Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e372e302f32342d3234203d3e20313938383331.roa
File: 33312e362e372e302f32342d3234203d3e20313938383331.roa (raw, json)
Hash identifier: u+YH7nXgE52gtKp/CJd7WmQZk5JfAmEBdlhzmoRbwgI=
Subject key identifier: 4A:00:22:C3:AC:7F:21:F9:AA:C9:CD:89:26:F4:A5:19:57:31:4E:9A
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 4D0E7D2AB7A9DE73B2D42985EBFBD78EAC5237AA
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e372e302f32342d3234203d3e20313938383331.roa
Signing time: Mon 30 Dec 2024 23:52:05 +0000
ROA not before: Mon 30 Dec 2024 23:47:05 +0000
ROA not after: Mon 29 Dec 2025 23:52:05 +0000
asID: 198831
IP address blocks: 31.6.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:0e:7d:2a:b7:a9:de:73:b2:d4:29:85:eb:fb:d7:8e:ac:52:37:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Dec 30 23:47:05 2024 GMT
Not After : Dec 29 23:52:05 2025 GMT
Subject: CN=4A0022C3AC7F21F9AAC9CD8926F4A51957314E9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:80:1c:c8:1d:7e:9c:af:fa:02:66:f7:16:96:
03:2d:88:e9:d8:3c:1f:d4:21:39:cc:0f:05:fd:74:
83:48:4f:0f:52:a7:89:88:68:15:a8:91:8b:d8:b3:
e1:27:ea:43:bd:82:15:0e:16:49:f3:f9:ed:1e:4a:
5d:e6:04:f6:f4:0f:3b:5a:83:5a:d5:02:2b:33:b5:
99:78:79:ca:94:50:ab:67:c4:bd:fd:20:90:e6:43:
35:77:e2:c1:12:92:4f:c7:9a:be:eb:25:5a:15:b7:
73:b5:ae:f4:29:07:a7:ed:2f:23:35:bf:74:2a:24:
e0:ea:e3:9d:d5:07:f4:9b:7a:33:63:7d:0f:5a:63:
a4:c4:a6:69:4f:d1:bc:23:8b:01:4f:31:73:95:8c:
ee:57:e6:a2:95:87:7b:ab:c3:fd:c0:ef:4f:76:32:
02:b0:e3:49:42:7d:bc:c9:74:bf:dc:48:fb:58:74:
61:e1:aa:a1:ea:2f:22:dc:20:af:ed:8d:c6:59:32:
4e:94:71:b3:2f:10:d7:21:86:a4:1f:27:e6:2a:88:
4a:01:31:30:80:d5:57:c6:79:e5:40:15:6d:ae:80:
dd:4d:01:0d:65:a4:45:5c:fe:b7:9f:47:dd:3e:8e:
aa:b1:56:56:a6:e2:96:33:b5:d4:47:42:20:43:01:
e2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:00:22:C3:AC:7F:21:F9:AA:C9:CD:89:26:F4:A5:19:57:31:4E:9A
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e372e302f32342d3234203d3e20313938383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.7.0/24
Signature Algorithm: sha256WithRSAEncryption
08:9e:a1:6a:15:2c:d4:96:7e:90:87:00:ee:be:bb:5b:bb:80:
ee:9d:f5:73:c0:c7:0c:cd:6c:dd:14:c8:bb:ee:c0:ef:ac:14:
05:f5:4c:09:95:8c:bd:dd:e9:36:45:b1:0c:27:5d:e4:3a:c6:
4a:48:10:7b:d8:ac:e1:a3:ac:19:75:3b:28:4b:0c:81:82:64:
a1:67:29:45:a5:7b:6f:11:eb:6a:79:e2:43:50:ab:a9:bb:a8:
d6:25:6d:01:18:a9:2c:0a:e6:d4:40:9d:2b:18:09:81:eb:44:
84:f1:2f:f4:56:fe:c3:64:32:55:07:59:5d:74:a7:38:d7:04:
13:02:c5:26:a5:e8:6b:65:c7:a6:c2:82:41:74:9a:bb:d3:da:
24:90:47:6b:f0:e3:2b:a6:a5:c6:a9:50:ad:d6:e1:9a:7d:5d:
4b:5b:2b:fd:58:96:3e:aa:8e:ba:33:27:9e:29:30:42:50:ab:
28:2d:4c:78:1e:5e:26:89:5c:d9:93:26:e5:90:75:59:9b:02:
05:ab:bd:02:38:27:c2:c8:9e:1b:85:54:26:7b:63:74:0b:bf:
56:f9:8c:a6:fc:05:de:a2:c7:6f:04:20:fa:1e:0c:14:78:c3:
f1:88:31:6f:5f:38:8a:7a:dc:c7:68:62:b0:cd:c7:7f:1b:b8:
9e:52:28:ec
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUTQ59Krep3nOy1CmF6/vXjqxSN6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDEyMzAyMzQ3MDVaFw0yNTEyMjkyMzUyMDVaMDMxMTAvBgNV
BAMTKDRBMDAyMkMzQUM3RjIxRjlBQUM5Q0Q4OTI2RjRBNTE5NTczMTRFOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIgBzIHX6cr/oCZvcWlgMtiOnY
PB/UITnMDwX9dINITw9Sp4mIaBWokYvYs+En6kO9ghUOFknz+e0eSl3mBPb0Dzta
g1rVAisztZl4ecqUUKtnxL39IJDmQzV34sESkk/Hmr7rJVoVt3O1rvQpB6ftLyM1
v3QqJODq453VB/SbejNjfQ9aY6TEpmlP0bwjiwFPMXOVjO5X5qKVh3urw/3A7092
MgKw40lCfbzJdL/cSPtYdGHhqqHqLyLcIK/tjcZZMk6UcbMvENchhqQfJ+YqiEoB
MTCA1VfGeeVAFW2ugN1NAQ1lpEVc/refR90+jqqxVlam4pYztdRHQiBDAeKbAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUSgAiw6x/Ifmqyc2JJvSlGVcxTpowHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM3MmUzMDJm
MzIzNDJkMzIzNDIwM2QzZTIwMzEzOTM4MzgzMzMxLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwYHMA0G
CSqGSIb3DQEBCwUAA4IBAQAInqFqFSzUln6QhwDuvrtbu4DunfVzwMcMzWzdFMi7
7sDvrBQF9UwJlYy93ek2RbEMJ13kOsZKSBB72Kzho6wZdTsoSwyBgmShZylFpXtv
EetqeeJDUKupu6jWJW0BGKksCubUQJ0rGAmB60SE8S/0Vv7DZDJVB1lddKc41wQT
AsUmpehrZcemwoJBdJq709okkEdr8OMrpqXGqVCt1uGafV1LWyv9WJY+qo66Myee
KTBCUKsoLUx4Hl4miVzZkyblkHVZmwIFq70COCfCyJ4bhVQme2N0C79W+Yym/AXe
osdvBCD6HgwUeMPxiDFvXziKetzHaGKwzcd/G7ieUijs
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:02:11 2025 by rpki-client