Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35312e302f32342d3234203d3e20323037363534.roa
File: 33312e362e35312e302f32342d3234203d3e20323037363534.roa (raw, json)
Hash identifier: dHvOhOgUtkD/olu0qRu/miYtJtgfz84k4fgPTj2qBiY=
Subject key identifier: E0:BD:D1:40:14:02:7F:81:41:0A:5C:68:02:2F:34:B0:2F:FD:31:44
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 0F55AA2187030B6C0406A9120F2788B8277966B1
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35312e302f32342d3234203d3e20323037363534.roa
Signing time: Wed 04 Jun 2025 12:34:34 +0000
ROA not before: Wed 04 Jun 2025 12:29:34 +0000
ROA not after: Wed 03 Jun 2026 12:34:34 +0000
asID: 207654
IP address blocks: 31.6.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:55:aa:21:87:03:0b:6c:04:06:a9:12:0f:27:88:b8:27:79:66:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jun 4 12:29:34 2025 GMT
Not After : Jun 3 12:34:34 2026 GMT
Subject: CN=E0BDD14014027F81410A5C68022F34B02FFD3144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:05:da:8e:ce:cc:35:83:b2:e8:b7:4e:2e:4b:
3b:13:50:19:6d:8c:a7:84:6a:c0:ce:fc:66:31:bc:
c8:72:7f:29:89:04:44:ce:98:a7:2b:a8:90:85:a1:
ac:2e:a1:96:9c:9b:5f:d0:4b:29:00:49:31:16:a9:
38:23:c9:02:ca:09:8e:69:0f:f5:01:80:61:d4:4e:
a6:c1:1b:d3:6e:4f:62:13:0d:bd:0d:d9:45:ee:14:
41:10:fb:3a:3e:6c:20:d6:67:c0:4d:02:8a:ee:ac:
59:d5:af:fb:b7:ac:4e:24:00:10:94:39:81:b3:08:
66:8a:de:28:02:b8:7f:32:53:31:e2:81:e3:e5:3e:
59:b5:d2:70:db:fc:d4:71:a6:29:77:35:87:c9:c1:
e9:9e:6e:b4:31:25:35:dc:05:eb:47:44:a1:f0:8f:
20:80:b1:bc:07:80:80:82:c4:73:53:10:05:9e:cc:
10:dd:85:3d:2c:15:ce:0c:0a:93:32:b6:19:54:92:
f3:7f:54:22:18:ed:71:bd:cf:6b:33:62:ba:f2:d0:
47:0c:42:7d:0d:d5:e3:fb:40:f2:5f:fa:7e:0f:1b:
39:12:1e:bb:ba:b0:ef:93:a0:4e:89:0f:a7:ab:64:
db:3b:df:ab:79:26:73:83:be:6b:5b:8e:de:5d:14:
72:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BD:D1:40:14:02:7F:81:41:0A:5C:68:02:2F:34:B0:2F:FD:31:44
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35312e302f32342d3234203d3e20323037363534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.51.0/24
Signature Algorithm: sha256WithRSAEncryption
15:e2:ae:20:4f:54:b4:2b:e3:19:f8:01:dd:4c:fa:4f:49:93:
50:11:68:e2:7c:bb:a9:65:7a:e3:f5:ab:6b:61:d1:46:7d:58:
a1:fb:8b:39:51:4a:ad:03:91:e6:72:89:75:a6:ff:bd:bf:f3:
8f:f4:37:eb:ce:dd:d8:51:4e:31:89:af:b9:b6:bf:7d:49:0a:
a2:de:d0:64:4d:3b:cf:87:34:38:0a:8f:c7:19:5b:cb:b4:6c:
2b:48:b8:52:cf:1b:83:b8:73:89:6f:f6:55:99:23:64:38:68:
6a:97:1b:2f:ae:31:5d:eb:5f:33:89:b2:96:28:79:c3:ff:d9:
d1:82:1c:87:fa:05:c9:eb:66:f8:af:50:89:b8:3c:a4:26:ef:
be:07:65:ec:69:d8:9d:7c:e9:ae:97:b1:28:87:bc:52:3b:c8:
73:21:25:be:35:64:a2:58:64:e1:3d:0c:f9:fc:bc:c2:e6:2f:
bb:2f:46:e7:79:6c:17:cf:08:96:20:bf:c4:72:f3:84:43:9c:
f8:9e:c7:ad:24:7c:e2:e8:a0:ad:08:d3:1a:a1:7d:4b:ec:a9:
1a:6b:a8:21:b9:49:cc:c2:db:21:8b:26:00:6f:e3:3e:2e:dc:
b6:c2:eb:7d:ed:05:1c:e3:89:c0:09:be:a1:8b:4d:84:62:9d:
f1:0b:85:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:13:31 2025 by rpki-client