Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235342e302f32342d3234203d3e20313532363732.roa
File: 3139342e33342e3235342e302f32342d3234203d3e20313532363732.roa (raw, json)
Hash identifier: hBCTJH2VP/g2W82hp9JFwDkEQwn2f5ZxdgSFMedjM7Q=
Subject key identifier: F7:D2:D2:B2:A6:16:18:C1:1C:5D:6F:02:26:C8:7B:B6:10:4B:F0:AB
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 7F69109A58244AD6750FFDAD4F833F125E14C79A
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235342e302f32342d3234203d3e20313532363732.roa
Signing time: Sun 12 Jan 2025 16:08:18 +0000
ROA not before: Sun 12 Jan 2025 16:03:18 +0000
ROA not after: Sun 11 Jan 2026 16:08:18 +0000
asID: 152672
IP address blocks: 194.34.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:69:10:9a:58:24:4a:d6:75:0f:fd:ad:4f:83:3f:12:5e:14:c7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Jan 12 16:03:18 2025 GMT
Not After : Jan 11 16:08:18 2026 GMT
Subject: CN=F7D2D2B2A61618C11C5D6F0226C87BB6104BF0AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d9:95:4f:d0:c1:45:72:1a:80:2c:86:e1:ba:
ce:4a:46:61:c3:ab:3a:5c:91:e9:da:3a:66:68:c6:
00:ef:e4:8b:5e:ef:9e:81:25:54:19:d1:17:66:4e:
8d:3e:1b:2c:09:b4:75:73:97:00:fe:5b:fc:e7:90:
f3:cc:48:8a:28:39:76:ed:5d:65:b6:57:d1:68:41:
aa:36:f4:32:a0:9b:f3:a9:a6:57:fe:9d:5d:47:90:
27:f2:f0:53:70:31:40:03:84:59:5c:d5:67:35:49:
27:cc:13:40:e5:40:13:bd:b4:10:68:42:0b:af:2b:
8a:bd:d1:a2:0f:ef:32:41:67:6b:26:e3:3b:ed:98:
92:44:b1:a8:09:58:3a:2c:e8:3f:e2:dc:3d:ea:1c:
54:76:6b:46:3a:da:79:b5:71:19:ba:30:e1:b2:22:
47:fe:4a:57:bd:7f:7d:9a:40:c8:47:a6:4b:11:03:
c4:6e:da:87:b1:59:28:f2:78:fd:e1:d6:16:bb:8f:
e5:3e:f1:f0:b1:2b:7d:53:e3:e8:bf:a8:41:72:5f:
b2:0a:b5:37:58:22:07:c8:63:5b:41:1a:83:9b:af:
64:76:f7:49:89:d9:a6:91:c7:6f:d6:c3:e2:0f:7e:
39:28:4a:d2:ec:cd:ad:b1:bb:9d:a8:87:33:d6:9e:
da:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D2:D2:B2:A6:16:18:C1:1C:5D:6F:02:26:C8:7B:B6:10:4B:F0:AB
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235342e302f32342d3234203d3e20313532363732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.254.0/24
Signature Algorithm: sha256WithRSAEncryption
34:f8:32:60:12:30:5b:d6:45:89:3d:31:08:5b:c8:b5:82:86:
4d:4f:07:a9:8e:fb:12:b5:70:9f:73:ee:7b:3a:f1:f0:b1:e8:
43:49:dd:03:01:2f:e5:a4:25:e7:a8:94:c1:d7:b2:ab:88:56:
6c:b0:9e:9b:02:1d:2e:42:13:b8:6b:c7:90:1d:d7:41:23:58:
ca:0c:79:a9:3a:70:20:0e:0e:52:86:a9:f3:b9:e1:5f:d1:df:
9d:94:44:a1:f3:15:24:20:83:10:54:2d:fd:21:89:73:69:2f:
de:99:63:ef:0d:88:fc:f7:0c:b3:50:48:6b:2e:85:d6:14:2a:
48:3b:b8:30:66:08:75:60:66:01:33:4c:51:f6:94:8f:ca:02:
fe:0b:6f:7e:23:c2:27:ad:c1:a3:f0:35:a4:8b:a3:1c:3b:b3:
65:e0:b4:1c:89:ea:dd:87:fa:7a:a4:cf:96:49:e1:89:bf:6a:
49:34:a8:40:04:c5:23:21:3e:b7:2c:8c:e3:7f:80:8a:a9:1a:
38:bf:c2:54:4a:5e:40:29:95:d5:4d:1e:26:8b:bc:fc:d7:f6:
46:c0:0f:a0:d6:d7:6e:8e:98:c0:9f:d9:3c:cb:49:45:71:ce:
02:7a:35:9b:81:be:fd:b9:9b:ae:01:67:e5:c7:56:a4:f3:52:
a7:3a:0f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:33:24 2025 by rpki-client