Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3232332e302f32342d3234203d3e203631333137.roa
File: 3139342e35302e3232332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: 2PIjpaqptnlKAb7/quHx91GhJeiaShcbbjd6/yWGPAs=
Subject key identifier: 7A:AF:84:71:DA:6C:62:29:62:F3:F7:34:D2:7C:6D:15:34:DE:E7:18
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 69D24C11E1E1A1AF948B32760335FAC676FF76EF
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3232332e302f32342d3234203d3e203631333137.roa
Signing time: Wed 20 Nov 2024 07:43:28 +0000
ROA not before: Wed 20 Nov 2024 07:38:28 +0000
ROA not after: Wed 19 Nov 2025 07:43:28 +0000
asID: 61317
IP address blocks: 194.50.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:d2:4c:11:e1:e1:a1:af:94:8b:32:76:03:35:fa:c6:76:ff:76:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Nov 20 07:38:28 2024 GMT
Not After : Nov 19 07:43:28 2025 GMT
Subject: CN=7AAF8471DA6C622962F3F734D27C6D1534DEE718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:01:00:69:03:08:40:a8:ff:77:57:d1:f9:
28:87:93:8c:bd:a4:00:84:e3:76:38:ab:2f:fb:bd:
07:8c:15:50:ca:6e:9a:ad:c7:78:fc:c7:80:a7:ac:
dd:be:c5:1d:5e:e0:db:a5:e1:c7:34:5e:ff:34:75:
3f:93:dd:e4:18:e1:ca:de:fe:80:f4:32:c9:1e:2e:
4c:ed:fa:e2:99:7a:9c:ba:da:a6:30:b3:96:62:7c:
06:0c:ec:0f:a4:c1:c2:46:1e:6f:20:8e:55:b4:ce:
3f:58:96:91:a3:4a:fe:b4:59:af:0f:9a:dd:3a:09:
c4:1d:57:21:1a:d3:a3:ee:da:f5:88:60:51:16:8f:
32:ff:b0:1d:7f:56:cd:7b:35:65:a4:bb:77:74:55:
63:e1:a9:88:b2:7a:e1:c5:a4:41:25:03:14:27:e3:
e7:04:c5:0c:8d:f1:14:c6:a2:ff:ed:7b:77:49:ed:
eb:41:75:f3:f8:f8:cf:78:82:1f:47:d3:f4:93:a3:
0c:9a:7e:41:9e:7a:84:5b:e9:96:f6:e0:c2:85:6d:
65:bf:15:40:c2:b5:76:3c:4b:e2:7e:bb:0b:1c:18:
18:e4:84:8e:e1:5b:8f:9f:73:0b:32:7d:d2:82:cc:
8d:c7:c8:88:b7:97:07:f6:92:5d:ee:2d:16:81:2c:
7d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AF:84:71:DA:6C:62:29:62:F3:F7:34:D2:7C:6D:15:34:DE:E7:18
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3232332e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:93:20:6a:ec:a9:8d:71:b4:de:c0:1e:61:ed:92:cc:c3:d7:
01:6f:e7:2e:93:b3:07:d4:dd:99:76:68:a5:f7:4a:d1:dd:6f:
98:4e:14:a2:c2:a0:aa:79:62:e5:cc:9e:4c:25:34:10:4a:8e:
03:6b:94:3e:11:0e:12:63:5b:c2:43:04:6b:48:d7:3e:c2:0e:
ce:87:07:9d:57:11:d7:1f:5f:ec:ad:7f:a3:27:f1:51:57:b0:
a7:de:3b:b1:93:2a:8b:23:74:35:cb:38:b7:37:2b:2c:e4:dc:
05:64:7d:e2:90:ba:c1:c5:a6:25:8a:68:18:c3:4d:38:5b:9a:
15:15:ee:a5:35:ca:f5:bd:30:a1:ba:aa:59:e9:5b:97:4a:08:
7d:b5:08:1e:4d:ae:8d:81:08:36:af:16:0b:ac:d4:56:98:4f:
23:a2:f0:78:c7:f1:fd:ba:ef:03:4c:5c:7c:61:95:77:e3:92:
22:c6:94:71:a6:1f:6c:62:fb:62:84:56:de:cf:12:61:3d:8e:
26:68:08:4b:36:6d:a4:74:39:ae:13:fd:95:c8:cd:22:a4:eb:
a9:ae:73:eb:1e:f1:b9:3a:e5:31:a9:e7:76:24:c0:72:21:6d:
6c:6f:cc:da:4f:9c:96:f0:b8:18:65:52:c9:6e:90:64:3f:63:
b5:20:c6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:33:28 2025 by rpki-client