Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139312e302f32342d3234203d3e203230343733.roa
File: 3137382e3230382e3139312e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: SIu07ej9nbh8IFc8Z4/3eEg2lS1KGgApO3nq11RyJXY=
Subject key identifier: 5F:88:D6:9C:54:3B:07:41:E1:FB:73:BB:A7:6E:99:33:CE:99:43:6A
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 62FA0604FB46299656D5B9710F516CB594E32F3F
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139312e302f32342d3234203d3e203230343733.roa
Signing time: Sat 01 Feb 2025 11:26:59 +0000
ROA not before: Sat 01 Feb 2025 11:21:59 +0000
ROA not after: Sat 31 Jan 2026 11:26:59 +0000
asID: 20473
IP address blocks: 178.208.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:fa:06:04:fb:46:29:96:56:d5:b9:71:0f:51:6c:b5:94:e3:2f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Feb 1 11:21:59 2025 GMT
Not After : Jan 31 11:26:59 2026 GMT
Subject: CN=5F88D69C543B0741E1FB73BBA76E9933CE99436A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e0:29:c4:e3:96:48:f6:7a:33:7c:31:50:49:
e9:e2:0e:03:8d:85:4b:bd:12:f9:e8:5e:07:59:fb:
90:92:3d:c5:1e:82:4d:7f:b5:b3:16:28:00:d9:20:
9c:52:90:ad:a4:e1:37:ac:b6:41:9b:32:e2:21:e8:
e4:2e:9a:f4:76:21:da:4c:fc:62:60:da:15:7a:24:
04:f1:14:db:de:ad:d1:f7:95:d7:68:99:c2:03:91:
8e:8b:26:98:34:83:54:fd:15:0b:17:f1:7a:de:26:
81:fe:48:7f:58:ee:dd:b9:f1:f6:98:bb:5c:6f:38:
f8:c7:80:15:d7:bf:a5:c2:62:bd:43:b0:33:42:eb:
31:98:dd:64:c8:87:df:0c:c4:d9:53:90:a9:c2:d1:
77:6f:76:21:4f:80:c9:a2:90:15:0d:0b:ba:5b:c3:
25:38:a2:19:c2:47:5f:34:fe:30:2c:21:7f:f8:30:
f7:db:b9:91:8b:e5:f9:9b:81:29:1f:13:9d:20:a3:
f5:9f:43:22:a0:b5:21:bf:0b:11:11:b3:4f:0d:c9:
c4:9b:01:da:25:02:13:84:7d:96:cf:73:71:f7:b3:
05:87:97:1a:91:54:61:8f:0b:fd:6e:c1:ee:4b:98:
48:51:0d:0d:31:a5:54:c0:d8:2e:1a:3c:f7:8e:da:
15:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:88:D6:9C:54:3B:07:41:E1:FB:73:BB:A7:6E:99:33:CE:99:43:6A
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139312e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.191.0/24
Signature Algorithm: sha256WithRSAEncryption
73:fd:c0:34:a8:5c:1e:65:48:1e:85:87:e2:5c:6a:42:70:1e:
e9:8a:4e:b1:ec:81:82:14:06:d8:1b:e2:9f:5e:a2:0c:91:70:
81:4c:fa:80:83:9e:12:bc:01:9d:25:b7:06:f3:14:6f:d6:b0:
5a:5b:4a:28:26:a0:ce:ce:1b:fd:31:96:09:14:82:bb:5c:6e:
23:f6:0c:93:e8:9a:7e:d0:44:72:24:73:29:70:91:5f:00:00:
bd:54:20:a2:31:94:16:57:46:c1:17:53:a9:fb:74:07:1a:43:
10:f6:4f:eb:64:4c:9d:58:94:6a:44:b5:26:6e:93:9b:05:c3:
11:c5:87:b0:04:b3:66:4a:71:0c:05:61:57:68:fc:58:30:e2:
2c:7c:f7:28:f4:96:d4:d6:0e:cb:ce:e3:cc:84:e7:33:65:ad:
97:2f:31:68:9b:85:a1:1d:56:5a:a3:c3:f9:cf:3a:e8:76:09:
11:17:2e:b1:bb:bf:f0:25:35:33:5f:4a:df:97:42:20:e7:ad:
40:4e:e1:5d:cd:a2:55:f8:c3:b1:8c:de:c6:3d:c0:a7:0a:1c:
4a:ea:45:e9:86:4d:a6:f1:5b:83:65:e5:56:6b:af:49:36:23:
09:ee:6a:92:43:38:63:5e:48:db:36:6b:a4:87:a5:d1:a4:0d:
2e:33:82:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:11:40 2025 by rpki-client