Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/38342e3234362e3131312e302f32342d3234203d3e2033333230.roa
File: 38342e3234362e3131312e302f32342d3234203d3e2033333230.roa (raw, json)
Hash identifier: C4YEp8j4LdYsTYvi6G+irz5U3tTH6rayAYxhSvLGLbo=
Subject key identifier: 27:67:BC:64:9E:8C:84:44:20:CB:6E:19:4F:BA:90:78:A3:AB:95:4D
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 44347C91C75C8195112028460EE05445A7AC476C
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/38342e3234362e3131312e302f32342d3234203d3e2033333230.roa
Signing time: Mon 10 Mar 2025 18:37:32 +0000
ROA not before: Mon 10 Mar 2025 18:32:32 +0000
ROA not after: Mon 09 Mar 2026 18:37:32 +0000
asID: 3320
IP address blocks: 84.246.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:34:7c:91:c7:5c:81:95:11:20:28:46:0e:e0:54:45:a7:ac:47:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Mar 10 18:32:32 2025 GMT
Not After : Mar 9 18:37:32 2026 GMT
Subject: CN=2767BC649E8C844420CB6E194FBA9078A3AB954D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cd:20:c3:35:1a:d5:b9:2f:0f:c6:3c:73:fa:
85:e3:c2:b9:c0:22:fd:fa:f7:64:2c:b4:ea:55:5c:
ff:d3:64:56:f4:77:a2:93:3b:e3:7a:20:fb:b5:be:
be:27:d9:ad:7d:e0:f9:d2:c4:6e:60:f4:94:c6:c3:
8b:49:0b:34:1d:ee:a2:c9:19:98:ae:b4:6f:67:a4:
a8:8b:1e:7f:4b:7e:f8:7a:ed:71:55:ed:6e:91:97:
69:19:4a:d8:7a:43:a0:60:8a:59:f8:06:ba:29:cc:
d1:fd:f0:b1:91:0b:f0:2c:b2:55:0c:1c:6c:55:6d:
de:d6:92:4b:fb:84:f6:77:71:4c:fc:4a:51:dd:96:
a7:19:b0:5d:de:74:86:90:f9:3f:fe:13:14:1d:fd:
02:8f:49:2e:1a:7b:bf:0a:3a:29:e3:c4:d5:c0:5b:
74:fa:4f:0d:e9:e4:a5:ad:6b:6d:13:bc:87:9c:17:
ba:39:0a:2c:fb:aa:58:ce:41:5e:c0:48:f6:76:87:
0b:40:c1:93:56:b3:b7:98:90:a5:cf:f9:87:1d:76:
4b:75:72:08:6a:85:be:6a:7e:0c:ab:bf:dd:a1:88:
a5:54:1f:fe:30:2f:9e:d4:e6:6c:c0:3f:80:dd:21:
a5:12:06:3c:df:cd:49:cb:4b:e2:ff:e2:3e:79:7f:
78:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:67:BC:64:9E:8C:84:44:20:CB:6E:19:4F:BA:90:78:A3:AB:95:4D
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/38342e3234362e3131312e302f32342d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.111.0/24
Signature Algorithm: sha256WithRSAEncryption
72:0a:6b:b2:fc:8f:1f:be:2f:02:a1:c0:54:24:f7:b6:c0:b7:
82:f5:02:cb:20:8a:2f:59:18:e5:46:c3:14:87:f3:b8:7c:37:
da:ee:63:a0:2b:75:ea:61:f6:8d:86:e0:4b:72:3b:6d:8d:69:
80:ae:1a:4f:a5:a6:51:c6:ba:66:c9:7f:9a:ee:f8:a8:8d:2b:
10:e2:1f:8c:b3:44:f4:8c:21:78:fb:07:71:b0:d1:76:0c:86:
3b:95:fb:be:1a:51:5c:8a:5c:5a:49:18:63:3a:80:03:5d:94:
d5:e1:3c:4b:1a:ec:2e:1c:38:ca:c7:90:77:d1:d7:8e:8b:7e:
3b:e8:db:d8:12:f5:d9:72:5a:0d:e3:d9:bc:0d:58:2b:ca:d7:
5e:94:ce:5e:41:d0:ac:50:4d:c7:a4:34:7c:64:bc:9e:b5:2c:
48:03:20:5f:45:01:f2:9f:6a:57:a5:af:b9:89:06:ad:65:f8:
f3:ac:25:97:9e:91:97:a8:39:3c:0e:56:e5:c7:87:ac:2f:44:
47:7c:00:60:6d:50:e8:95:fb:fb:ff:5e:c7:14:97:ab:73:b1:
93:80:2a:cc:a3:5b:05:f6:ed:e0:b7:43:cd:df:3d:8b:00:99:
6c:60:fc:0c:3d:f3:50:27:b4:7b:ee:8f:69:be:f9:1c:d3:90:
ee:23:02:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:37:14 2025 by rpki-client