Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139342e3136392e3231372e302f32342d3234203d3e203538303631.roa
File: 3139342e3136392e3231372e302f32342d3234203d3e203538303631.roa (raw, json)
Hash identifier: LKVrZPSadXImJfcQLGOBXVrU7k9LEr0i+ZgzfdeAGX0=
Subject key identifier: ED:40:FE:09:DF:41:06:06:58:FF:00:53:A9:9B:F6:B0:23:76:0C:C8
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 6C33A34D66DD659F78A4EFCA4648C053FF06B7A5
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139342e3136392e3231372e302f32342d3234203d3e203538303631.roa
Signing time: Sat 08 Mar 2025 02:18:42 +0000
ROA not before: Sat 08 Mar 2025 02:13:42 +0000
ROA not after: Sat 07 Mar 2026 02:18:42 +0000
asID: 58061
IP address blocks: 194.169.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:33:a3:4d:66:dd:65:9f:78:a4:ef:ca:46:48:c0:53:ff:06:b7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Mar 8 02:13:42 2025 GMT
Not After : Mar 7 02:18:42 2026 GMT
Subject: CN=ED40FE09DF41060658FF0053A99BF6B023760CC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:eb:15:15:38:92:67:c4:4b:f0:04:5b:3f:a8:
d9:46:fb:1c:6b:c3:2c:e4:78:2d:5c:66:80:e7:7b:
a0:e1:d5:38:8d:77:be:a4:52:48:db:31:02:3e:60:
17:23:e3:66:f6:ef:d6:06:3b:a3:84:4f:74:67:40:
87:90:35:7b:2b:8f:37:45:91:0b:e3:bb:97:41:a8:
d1:4d:b4:0a:d6:63:f4:ca:45:36:56:72:c3:81:28:
27:32:a5:2a:52:c2:b3:37:6b:4d:89:10:6d:4e:e5:
df:a3:98:60:0a:2e:44:c6:7e:ac:e2:4b:21:34:9f:
19:e9:87:62:94:a0:a0:37:c6:fe:07:5b:81:70:b0:
57:4a:90:09:df:d3:e2:5b:25:f7:c4:d6:6f:8a:f5:
d3:c2:75:10:f3:b3:d7:4e:3f:cf:a4:b4:8d:51:0f:
c0:37:12:88:fd:bd:8b:0e:7c:2d:5b:87:19:40:ec:
42:e6:2c:fd:f1:4c:27:26:9f:c5:cb:43:f3:4a:f6:
74:a6:ea:9a:f1:88:3f:f6:35:df:2e:57:74:32:0e:
0d:8d:77:74:65:9e:87:05:56:ea:4e:84:02:5d:27:
1a:6a:bc:3e:4a:68:3d:c7:01:f2:58:39:14:6c:99:
7b:84:e3:1c:53:f2:ff:96:99:3d:58:39:f3:e7:02:
a8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:40:FE:09:DF:41:06:06:58:FF:00:53:A9:9B:F6:B0:23:76:0C:C8
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139342e3136392e3231372e302f32342d3234203d3e203538303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.217.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:71:9f:06:87:af:25:79:01:9e:02:56:4f:10:93:41:40:bb:
ce:94:db:b1:01:4c:94:20:0e:95:e0:77:b9:26:6a:59:d2:cf:
b5:93:06:a3:8d:7e:87:c9:db:66:60:3e:f8:b1:75:08:d8:bd:
e0:a7:2f:7e:af:84:9f:00:cb:a1:bb:e6:a5:26:ec:ac:e6:a9:
d7:85:36:b6:53:e9:a4:ca:30:59:da:55:01:5b:b7:10:f1:9b:
e2:fb:9d:ae:20:ba:bf:36:46:f6:0d:46:f3:d5:5a:03:c1:7f:
5a:8a:9e:17:6b:f8:3e:15:2a:00:27:7f:5a:e6:d8:26:74:0b:
9b:02:b0:c2:c0:ac:9a:ee:e5:ca:3b:22:9d:b3:89:a3:ce:dc:
55:4f:4e:d0:45:82:b0:73:ef:04:5e:d7:4c:a3:f1:21:f6:3a:
f5:e6:7a:3f:da:ba:5f:c1:37:25:ae:a4:6a:07:f2:5c:29:bc:
84:7c:46:68:68:cd:b4:89:56:6e:0d:93:60:d1:7a:5d:02:c8:
31:27:7c:c4:14:d1:34:b7:35:e5:c4:4c:2b:19:22:41:d3:1d:
da:2c:b2:50:f3:5e:f7:40:e0:8d:ca:df:ae:d7:5b:56:d2:0d:
8c:bb:e4:bf:f1:f2:bf:e1:be:99:f1:7a:18:52:c2:e9:f4:5f:
99:1f:ac:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:23:18 2025 by rpki-client