Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233342e302f32342d3234203d3e20383334.roa
File: 3139332e32342e3233342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: wDn4WvWEnl0ktIwomfuSX0xxTMgnjS6eS37UfP6tuk8=
Subject key identifier: 4A:5A:9F:F4:86:AC:40:08:27:70:60:EB:C2:3F:8C:8B:58:0D:AD:41
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 43224AE12991B9349AC52E2C17ADAD968B72502A
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233342e302f32342d3234203d3e20383334.roa
Signing time: Wed 05 Mar 2025 00:00:28 +0000
ROA not before: Tue 04 Mar 2025 23:55:28 +0000
ROA not after: Wed 04 Mar 2026 00:00:28 +0000
asID: 834
IP address blocks: 193.24.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:22:4a:e1:29:91:b9:34:9a:c5:2e:2c:17:ad:ad:96:8b:72:50:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Mar 4 23:55:28 2025 GMT
Not After : Mar 4 00:00:28 2026 GMT
Subject: CN=4A5A9FF486AC4008277060EBC23F8C8B580DAD41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a9:f4:d8:95:60:e7:0f:bc:e8:d4:ed:2e:cb:
c4:68:1c:7e:91:53:3d:35:64:3a:96:aa:2b:0b:b3:
c1:dd:e4:f6:8b:36:3d:b2:0b:bc:0f:c2:a1:04:51:
be:cf:36:1b:1a:72:6d:03:dc:c5:5f:41:55:90:b9:
29:82:51:8d:b3:58:de:d7:85:47:92:28:6e:98:d4:
72:d3:58:ff:3e:c8:74:4b:a0:d8:b7:85:9e:d5:ab:
9e:10:2d:25:f5:39:2c:ed:d9:ec:7b:a0:5c:57:69:
06:2d:fa:e2:56:31:e9:be:69:2d:32:82:72:99:ba:
98:e3:90:7b:b5:18:8f:6c:d9:79:1a:76:67:7e:85:
cb:50:ae:4f:a9:b9:0a:17:0f:e5:45:5c:db:fc:9a:
48:88:7a:1e:ff:c9:19:c1:71:6a:17:10:da:70:a8:
2c:5e:30:21:29:bd:07:ea:e2:fb:3b:80:7c:86:fc:
52:9a:1c:51:5b:48:23:5a:72:23:ac:78:07:6a:b8:
ba:09:7c:27:92:6d:aa:d7:1d:72:19:6d:ee:de:d2:
15:e5:2e:74:cb:04:eb:c7:e6:82:95:a0:6b:27:af:
7e:50:80:db:23:fd:14:59:5a:09:a0:72:5c:5c:77:
c4:0f:99:a1:b3:fc:83:10:cc:e0:1c:bd:36:fe:8b:
d8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5A:9F:F4:86:AC:40:08:27:70:60:EB:C2:3F:8C:8B:58:0D:AD:41
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.234.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:ce:93:e1:33:aa:ff:ff:b0:f8:86:0d:aa:38:d0:e4:9d:29:
12:88:f1:98:22:45:b3:71:10:f7:13:7b:0a:98:8f:11:b6:4e:
c7:df:65:f0:13:8b:c7:0c:ed:6f:18:c4:66:83:62:82:c8:23:
5e:57:b7:d2:08:85:df:e8:b0:4b:5f:35:2e:a7:4e:ab:01:3d:
b5:78:11:c2:e2:a0:60:d7:05:26:d1:93:4a:04:05:b8:57:81:
67:e4:13:52:02:60:ca:d4:09:fb:83:d1:87:4a:47:d8:ad:95:
67:7a:b8:ce:9e:9e:e8:c2:2a:9f:c6:56:49:69:a9:68:cb:fe:
58:43:f8:d2:00:26:8a:dd:b6:20:4b:77:04:3d:70:0d:7c:bf:
6a:95:0e:59:fe:69:5d:87:41:eb:0c:43:16:c0:a9:3c:b3:68:
da:b7:3b:23:a0:3f:b8:a1:1e:12:01:92:1e:9a:89:c7:0f:4f:
7a:2b:6a:03:0e:13:d8:6d:ef:5d:84:13:9b:c5:3d:dd:e1:a1:
04:a5:c4:9a:12:08:be:af:de:79:ec:e8:52:20:ac:2c:04:29:
42:ec:da:7a:96:66:a6:f4:e0:82:1b:fc:45:10:79:e8:6a:bf:
e0:04:52:af:2a:ff:e5:d2:3a:86:9c:31:24:bb:41:74:a0:2f:
1f:f7:cf:56
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUQyJK4SmRuTSaxS4sF62tlotyUCowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGMxMmI0MjczODMyYjQxNTZmZTAwOTJmNmFlN2U1YjNj
ZTIzYWQ4YjAeFw0yNTAzMDQyMzU1MjhaFw0yNjAzMDQwMDAwMjhaMDMxMTAvBgNV
BAMTKDRBNUE5RkY0ODZBQzQwMDgyNzcwNjBFQkMyM0Y4QzhCNTgwREFENDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgqfTYlWDnD7zo1O0uy8RoHH6R
Uz01ZDqWqisLs8Hd5PaLNj2yC7wPwqEEUb7PNhsacm0D3MVfQVWQuSmCUY2zWN7X
hUeSKG6Y1HLTWP8+yHRLoNi3hZ7Vq54QLSX1OSzt2ex7oFxXaQYt+uJWMem+aS0y
gnKZupjjkHu1GI9s2Xkadmd+hctQrk+puQoXD+VFXNv8mkiIeh7/yRnBcWoXENpw
qCxeMCEpvQfq4vs7gHyG/FKaHFFbSCNaciOseAdquLoJfCeSbarXHXIZbe7e0hXl
LnTLBOvH5oKVoGsnr35QgNsj/RRZWgmgclxcd8QPmaGz/IMQzOAcvTb+i9jTAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUSlqf9IasQAgncGDrwj+Mi1gNrUEwHwYDVR0j
BBgwFoAUjBK0JzgytBVv4Akvaufls84jrYswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGJmZDY4ODItZDZiMy00YWE4LWJjMGEtNzExZDY4YmQx
OThiLzAvOEMxMkI0MjczODMyQjQxNTZGRTAwOTJGNkFFN0U1QjNDRTIzQUQ4Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pCSzBKemd5dEJWdjRBa3ZhdWZsczg0
anJZcy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGJmZDY4ODIt
ZDZiMy00YWE4LWJjMGEtNzExZDY4YmQxOThiLzAvMzEzOTMzMmUzMjM0MmUzMjMz
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBGOow
DQYJKoZIhvcNAQELBQADggEBAJzOk+Ezqv//sPiGDao40OSdKRKI8ZgiRbNxEPcT
ewqYjxG2TsffZfATi8cM7W8YxGaDYoLII15Xt9IIhd/osEtfNS6nTqsBPbV4EcLi
oGDXBSbRk0oEBbhXgWfkE1ICYMrUCfuD0YdKR9itlWd6uM6enujCKp/GVklpqWjL
/lhD+NIAJordtiBLdwQ9cA18v2qVDln+aV2HQesMQxbAqTyzaNq3OyOgP7ihHhIB
kh6aiccPT3oragMOE9ht712EE5vFPd3hoQSlxJoSCL6v3nns6FIgrCwEKULs2nqW
Zqb04IIb/EUQeehqv+AEUq8q/+XSOoacMSS7QXSgLx/3z1Y=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:52:36 2025 by rpki-client