Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/33372e3134302e3232332e302f32342d3234203d3e20323036303932.roa
File: 33372e3134302e3232332e302f32342d3234203d3e20323036303932.roa (raw, json)
Hash identifier: GO8jazaT07yHqE0/NadQwAelqQjPVTo+2xINwt+os7M=
Subject key identifier: 43:94:9E:36:0C:35:B8:27:33:6E:D4:69:D5:47:7C:AD:9B:63:A5:BB
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 171900A8D1DFC9981047CC8DBDB9FBEB582DC8A7
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/33372e3134302e3232332e302f32342d3234203d3e20323036303932.roa
Signing time: Mon 10 Mar 2025 18:37:56 +0000
ROA not before: Mon 10 Mar 2025 18:32:56 +0000
ROA not after: Mon 09 Mar 2026 18:37:56 +0000
asID: 206092
IP address blocks: 37.140.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 03:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:19:00:a8:d1:df:c9:98:10:47:cc:8d:bd:b9:fb:eb:58:2d:c8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Mar 10 18:32:56 2025 GMT
Not After : Mar 9 18:37:56 2026 GMT
Subject: CN=43949E360C35B827336ED469D5477CAD9B63A5BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:81:71:71:9f:6b:ce:04:93:77:0a:62:61:
83:62:1f:f1:83:cd:ba:58:dd:be:49:89:9b:0d:c7:
72:01:1b:f9:6f:6c:7d:f5:28:a7:c9:f5:b8:29:72:
c2:d9:1a:2f:30:1b:66:67:72:04:a4:c9:d4:8c:e8:
ad:52:c2:c9:30:a8:ae:27:3e:ef:c8:c3:81:fc:01:
dc:e3:9f:d2:2e:78:ca:37:16:b9:d6:63:37:86:2b:
ac:b1:f2:68:21:46:69:ff:42:07:5c:61:20:05:db:
c1:cc:32:30:34:7d:21:7e:38:70:72:7e:0f:8a:38:
aa:7d:ce:0d:cc:9b:bd:a0:af:3a:2e:50:e4:5b:51:
ba:88:5b:70:06:80:f7:40:93:75:a6:a4:3b:2f:f3:
3a:c1:31:5b:0a:a2:7c:4c:b1:e6:40:39:18:a7:1b:
ab:f0:67:57:8f:2e:d3:1f:e5:c8:c6:4b:ab:da:37:
9b:96:5d:fb:c1:10:9d:dc:ad:62:cd:e4:e3:6b:be:
03:f5:ff:d0:29:3a:0c:29:04:51:c8:45:b9:9f:6f:
14:b3:da:36:d3:2c:3a:67:de:97:32:db:07:9e:40:
78:fa:2e:e8:93:f3:a5:29:f7:1a:9e:5f:76:29:c0:
4b:df:10:e6:7f:82:ce:73:92:55:4e:6f:87:27:a1:
18:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:94:9E:36:0C:35:B8:27:33:6E:D4:69:D5:47:7C:AD:9B:63:A5:BB
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/33372e3134302e3232332e302f32342d3234203d3e20323036303932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.223.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:e3:40:69:03:24:eb:d3:14:8b:ca:f5:98:ff:b0:67:e7:73:
d2:1d:31:d8:8d:76:92:a9:5d:b8:d3:2c:48:28:1c:1d:66:88:
1b:89:ae:7c:52:a0:8c:4e:ff:de:99:66:04:00:49:ab:01:ab:
2b:aa:44:fc:24:eb:f3:f6:b5:48:4e:28:c5:a1:50:f4:23:c9:
90:46:28:ca:1a:3c:30:3b:fe:d4:c8:7f:dd:a4:c1:c3:90:b4:
2a:65:d4:2a:47:4a:d4:f1:62:c3:40:66:3d:55:d2:54:a5:51:
22:3a:6b:86:8c:15:b5:8c:5f:64:ac:8e:c1:ad:6e:22:68:91:
12:c5:30:6a:d3:0d:7f:26:c0:7e:62:a0:0a:67:d8:7a:1d:3b:
31:21:62:69:86:7e:46:54:54:9b:fe:36:4d:1f:bd:65:c0:0a:
8b:83:ae:88:22:7d:41:c9:10:20:ae:97:df:81:76:46:39:c8:
d3:04:b7:cf:c3:19:fc:1a:bc:38:c9:9e:6d:02:40:fe:43:79:
85:3f:92:d2:3c:86:ae:2f:2c:17:49:df:0e:78:16:12:44:ae:
f2:35:f6:2d:58:70:68:05:28:9f:c6:cb:63:56:60:36:6d:97:
c0:8e:38:f7:0d:df:20:db:49:90:11:5e:2f:7d:bf:4c:76:d7:
62:d8:8e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 16:21:54 2025 by rpki-client