd:85:eb:c7:9a:de:58:4c:55:10:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Mar 10 18:33:07 2025 GMT
Not After : Mar 9 18:38:07 2026 GMT
Subject: CN=2DC51424D59F37FB23ED1056B3B98B705872DD0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:49:a5:58:6f:46:b7:48:7b:4a:4f:b6:59:62:
92:da:1a:b3:9a:42:3b:84:aa:ac:04:f1:14:b0:2f:
fa:ba:62:a2:b1:95:9c:c4:ec:26:35:50:03:f8:2c:
57:51:16:25:9d:60:9c:ce:ce:ae:da:6a:6b:fb:44:
61:a5:49:3d:d3:77:e3:b8:68:6f:50:c2:b4:fb:77:
13:e6:16:46:db:84:ca:8e:f8:66:ee:06:24:46:a2:
36:dd:99:88:96:3b:31:76:12:fa:b3:ab:58:f6:02:
b9:1d:58:ed:62:d1:47:a9:d7:44:a5:49:80:09:17:
b2:18:56:e4:34:6b:a9:42:79:1f:8c:8e:6a:4b:b0:
cc:1d:53:d3:d4:5a:fb:96:0b:cd:be:f1:51:41:89:
e2:08:73:3b:9a:95:65:30:5f:92:60:35:aa:ac:3f:
07:78:34:f0:2f:f9:79:3f:0c:b7:77:0c:f0:3f:4c:
3d:51:af:8a:a4:41:b3:39:89:c2:cf:f1:af:1b:65:
c5:bd:ce:65:30:d7:9f:c2:92:4e:47:94:4d:ed:e1:
a9:91:4e:94:69:79:de:88:2f:77:8b:c1:8e:b8:e6:
d1:f7:db:da:86:18:8e:af:8a:5e:46:d8:85:97:a9:
29:31:45:c8:e8:4e:fd:f7:6e:a2:ac:ee:cd:18:58:
71:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C5:14:24:D5:9F:37:FB:23:ED:10:56:B3:B9:8B:70:58:72:DD:0A
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/326131333a653430353a3a2f33322d3332203d3e20323134393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e405::/32
Signature Algorithm: sha256WithRSAEncryption
a0:b8:dd:b4:79:a2:9b:d5:a0:f6:7d:86:7e:79:d2:e3:bf:f1:
bb:f2:bb:f7:7a:9e:fc:28:9d:e7:dc:f4:bb:dd:b0:ec:ac:48:
2c:c2:d4:dd:b8:fa:39:81:e6:1d:e5:fa:ec:dc:98:94:b0:ff:
63:9a:74:32:54:94:33:61:bc:66:3c:c1:c5:42:24:8c:ab:c6:
66:53:02:c4:cd:18:19:6e:5c:04:1c:22:b0:c1:57:32:56:1e:
f3:7e:e5:8d:6d:ca:50:47:8c:c9:6e:3b:7f:dd:53:b3:87:67:
ca:ec:b9:a4:81:67:2e:6c:8e:be:d8:bf:4d:45:50:59:9a:8d:
49:e5:44:3c:c0:06:06:b1:24:90:c8:d6:11:5e:f5:f5:8e:4b:
16:e2:26:d2:05:31:8a:61:10:6c:a5:6a:a0:56:68:15:cd:b6:
71:21:a1:6f:96:a5:1a:53:71:1f:7b:05:7a:af:a4:f7:23:2c:
86:9a:36:dc:4e:2f:a5:e0:49:c4:77:c7:d7:7b:cc:33:b6:ec:
b1:bf:2e:6e:68:1e:59:ff:63:1c:86:1c:c4:10:01:c2:29:fb:
34:fb:48:98:c9:33:3a:9d:6b:72:12:04:84:e7:67:e1:06:69:
f1:14:d5:e7:52:12:e4:bd:b7:25:6e:73:1e:d7:49:58:22:0c:
14:70:45:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 16:30:14 2025 by rpki-client