Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32302e302f32342d3234203d3e20313439393438.roa
File: 33312e362e32302e302f32342d3234203d3e20313439393438.roa (raw, json)
Hash identifier: JklfxNn/Yg9Rptan4XIr9IATGBUX+jBDNnzNFv+sz3Y=
Subject key identifier: B0:EA:2E:F7:9E:06:C8:42:7F:53:61:F9:C1:3A:59:80:E8:4B:F0:3C
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 10F4A00B06459D0F22C21BD9BF0D95A22E984E84
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32302e302f32342d3234203d3e20313439393438.roa
Signing time: Thu 30 Jan 2025 05:53:52 +0000
ROA not before: Thu 30 Jan 2025 05:48:52 +0000
ROA not after: Thu 29 Jan 2026 05:53:52 +0000
asID: 149948
IP address blocks: 31.6.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 10:42:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:f4:a0:0b:06:45:9d:0f:22:c2:1b:d9:bf:0d:95:a2:2e:98:4e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jan 30 05:48:52 2025 GMT
Not After : Jan 29 05:53:52 2026 GMT
Subject: CN=B0EA2EF79E06C8427F5361F9C13A5980E84BF03C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:6a:64:01:1e:03:1f:00:72:92:82:b7:42:
44:6b:4b:5f:a2:e9:26:08:a9:cf:9b:4a:8e:5b:e8:
95:70:91:9e:e5:92:0d:75:7f:44:96:37:85:d1:1d:
cb:d2:c2:92:25:81:d0:5a:df:41:90:ce:0e:69:d8:
1e:c9:1d:1d:28:b9:90:82:2e:ae:0b:a9:4a:b5:2f:
cc:e3:6e:0e:14:b7:d7:b5:73:2e:aa:50:6e:71:a0:
0f:ff:be:48:88:f3:69:d3:24:75:1f:ac:5f:ea:bf:
18:75:b6:72:f7:14:8b:6a:82:fa:22:a4:03:13:a1:
f6:a7:e8:c5:ac:d0:dc:c1:45:a2:36:06:24:24:09:
2b:78:91:14:1e:a1:d4:e5:a1:71:53:73:85:e3:f7:
5e:a2:5c:63:d3:a8:7c:f0:08:54:29:2a:8d:24:7a:
7d:9d:86:78:71:3c:3a:33:15:f3:15:4c:bc:71:ce:
68:e0:f0:dc:03:a4:f4:cf:5b:e2:3d:19:c7:ed:1a:
81:85:d5:06:3c:9b:d4:84:a4:a7:85:0e:31:41:05:
a0:33:95:bb:33:ca:5b:2f:cf:b5:29:c3:48:f7:34:
76:99:23:14:3f:db:9c:b1:69:8e:bf:cf:da:bf:e8:
b2:24:90:1e:ae:cd:ad:03:fe:e2:48:ce:fb:ad:7e:
63:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EA:2E:F7:9E:06:C8:42:7F:53:61:F9:C1:3A:59:80:E8:4B:F0:3C
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32302e302f32342d3234203d3e20313439393438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.20.0/24
Signature Algorithm: sha256WithRSAEncryption
50:6f:e8:c7:9a:42:de:83:6c:81:34:d0:5e:7e:b7:89:2b:53:
25:1f:a2:51:c1:97:c6:51:de:1b:43:99:45:f6:2f:89:76:d1:
7c:d5:53:a8:a3:c1:32:7e:dd:d3:bd:ee:82:d3:31:a9:b1:6e:
23:bd:b4:66:55:fd:29:83:70:40:44:28:7a:bd:f3:c3:6c:b1:
0f:c7:a5:6f:ab:a1:73:a9:d6:c4:b7:76:c8:40:9f:60:be:97:
85:99:57:0e:a3:08:f2:7b:76:6a:15:33:fb:d1:98:aa:ff:f2:
01:b5:56:14:8e:75:1c:60:b2:91:2d:9c:0a:52:17:50:75:6f:
ef:20:37:9c:44:75:27:ed:be:b6:e6:77:69:4d:ff:9c:b0:cf:
ed:5c:c5:6e:5b:76:92:b1:4d:60:4a:5a:3e:80:54:00:72:66:
cb:16:63:1c:cb:86:16:40:7b:cd:5c:bc:33:29:8d:f7:3e:52:
15:5e:fb:07:06:9c:7b:11:4d:d1:83:c6:cc:f6:36:d2:c9:29:
46:52:03:09:c8:9a:0f:4d:3b:5e:d4:37:ba:e5:be:b7:b7:54:
09:05:63:d2:9e:b9:c9:86:6a:4d:2c:87:08:7e:1e:8d:12:d0:
ec:64:0c:07:99:96:3c:f8:c4:82:dd:8d:6e:32:ff:f6:7b:9f:
91:93:c8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:50:44 2025 by rpki-client