Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa
File: 39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier: DmLW24LZ1vnZeM7Yk9oInpGtra92p8B8+f/VK3l3ndo=
Subject key identifier: 07:51:E0:38:2B:74:67:F5:05:8E:C0:97:C7:F8:5E:59:D2:59:72:91
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 2234EBA1D76E5B2161C5497AB14F784E88D9DDFF
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa
Signing time: Mon 10 Mar 2025 18:38:33 +0000
ROA not before: Mon 10 Mar 2025 18:33:33 +0000
ROA not after: Mon 09 Mar 2026 18:38:33 +0000
asID: 398465
IP address blocks: 91.247.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 03:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:34:eb:a1:d7:6e:5b:21:61:c5:49:7a:b1:4f:78:4e:88:d9:dd:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Mar 10 18:33:33 2025 GMT
Not After : Mar 9 18:38:33 2026 GMT
Subject: CN=0751E0382B7467F5058EC097C7F85E59D2597291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:cf:75:f1:e0:d1:aa:72:51:21:8d:69:f4:
b9:6f:13:82:d0:52:be:a9:c9:cf:52:33:5d:58:98:
54:0b:07:2b:83:8b:4e:f3:65:c0:08:e1:f0:fa:73:
db:ed:7f:52:dd:13:2a:5b:92:b6:ae:78:e8:34:c5:
8a:8f:14:77:5c:e5:a4:5f:9b:6b:1f:a3:5a:90:c3:
ac:be:44:6d:07:8e:34:90:f8:d9:ae:a7:9e:68:fd:
5e:94:77:49:5c:1f:d9:15:a3:ac:75:ed:25:75:30:
e2:09:08:ab:50:e3:55:ec:e1:c4:2c:6d:f4:98:15:
85:00:2d:e5:7c:d4:09:10:c5:fe:2f:ce:b3:ee:d1:
18:fc:70:30:a4:4b:f7:89:f8:32:30:c9:91:c9:b9:
90:af:61:c3:d8:17:18:2c:e7:f1:b0:0d:75:0b:31:
0c:07:5c:48:e5:73:d3:30:2e:ae:4e:10:83:cc:3e:
44:2f:0f:65:42:aa:99:d6:b9:62:d5:12:ff:c5:27:
86:c6:92:c9:c8:65:df:3f:af:c5:0e:64:52:35:46:
2e:6c:a3:aa:fc:51:f9:33:47:80:75:5e:92:bf:10:
69:71:9f:48:18:1c:5e:75:67:b4:c7:c2:ea:ec:ae:
82:82:bd:93:37:2b:d8:4c:39:b6:7a:03:86:fe:5e:
3e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:51:E0:38:2B:74:67:F5:05:8E:C0:97:C7:F8:5E:59:D2:59:72:91
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.178.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b1:2c:0f:27:29:37:a9:2a:89:e6:be:2c:74:27:5f:47:fa:
54:cc:1c:45:5c:64:96:75:5e:42:3a:48:be:04:d8:8e:0b:d0:
d7:30:32:b8:33:0b:8a:7b:da:13:08:66:5b:06:07:96:32:80:
72:06:34:d1:e7:a4:61:3b:14:0e:25:bb:bb:d2:df:02:68:4d:
97:c9:df:7d:43:b2:20:d4:8e:ff:73:d3:85:95:73:82:f2:b7:
a5:a1:20:9b:ba:4a:27:36:8e:a5:4b:53:8b:0a:8e:a5:11:6b:
9f:4c:0a:09:9c:90:a7:67:b4:7a:cf:a1:d0:9c:7c:ee:67:1f:
3f:be:fe:88:c4:ad:32:0a:4e:57:3c:66:19:a5:c9:cf:1f:00:
76:17:b5:4d:83:67:fe:73:d3:17:74:29:d1:95:81:20:8b:c6:
7e:b4:74:18:2a:c8:9f:f7:7f:92:84:af:51:01:b2:46:ab:40:
e7:e8:44:27:4a:75:b3:ea:8f:44:30:c8:94:30:8a:ff:41:91:
25:f0:61:d8:2a:4a:83:79:40:95:2f:b5:28:bb:6d:b2:27:05:
e0:20:df:d9:f6:0d:c7:c2:0e:43:bc:6d:4c:b3:8a:bf:9b:ea:
17:cf:f3:31:a5:81:46:a8:0e:26:70:ee:a7:1f:5d:f5:a8:08:
ae:6c:7d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 16:12:36 2025 by rpki-client