Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326131323a616638303a3a2f33322d3332203d3e203536383833.roa
File: 326131323a616638303a3a2f33322d3332203d3e203536383833.roa (raw, json)
Hash identifier: SqpLdUzG49Jud64fYEC0hiT3rT/sz4nQsAd6iQkoKk8=
Subject key identifier: B5:36:DC:9C:7D:A3:1E:FA:AD:3B:5B:5C:1A:F6:2A:57:85:9A:B6:2F
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 1E3E0BB7FE8439B72E5D7C1ABF52B05BBF5BD720
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326131323a616638303a3a2f33322d3332203d3e203536383833.roa
Signing time: Wed 04 Jun 2025 21:32:17 +0000
ROA not before: Wed 04 Jun 2025 21:27:17 +0000
ROA not after: Wed 03 Jun 2026 21:32:17 +0000
asID: 56883
IP address blocks: 2a12:af80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:3e:0b:b7:fe:84:39:b7:2e:5d:7c:1a:bf:52:b0:5b:bf:5b:d7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Jun 4 21:27:17 2025 GMT
Not After : Jun 3 21:32:17 2026 GMT
Subject: CN=B536DC9C7DA31EFAAD3B5B5C1AF62A57859AB62F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2b:30:d5:40:ff:22:c8:57:74:bb:42:82:6e:
aa:3a:de:79:24:19:b7:9e:d6:2d:04:6e:2e:d7:0e:
62:1c:5c:90:c5:09:45:ad:5e:45:f2:81:4f:ed:30:
1a:b7:f0:99:11:53:0e:13:8e:37:95:4f:69:2f:dd:
39:99:e6:92:a6:16:ae:d7:a1:04:80:5f:17:cf:0e:
78:17:72:cf:ab:3b:91:17:2b:4b:0f:d0:77:a7:dc:
76:ac:e1:05:88:e4:dc:12:14:b0:df:88:4f:ae:7f:
7f:9e:2b:e4:4b:7b:3c:3b:67:4f:8f:fb:b2:8c:bf:
70:e0:77:68:85:73:85:45:70:12:b2:0f:be:11:68:
0e:94:fc:ea:da:bc:b0:b8:de:58:e6:77:65:1e:1d:
9b:56:e7:4d:62:cc:02:0f:5b:13:f0:9f:f3:47:9f:
3e:4c:15:57:6a:77:e1:b6:be:97:c4:24:18:e3:25:
3c:38:d4:e6:74:51:4a:00:b5:fb:16:d6:17:af:33:
64:f7:45:b1:fa:20:da:c4:71:c5:29:24:b9:7e:65:
66:20:1a:6b:78:50:30:73:20:69:e5:0f:28:45:87:
0f:a1:8f:97:ac:e1:0f:a6:51:b2:64:13:c0:16:32:
7e:fd:62:71:53:3f:93:21:bb:18:de:89:d4:66:02:
48:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:36:DC:9C:7D:A3:1E:FA:AD:3B:5B:5C:1A:F6:2A:57:85:9A:B6:2F
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/326131323a616638303a3a2f33322d3332203d3e203536383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:af80::/32
Signature Algorithm: sha256WithRSAEncryption
86:22:54:8f:be:71:fc:8e:89:e1:fa:7f:53:26:ae:4b:66:a5:
f5:d6:39:dc:ee:10:cb:76:9b:90:ee:34:67:14:19:70:ac:cb:
b6:29:fb:59:99:01:bb:3e:b2:c3:c1:f8:bf:0f:a0:a9:ce:11:
e1:82:4f:c3:84:e9:6e:db:45:2d:5e:89:7b:80:13:7e:47:44:
72:dc:26:05:1d:4b:8d:9b:42:05:93:20:bf:11:17:50:15:7a:
95:b3:96:b0:cc:8b:5d:2e:f4:d2:19:f8:db:4b:ed:0c:c4:6f:
9e:35:83:8c:b6:59:27:6d:7e:78:5d:22:06:4f:11:61:2f:a7:
eb:a6:d0:43:04:bc:d8:86:1c:54:31:64:16:36:67:9e:bc:d5:
dd:39:45:93:24:f7:02:62:84:fe:48:a1:72:a2:55:3d:7b:04:
2b:6c:e3:68:f1:ad:06:73:5d:f3:3f:b9:ef:bc:29:46:85:f8:
41:28:8e:d6:b5:6e:5e:d7:12:fd:89:dd:1c:8f:53:57:18:fe:
1c:76:f6:ee:00:a9:57:18:a4:4c:68:4e:8a:9b:ac:37:f1:2e:
7a:d4:6d:5d:fe:40:3e:ee:91:78:f3:96:5d:0c:ec:90:34:d4:
64:09:ec:7d:c7:31:10:98:fb:5d:cb:72:3a:4d:63:54:f1:bd:
ee:23:4f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:24:09 2025 by rpki-client