Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34332e302f32342d3234203d3e20383334.roa
File: 3134312e39382e34332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 1KXft41spDOPwUKOst6sCvj1WilzblvZib7lJLNVWtc=
Subject key identifier: 7B:3A:7A:F5:89:26:CE:91:AD:96:8E:0D:80:B6:02:58:99:8F:AC:0E
Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Certificate serial: 525EC0142FF1A00A1E615B1DD744F4E72BC49681
Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34332e302f32342d3234203d3e20383334.roa
Signing time: Tue 27 May 2025 17:13:33 +0000
ROA not before: Tue 27 May 2025 17:08:33 +0000
ROA not after: Tue 26 May 2026 17:13:33 +0000
asID: 834
IP address blocks: 141.98.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 05:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:5e:c0:14:2f:f1:a0:0a:1e:61:5b:1d:d7:44:f4:e7:2b:c4:96:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Validity
Not Before: May 27 17:08:33 2025 GMT
Not After : May 26 17:13:33 2026 GMT
Subject: CN=7B3A7AF58926CE91AD968E0D80B60258998FAC0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:88:f6:9d:18:de:d1:cf:21:eb:ff:df:00:
a6:b6:02:06:f5:11:e6:bb:3b:f1:aa:1b:db:45:c2:
87:f2:13:40:49:cc:a2:08:6b:1d:a4:96:be:f3:2c:
57:51:4f:fc:8a:57:da:d6:ca:7c:56:e8:11:7a:4c:
a3:b5:ad:18:81:ab:d8:9b:43:a4:a4:aa:40:92:0a:
8c:4f:30:42:e9:2d:90:17:95:b8:01:0b:3b:d8:2f:
93:59:70:36:42:45:c3:f7:07:84:e4:bd:d8:b0:64:
f2:fb:f9:f8:cc:c8:ab:41:92:ae:41:ea:c5:15:8b:
f6:1f:e5:44:e0:f4:ad:aa:79:19:55:22:31:96:e4:
2a:6b:42:73:00:6d:c3:5d:0f:30:1c:03:be:4b:8d:
82:2e:6e:23:38:b4:93:a9:94:a0:c9:03:4e:7d:63:
d9:bd:a7:52:ee:ce:e5:5c:70:49:67:68:24:c9:52:
3b:e5:d3:03:e9:63:e2:8c:06:e5:2b:46:cf:cc:6c:
7a:f8:63:e0:38:17:84:e4:de:63:e7:38:89:fb:2c:
1a:e5:cc:e1:ce:da:16:7b:29:5c:ed:22:d9:44:26:
bd:75:1e:f1:df:05:81:0d:98:ab:98:9a:64:7a:fe:
1e:a2:d9:40:4e:b4:ea:81:d5:d6:cb:21:5c:0b:4a:
a2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3A:7A:F5:89:26:CE:91:AD:96:8E:0D:80:B6:02:58:99:8F:AC:0E
X509v3 Authority Key Identifier:
keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.43.0/24
Signature Algorithm: sha256WithRSAEncryption
41:e2:e0:61:75:c1:b9:90:69:e0:c9:dd:83:25:57:d4:f0:35:
ef:07:1c:23:29:f2:d6:83:6c:3c:01:4c:ff:4d:31:e1:c2:75:
63:c4:2c:33:8d:ce:d4:31:f3:21:f5:97:99:1a:aa:76:5f:32:
1b:c3:59:6b:97:2c:73:04:c6:e0:a2:90:90:a5:3a:80:32:c3:
8c:4a:34:ef:96:5a:c3:12:fa:96:34:3c:1f:b9:f8:aa:f4:1e:
6b:e7:22:1a:49:a1:34:f7:89:04:86:c0:89:d1:b5:02:49:4b:
14:77:5d:99:74:07:9f:5f:f1:8f:fe:f4:ed:80:32:1c:1c:86:
ff:db:94:f0:fb:c5:e1:4e:a5:71:3d:e1:18:78:b5:08:43:db:
0d:cc:51:1a:a0:39:54:55:2c:c8:82:09:5d:39:97:51:3e:91:
ce:96:27:b6:0d:94:75:83:52:05:38:01:8d:ea:c9:ff:a1:45:
5e:4c:19:f0:23:c1:8d:b4:b4:67:da:06:cc:ad:0c:94:8f:07:
e4:2c:cb:18:f7:07:12:be:dc:c1:09:83:23:87:69:b9:02:4c:
d4:ec:05:43:e6:67:b7:5f:a3:43:f5:a2:60:ac:fe:ae:f7:7f:
f3:9b:5b:14:77:b0:a1:06:06:d5:a2:7d:fc:c1:fa:40:44:f1:
4e:d0:d1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:21:04 2025 by rpki-client