Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/3139322e3130392e31302e302f32342d3234203d3e203239383032.roa
File: 3139322e3130392e31302e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: zPOJooX1SbIfEdoUfLmfFj+bOWKjqS7oznOqpFqjTp4=
Subject key identifier: 21:89:0C:40:16:06:F4:85:FC:EE:64:6F:F8:DC:2B:8C:EB:F9:13:68
Certificate issuer: /CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Certificate serial: 4EA1B599081E212F2C00AD3A94708EF9AEBBD496
Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/3139322e3130392e31302e302f32342d3234203d3e203239383032.roa
Signing time: Fri 31 Jan 2025 13:50:59 +0000
ROA not before: Fri 31 Jan 2025 13:45:59 +0000
ROA not after: Fri 30 Jan 2026 13:50:59 +0000
asID: 29802
IP address blocks: 192.109.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:a1:b5:99:08:1e:21:2f:2c:00:ad:3a:94:70:8e:f9:ae:bb:d4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Validity
Not Before: Jan 31 13:45:59 2025 GMT
Not After : Jan 30 13:50:59 2026 GMT
Subject: CN=21890C401606F485FCEE646FF8DC2B8CEBF91368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:82:2c:8e:0a:e8:7f:0e:ec:98:b5:00:e1:2d:
5c:4d:e5:ee:fd:ae:c3:2f:e2:f2:a3:91:37:97:e4:
45:7b:4a:d5:41:b7:cd:5a:dc:7b:96:c2:fd:59:95:
09:82:9e:75:82:a5:23:c3:03:de:3e:d5:14:fa:35:
9a:c6:2a:80:0c:56:25:f1:a0:9d:22:7c:58:55:1c:
cc:6d:b4:06:32:11:43:83:0d:24:25:5e:1b:4c:d3:
85:52:2f:f3:10:35:07:48:4f:f6:26:17:b2:25:7b:
c1:08:4b:0d:61:a9:aa:5a:5a:cd:37:8e:12:12:62:
28:d7:99:3e:b9:70:6a:98:0d:76:08:ba:fa:f7:56:
9c:38:2c:36:2b:9d:22:0f:e5:ad:0a:1f:b6:3a:11:
06:64:9d:eb:79:81:47:6f:0a:f3:6d:b7:ae:ea:52:
a7:49:24:a7:85:32:28:c0:8e:6b:78:9f:34:80:17:
d7:fa:50:b7:64:06:54:37:22:85:1a:e2:ac:4b:b8:
85:24:c1:2b:db:9f:30:20:51:0f:c5:6f:71:5e:1f:
3a:76:34:f2:4d:36:74:6a:51:32:85:f8:2a:17:ab:
e9:d4:d9:78:99:d0:52:f9:40:81:09:12:27:4b:cd:
b4:e4:e2:fa:d9:5a:85:7c:b1:14:a7:84:d3:13:67:
c6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:89:0C:40:16:06:F4:85:FC:EE:64:6F:F8:DC:2B:8C:EB:F9:13:68
X509v3 Authority Key Identifier:
keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/3139322e3130392e31302e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:4d:ac:1f:29:58:f3:74:10:93:21:f3:b7:57:70:e4:6f:8a:
40:1a:1d:9f:1d:db:c1:40:48:6c:ff:71:8e:a7:d4:df:72:a4:
4c:93:b1:8f:71:4d:b4:9e:de:5e:06:88:d4:9b:8f:de:6a:50:
76:45:ef:15:23:46:57:14:09:88:74:18:ee:94:6e:a4:a1:36:
8c:63:4b:fc:fe:cd:75:eb:35:ff:c4:b3:0f:0c:e0:2c:95:f5:
a3:8e:7e:17:cb:ef:85:b2:b3:16:36:b9:c6:d5:36:af:2f:2c:
00:e0:cb:50:0f:40:b8:2d:06:74:50:6f:a7:56:96:93:f6:15:
e3:97:21:67:b9:18:da:5f:d7:18:b6:02:b4:bd:55:d2:5b:47:
6a:d7:df:4e:e1:e8:a0:d2:78:5c:52:63:8a:70:8c:a5:22:1b:
ea:68:3f:3c:27:ec:06:e0:78:f4:c9:a0:50:d5:dc:78:54:09:
86:97:19:45:cd:38:3e:ea:c5:b1:38:97:8d:27:63:d3:32:01:
26:5b:b3:6b:0a:de:31:e9:05:20:69:9d:d5:fd:36:e8:84:b7:
9c:c9:9c:d3:bb:28:b4:e3:78:fa:0b:bf:37:e7:e2:c5:f1:91:
f6:db:aa:43:8b:f6:3e:44:8c:00:b8:cb:b2:9c:93:c1:25:76:
95:98:4c:56
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUTqG1mQgeIS8sAK06lHCO+a671JYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWU1MTc5YmIxNzU3MDY4ZDcwMjg1MTBmZWViMTE3N2Fh
N2NjODgxODAeFw0yNTAxMzExMzQ1NTlaFw0yNjAxMzAxMzUwNTlaMDMxMTAvBgNV
BAMTKDIxODkwQzQwMTYwNkY0ODVGQ0VFNjQ2RkY4REMyQjhDRUJGOTEzNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCigiyOCuh/DuyYtQDhLVxN5e79
rsMv4vKjkTeX5EV7StVBt81a3HuWwv1ZlQmCnnWCpSPDA94+1RT6NZrGKoAMViXx
oJ0ifFhVHMxttAYyEUODDSQlXhtM04VSL/MQNQdIT/YmF7Ile8EISw1hqapaWs03
jhISYijXmT65cGqYDXYIuvr3Vpw4LDYrnSIP5a0KH7Y6EQZknet5gUdvCvNtt67q
UqdJJKeFMijAjmt4nzSAF9f6ULdkBlQ3IoUa4qxLuIUkwSvbnzAgUQ/Fb3FeHzp2
NPJNNnRqUTKF+CoXq+nU2XiZ0FL5QIEJEidLzbTk4vrZWoV8sRSnhNMTZ8bbAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUIYkMQBYG9IX87mRv+NwrjOv5E2gwHwYDVR0j
BBgwFoAUXlF5uxdXBo1wKFEP7rEXeqfMiBgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODNlNDc1N2YtZDM3Zi00ZmQ2LWE2OWItZDc0YmRkNmI4
N2RjLzAvNUU1MTc5QkIxNzU3MDY4RDcwMjg1MTBGRUVCMTE3N0FBN0NDODgxOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hsRjV1eGRYQm8xd0tGRVA3ckVYZXFm
TWlCZy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODNlNDc1N2Yt
ZDM3Zi00ZmQ2LWE2OWItZDc0YmRkNmI4N2RjLzAvMzEzOTMyMmUzMTMwMzkyZTMx
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM5MzgzMDMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
wG0KMA0GCSqGSIb3DQEBCwUAA4IBAQCnTawfKVjzdBCTIfO3V3Dkb4pAGh2fHdvB
QEhs/3GOp9TfcqRMk7GPcU20nt5eBojUm4/ealB2Re8VI0ZXFAmIdBjulG6koTaM
Y0v8/s116zX/xLMPDOAslfWjjn4Xy++FsrMWNrnG1TavLywA4MtQD0C4LQZ0UG+n
VpaT9hXjlyFnuRjaX9cYtgK0vVXSW0dq199O4eig0nhcUmOKcIylIhvqaD88J+wG
4Hj0yaBQ1dx4VAmGlxlFzTg+6sWxOJeNJ2PTMgEmW7NrCt4x6QUgaZ3V/TbohLec
yZzTuyi043j6C7835+LF8ZH226pDi/Y+RIwAuMuynJPBJXaVmExW
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:09:54 2025 by rpki-client