Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235332e302f32342d3234203d3e20323135323837.roa
File: 3139342e33342e3235332e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: UVjcJOPoynn3xsUdSCmcs1KkowTSw1I56tsbUhGYHTg=
Subject key identifier: 2E:B6:F7:7A:04:DF:37:4B:48:E5:2D:06:F0:54:E8:C6:8E:BB:46:A3
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 1526D34929B23B07947245EA25625E05588CDC07
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235332e302f32342d3234203d3e20323135323837.roa
Signing time: Sat 11 Jan 2025 15:25:52 +0000
ROA not before: Sat 11 Jan 2025 15:20:52 +0000
ROA not after: Sat 10 Jan 2026 15:25:52 +0000
asID: 215287
IP address blocks: 194.34.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:26:d3:49:29:b2:3b:07:94:72:45:ea:25:62:5e:05:58:8c:dc:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Jan 11 15:20:52 2025 GMT
Not After : Jan 10 15:25:52 2026 GMT
Subject: CN=2EB6F77A04DF374B48E52D06F054E8C68EBB46A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:95:5f:f1:dd:69:ff:46:95:14:d4:03:dc:
61:e2:af:e9:31:8a:75:36:ff:c3:e3:5f:05:a9:d0:
cd:c0:3c:f5:52:85:a9:da:9f:2f:d8:93:8b:c2:a5:
a9:10:9c:0e:f9:10:1e:9e:72:9d:6c:a2:7e:a5:62:
5e:3c:44:7c:a3:3c:b4:a2:90:44:f0:f6:be:92:0b:
99:fb:da:b9:79:b9:ea:fb:58:7d:50:94:a7:87:df:
4e:d7:01:39:d8:2e:92:9b:f3:1f:d8:6e:35:0f:90:
86:61:3c:1f:92:bb:38:ba:a3:af:82:59:57:c5:97:
99:bc:8a:f2:de:99:9b:a2:ef:31:49:d5:6d:6a:23:
18:0d:e9:38:8d:68:85:a2:ea:83:42:6c:32:ad:f9:
8a:4c:2e:ab:1d:06:74:55:65:a8:68:d5:43:51:4b:
78:75:db:67:0c:4e:f0:c5:f5:3d:73:37:ba:78:56:
bb:56:bd:f6:56:b1:30:f2:82:e4:00:40:bc:90:06:
e5:28:18:9c:d9:43:a7:ed:06:9c:c8:68:b3:30:ed:
64:46:08:5d:5a:52:da:f4:48:40:29:57:96:cc:aa:
80:03:39:db:32:61:7f:46:01:6b:a0:82:4f:26:9b:
67:ad:ba:16:66:e2:a6:55:f9:1b:f0:fc:d1:f4:a1:
1f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B6:F7:7A:04:DF:37:4B:48:E5:2D:06:F0:54:E8:C6:8E:BB:46:A3
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235332e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.253.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:3b:4a:be:6a:6c:5c:31:fe:9c:be:c7:35:9c:59:75:23:43:
63:82:ee:e1:a1:7f:bd:62:89:f3:0b:ed:e8:30:5f:94:f6:14:
e7:24:b1:fc:04:3a:df:d4:84:a0:36:85:55:2f:9e:8e:1f:2d:
bc:e8:25:1a:68:07:c4:0b:90:b9:f3:91:6b:4d:11:c2:da:e3:
df:63:18:eb:f7:74:2b:07:e4:1f:20:f9:aa:06:e9:17:d0:9f:
38:14:e7:e3:77:37:47:e3:d2:10:40:75:f5:7f:52:e6:3c:d6:
dd:8e:58:36:92:0f:6e:d7:f5:2c:c0:c8:74:a5:2f:7c:b7:d6:
1a:38:3b:29:cb:32:e6:eb:c4:5b:f5:92:90:f9:33:86:90:97:
e4:a3:58:36:60:f1:d9:c6:91:24:3d:49:df:1b:cc:82:bb:04:
39:b4:18:42:55:6d:f4:a5:79:92:85:89:70:4b:3d:96:26:ef:
9f:bc:35:90:c5:c5:6b:e2:53:05:88:dd:86:33:03:e2:06:d9:
16:79:dd:37:b2:c0:8b:3e:7c:8b:91:b5:33:46:85:9c:cf:92:
f7:87:8e:bb:b2:89:15:b1:d2:ea:0f:ab:a6:ef:82:ed:87:55:
63:9a:55:1b:37:71:aa:9d:8f:10:15:d5:45:a7:1d:c8:38:c6:
53:c8:70:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:35:45 2025 by rpki-client