Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336531303a3a2f34342d3434203d3e203630383934.roa
File: 326131313a323963303a336531303a3a2f34342d3434203d3e203630383934.roa (raw, json)
Hash identifier: 58i0LZLq4ukpM3VuWsQjMapI5y8IVPOu67r8bkD+1Ko=
Subject key identifier: E5:50:E6:A9:68:F8:4B:5A:09:E1:BE:58:E8:3E:1D:D9:52:C5:5E:73
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 3F4BF4E9FC3CDEEBC28184EA1B5FAEC591D194AA
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336531303a3a2f34342d3434203d3e203630383934.roa
Signing time: Sat 18 Jan 2025 19:01:39 +0000
ROA not before: Sat 18 Jan 2025 18:56:39 +0000
ROA not after: Sat 17 Jan 2026 19:01:39 +0000
asID: 60894
IP address blocks: 2a11:29c0:3e10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:4b:f4:e9:fc:3c:de:eb:c2:81:84:ea:1b:5f:ae:c5:91:d1:94:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jan 18 18:56:39 2025 GMT
Not After : Jan 17 19:01:39 2026 GMT
Subject: CN=E550E6A968F84B5A09E1BE58E83E1DD952C55E73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:75:10:95:c9:88:a6:b2:be:8e:9b:f4:d2:74:
69:09:c5:25:92:a3:82:7f:90:61:35:e0:a9:2b:1e:
42:b6:2b:95:84:a3:54:2e:12:d6:e8:fe:f1:02:1b:
31:ff:77:39:71:a8:71:f0:ae:98:29:42:33:77:13:
74:ca:3d:e3:25:e2:ec:58:b7:c2:92:f6:2b:d0:86:
fb:e1:46:9f:01:8b:92:70:49:12:06:4a:ec:9a:a9:
d7:f1:23:8f:3c:bb:26:87:65:98:f8:84:11:a5:93:
60:f7:09:47:18:00:8f:a2:aa:d4:f0:5a:b0:b5:de:
f8:89:75:94:4d:c6:c4:28:c3:a0:9b:23:bf:e1:c7:
2d:07:e5:a0:50:a4:eb:d9:2a:b5:63:9b:18:4e:70:
da:ee:68:63:a0:4a:6b:fe:98:72:ee:43:c4:56:3f:
d6:7a:48:4a:f2:b9:17:7f:f4:31:eb:60:1f:ed:ff:
71:8f:50:f7:89:52:99:c6:5d:2a:62:b5:fd:b1:0b:
9f:5d:e0:ca:bd:02:0a:12:d8:14:a1:dc:62:58:c3:
e6:5b:93:45:a8:fb:9f:08:91:cf:fa:e4:50:3e:4f:
10:01:7d:b8:76:c8:82:a3:80:48:08:65:e2:7e:ff:
fa:e9:b2:2d:a0:66:57:8f:1d:d6:1b:95:7c:cd:e2:
8b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:50:E6:A9:68:F8:4B:5A:09:E1:BE:58:E8:3E:1D:D9:52:C5:5E:73
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336531303a3a2f34342d3434203d3e203630383934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3e10::/44
Signature Algorithm: sha256WithRSAEncryption
29:50:fe:90:c2:4e:9f:c3:1b:12:f2:47:1c:97:63:61:3f:75:
c0:1f:b3:6e:19:fb:8e:e4:d6:4c:98:fd:9b:f4:60:09:d6:66:
9c:f5:56:ad:b2:ec:6e:18:4f:63:9b:78:ea:49:90:ec:09:2c:
43:4d:6c:ae:f0:4c:6e:70:28:40:78:f9:97:c1:ab:5a:d0:52:
48:db:88:a8:3f:14:82:8d:ff:bd:31:e0:52:60:bf:ed:c4:aa:
69:ea:df:c7:ac:4b:d7:78:4d:f3:5f:53:34:eb:fe:e6:b0:9c:
09:d5:68:41:66:05:e6:26:1f:02:00:6e:45:b2:d9:ea:b5:95:
f3:dd:cb:8e:8f:f9:ef:41:41:02:cf:a6:f4:2a:43:0a:43:b7:
5b:72:bf:ab:e2:8f:ad:c9:45:e0:7c:83:1c:17:ca:46:91:9b:
f4:c7:6d:0c:cc:3f:81:51:07:ca:3e:d7:5d:07:b4:32:89:f8:
44:ba:2a:84:05:76:f0:8e:05:08:c1:b4:cd:0c:7f:c3:6c:69:
f1:f1:60:55:50:d4:59:50:5a:50:b9:8d:40:69:7d:46:92:52:
b3:8d:7c:ac:bf:c2:de:72:3a:1d:a4:f4:ae:6d:a2:28:d3:d5:
09:08:e1:a7:5f:ec:c5:7b:cb:4c:45:a5:16:7e:8f:e1:a6:9d:
df:d5:a3:e4
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUP0v06fw83uvCgYTqG1+uxZHRlKowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTk2ZDg1OTk2ZTkzNTRkMTAwNWU0NGM3ODFkMzhhZGNm
MTA4Mjg3MzAeFw0yNTAxMTgxODU2MzlaFw0yNjAxMTcxOTAxMzlaMDMxMTAvBgNV
BAMTKEU1NTBFNkE5NjhGODRCNUEwOUUxQkU1OEU4M0UxREQ5NTJDNTVFNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLdRCVyYimsr6Om/TSdGkJxSWS
o4J/kGE14KkrHkK2K5WEo1QuEtbo/vECGzH/dzlxqHHwrpgpQjN3E3TKPeMl4uxY
t8KS9ivQhvvhRp8Bi5JwSRIGSuyaqdfxI488uyaHZZj4hBGlk2D3CUcYAI+iqtTw
WrC13viJdZRNxsQow6CbI7/hxy0H5aBQpOvZKrVjmxhOcNruaGOgSmv+mHLuQ8RW
P9Z6SEryuRd/9DHrYB/t/3GPUPeJUpnGXSpitf2xC59d4Mq9AgoS2BSh3GJYw+Zb
k0Wo+58Ikc/65FA+TxABfbh2yIKjgEgIZeJ+//rpsi2gZlePHdYblXzN4ovxAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQU5VDmqWj4S1oJ4b5Y6D4d2VLFXnMwHwYDVR0j
BBgwFoAU6W2FmW6TVNEAXkTHgdOK3PEIKHMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm
YmY1LzAvRTk2RDg1OTk2RTkzNTREMTAwNUU0NEM3ODFEMzhBRENGMTA4Mjg3My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZXMkZtVzZUVk5FQVhrVEhnZE9LM1BF
SUtITS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExMTViYzYt
MTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvMzI2MTMxMzEzYTMyMzk2MzMw
M2EzMzY1MzEzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDM2MzAzODM5MzQucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwQqESnAPhAwDQYJKoZIhvcNAQELBQADggEBAClQ/pDCTp/DGxLyRxyX
Y2E/dcAfs24Z+47k1kyY/Zv0YAnWZpz1Vq2y7G4YT2ObeOpJkOwJLENNbK7wTG5w
KEB4+ZfBq1rQUkjbiKg/FIKN/70x4FJgv+3Eqmnq38esS9d4TfNfUzTr/uawnAnV
aEFmBeYmHwIAbkWy2eq1lfPdy46P+e9BQQLPpvQqQwpDt1tyv6vij63JReB8gxwX
ykaRm/THbQzMP4FRB8o+110HtDKJ+ES6KoQFdvCOBQjBtM0Mf8NsafHxYFVQ1FlQ
WlC5jUBpfUaSUrONfKy/wt5yOh2k9K5toijT1QkI4adf7MV7y0xFpRZ+j+Gmnd/V
o+Q=
-----END CERTIFICATE-----
Generated at Wed Apr 9 05:22:28 2025 by rpki-client