Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32372e302f32342d3234203d3e203632333930.roa
File: 33312e362e32372e302f32342d3234203d3e203632333930.roa (raw, json)
Hash identifier: xNdaQbZ+ALEETVYDqZFzoW0H6dLjP/+jC3lvUjIfEwU=
Subject key identifier: AC:38:61:B1:6C:A4:9C:F3:28:50:0C:C7:09:34:64:BF:7A:2E:06:99
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 6488A927EC82400598DF44CB6EA8932C8DA6E96D
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32372e302f32342d3234203d3e203632333930.roa
Signing time: Sat 11 Jan 2025 19:53:51 +0000
ROA not before: Sat 11 Jan 2025 19:48:51 +0000
ROA not after: Sat 10 Jan 2026 19:53:51 +0000
asID: 62390
IP address blocks: 31.6.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:88:a9:27:ec:82:40:05:98:df:44:cb:6e:a8:93:2c:8d:a6:e9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jan 11 19:48:51 2025 GMT
Not After : Jan 10 19:53:51 2026 GMT
Subject: CN=AC3861B16CA49CF328500CC7093464BF7A2E0699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:83:27:11:0d:b9:e9:b8:00:84:bd:b0:f5:f7:
0f:c9:04:7b:9e:80:70:a2:42:30:db:48:8a:b8:60:
14:81:a0:27:45:dd:45:72:1b:36:d9:f2:84:90:da:
4a:82:28:ac:d3:24:80:fe:1f:d5:47:73:4c:25:78:
5f:f9:38:95:85:16:db:f4:77:1e:4c:0e:d0:55:a9:
33:78:22:a8:e1:1d:9a:4a:63:76:fb:4d:bb:2d:e4:
fc:cd:53:57:19:bc:c5:65:68:94:49:d9:fc:7f:9c:
ea:0b:80:b1:92:40:aa:09:b1:c1:c5:5c:a9:dd:a8:
99:00:0a:22:49:72:17:52:89:c9:cc:da:26:5d:a0:
7c:63:af:45:c8:ff:a6:f1:e7:ed:ba:1f:7f:04:04:
e5:89:d1:b7:2f:a4:03:30:14:3d:4a:2e:3c:8c:5d:
d7:a4:1a:b1:ac:c1:93:e3:96:23:17:02:3b:7e:b6:
90:b7:15:4f:bd:5d:8e:f9:d2:21:1b:50:8f:d9:0f:
1f:b3:fe:a7:55:c4:22:00:1d:50:63:55:49:24:ac:
93:94:42:f2:75:1e:30:92:31:89:2c:22:ea:88:45:
99:5a:8a:87:7e:6b:2c:08:48:bb:29:ca:dc:1d:73:
e6:10:f2:3e:de:8f:99:4e:5b:3a:e7:40:c7:02:e2:
02:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:38:61:B1:6C:A4:9C:F3:28:50:0C:C7:09:34:64:BF:7A:2E:06:99
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32372e302f32342d3234203d3e203632333930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.27.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:48:81:98:bd:fc:e3:ea:0e:d7:33:08:5e:5d:4f:16:5d:2c:
92:07:8b:af:fd:fe:f0:a5:69:d0:f9:ba:82:2d:f7:6c:20:dd:
3d:ef:04:dc:8b:48:aa:de:09:09:89:fe:cb:57:de:5d:cd:62:
4a:c4:c9:b7:d5:be:97:1b:f0:07:02:e4:ee:69:3f:4a:c8:e6:
6a:9c:7c:ec:47:39:04:0e:cc:a6:9d:96:56:0b:1e:94:fe:04:
0a:b8:ec:72:0c:c4:f7:88:bd:19:9b:59:71:69:85:87:60:66:
d1:cb:80:f2:2e:ec:2c:29:8e:6c:bc:24:11:c9:3d:6e:d4:39:
d2:a5:8d:6a:44:29:37:a9:12:ad:6e:53:6b:ba:e9:4b:c2:33:
60:1f:b8:f0:29:ca:01:8f:49:6e:d5:88:af:3f:2f:79:cd:e1:
69:67:9f:84:09:07:32:61:b3:3e:88:10:b4:7b:2a:af:a5:cd:
55:a9:7d:42:a4:63:d9:ae:66:bb:5e:22:c7:f0:15:28:a0:74:
2e:23:5a:1b:f8:d2:a3:1c:1d:b0:24:ff:73:3d:57:a8:49:f4:
03:de:af:df:7e:ba:93:a8:da:20:4f:02:c9:5f:f2:be:51:e7:
09:2b:d3:82:3f:95:41:bc:b7:28:c7:a1:a3:ae:cf:8e:e1:12:
5f:28:85:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:13:23 2025 by rpki-client