Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/352e3232362e3134342e302f32312d3231203d3e203538323939.roa
File: 352e3232362e3134342e302f32312d3231203d3e203538323939.roa (raw, json)
Hash identifier: fo9Lh+tNo20hmXbMUCX4eNXLCfhJfwiBBGLGaQ6kzuA=
Subject key identifier: FC:99:EE:48:A8:E0:09:E7:84:67:9D:64:74:18:F4:98:DF:2C:B8:84
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 0D50FAAD89854B72CCD53EE787CA68AEFC2D9EF4
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/352e3232362e3134342e302f32312d3231203d3e203538323939.roa
Signing time: Wed 04 Jun 2025 21:32:17 +0000
ROA not before: Wed 04 Jun 2025 21:27:17 +0000
ROA not after: Wed 03 Jun 2026 21:32:17 +0000
asID: 58299
IP address blocks: 5.226.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:50:fa:ad:89:85:4b:72:cc:d5:3e:e7:87:ca:68:ae:fc:2d:9e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Jun 4 21:27:17 2025 GMT
Not After : Jun 3 21:32:17 2026 GMT
Subject: CN=FC99EE48A8E009E784679D647418F498DF2CB884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:62:4f:6f:18:1c:f4:2d:19:3a:99:c1:70:d1:
e4:fb:23:49:54:57:1c:e5:f9:09:8e:5a:63:09:49:
29:30:b4:59:d2:e5:55:a6:77:4a:e8:5d:95:25:d0:
8d:9d:c9:72:18:4c:c4:a8:72:19:57:6f:ed:d5:c3:
e4:f8:28:4c:69:df:82:98:20:dc:a0:95:e7:40:e8:
9a:97:8d:33:ed:5c:2e:5b:3b:4f:a0:ba:7e:c7:75:
8c:d1:c3:8f:c2:9d:81:0a:54:2c:55:12:34:46:4a:
2f:5d:a1:0a:e4:9e:95:18:62:71:9d:6f:c4:a1:dc:
dc:e4:fa:20:04:c6:e6:e6:bd:8b:27:69:bf:53:54:
21:95:f3:09:ed:fd:42:9d:90:58:70:e9:0c:88:c5:
ae:d7:c1:d6:9c:22:eb:40:7e:43:7e:76:ca:54:a1:
c1:91:ca:f8:9d:6d:76:45:8a:21:42:0b:d1:65:10:
3f:67:c4:42:6d:1b:77:8a:4c:3e:ea:d5:e2:5e:1e:
a2:fc:2e:48:2f:76:3b:3a:05:de:7a:15:33:d8:68:
38:2c:b9:70:07:50:92:4f:bb:e3:7d:ce:bf:d8:e1:
f1:22:fb:8d:b4:fa:ca:ad:0c:d8:bb:c8:7b:99:83:
4c:06:e0:d7:05:bb:ca:c5:f9:0e:df:3a:f4:7a:21:
a0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:99:EE:48:A8:E0:09:E7:84:67:9D:64:74:18:F4:98:DF:2C:B8:84
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/352e3232362e3134342e302f32312d3231203d3e203538323939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.144.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:20:ae:11:7c:86:5f:98:2f:5d:5f:21:1f:ea:45:6a:20:dd:
64:01:86:c3:0c:fd:9d:f3:d2:15:ba:aa:a2:57:2e:61:dc:44:
2e:87:43:a8:56:c8:76:88:9c:22:79:19:ce:70:b1:4a:73:77:
b6:75:e4:98:c0:39:db:ec:53:92:75:b0:73:50:3c:48:26:9b:
62:b7:cc:c9:a4:e9:1f:a5:6c:0d:74:c6:08:2a:a7:7e:4f:78:
77:d3:8f:6f:d5:a1:14:c7:81:e3:27:16:cf:1c:a8:ca:0a:72:
48:9c:2e:34:d3:b9:44:b7:47:42:25:dc:e8:99:03:3f:7b:8a:
ae:df:01:ec:0a:81:b4:e5:fa:01:44:6c:35:d5:fb:cb:d5:35:
e1:5e:34:e9:88:2a:90:2f:6a:dc:85:fd:80:de:f7:17:89:b8:
e6:82:54:2a:76:3a:9c:a7:e1:f3:c8:87:a3:1e:3f:b0:1f:23:
73:30:b4:d8:81:49:90:2f:0a:85:b4:6e:7d:c9:37:37:5d:13:
3b:2e:d4:4e:c3:de:90:53:8e:16:6f:d9:f4:8b:16:d0:e9:1d:
33:61:43:78:a4:43:11:5d:ed:73:a5:be:5e:b4:c3:64:c0:dc:
07:29:06:83:f3:60:70:2e:72:7c:60:ba:60:56:0b:fe:a9:b0:
91:23:6d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:22:42 2025 by rpki-client