Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32342d3234203d3e203531303832.roa
File: 3231322e3130332e34362e302f32342d3234203d3e203531303832.roa (raw, json)
Hash identifier: 2F+hMcxUeRbuMZ154QcBZjgDbx0tCTkT+4d5LpArwfo=
Subject key identifier: 23:86:F4:54:5D:9D:F0:0F:83:81:11:E0:87:BA:3E:6F:DA:34:02:8E
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 3AD2D6A1EA1695CA2C87BA0834ACDC209706DB81
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32342d3234203d3e203531303832.roa
Signing time: Mon 26 May 2025 14:22:31 +0000
ROA not before: Mon 26 May 2025 14:17:31 +0000
ROA not after: Mon 25 May 2026 14:22:31 +0000
asID: 51082
IP address blocks: 212.103.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:d2:d6:a1:ea:16:95:ca:2c:87:ba:08:34:ac:dc:20:97:06:db:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: May 26 14:17:31 2025 GMT
Not After : May 25 14:22:31 2026 GMT
Subject: CN=2386F4545D9DF00F838111E087BA3E6FDA34028E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:6e:45:84:d9:26:ed:25:30:74:a2:d3:b7:
5f:f6:d8:1b:6d:67:fc:15:ad:f9:b5:92:2e:9d:a7:
64:87:03:3d:6c:1a:a3:66:b3:29:14:14:58:41:41:
24:8f:d1:db:3c:b9:fc:b9:f1:a8:ca:98:e4:b2:26:
b9:3d:6a:ee:cf:5f:68:42:d8:95:57:b1:f5:a8:ee:
d2:de:b9:71:c2:d8:d9:ef:53:7f:a8:01:1a:38:63:
85:84:b2:dc:52:7e:ae:e4:9c:73:3a:99:0c:91:1f:
52:3d:98:78:e1:02:85:35:56:35:62:d1:5c:65:a0:
6f:fa:08:f4:3a:f6:c0:2f:20:1f:04:14:c6:ca:a4:
87:f0:88:a1:ca:b6:33:74:b5:1f:f1:48:ef:24:19:
f9:3a:c4:34:c1:de:5e:1f:f2:61:df:22:27:00:3b:
50:4f:db:fd:2b:24:b2:59:8c:58:f7:76:f9:04:55:
77:40:9c:4e:53:06:7b:bf:0f:eb:e3:fa:bb:81:24:
c3:8d:82:8d:2f:0e:f1:d3:fc:b1:53:6f:37:3f:0a:
19:aa:15:6b:40:2f:42:c4:c6:58:c9:0a:0a:12:bd:
54:8b:2b:c4:9d:fa:05:52:33:8a:63:f0:da:4d:0a:
18:16:9e:aa:49:ed:e4:9c:b0:48:fd:30:b5:c5:68:
23:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:86:F4:54:5D:9D:F0:0F:83:81:11:E0:87:BA:3E:6F:DA:34:02:8E
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32342d3234203d3e203531303832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.46.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:3b:5c:e7:c4:2b:5b:85:1a:28:7c:72:f9:0b:c8:8b:7f:44:
a9:77:e2:3a:c7:c2:ea:0a:65:a6:3c:31:86:82:78:e7:0c:b0:
fd:6e:db:d8:65:72:1b:06:34:ac:09:fd:70:5c:43:bf:ee:a4:
f7:78:f3:a2:b7:35:7e:da:7d:a3:b8:59:76:1a:76:08:4a:9a:
45:45:e9:d9:b1:31:d3:77:ac:61:64:cc:75:5b:99:e3:10:38:
05:cf:06:f7:a4:af:29:35:08:26:55:f1:0c:81:87:cd:01:9d:
b9:e0:33:3e:1b:ee:0b:e3:f9:9a:39:51:e2:7e:b9:a3:d3:d0:
b4:54:d2:1a:fe:de:a1:3f:ef:d2:d8:d6:a9:10:97:e3:17:23:
4e:af:a2:ed:a9:5a:b0:27:3f:00:2a:61:b5:a3:3d:3f:d6:d9:
63:a1:0a:51:95:eb:fb:6f:4b:b5:8f:03:5d:6c:6d:aa:4b:eb:
cc:a9:0b:16:1f:90:e5:ad:ed:c0:e8:de:73:bc:8a:9f:8c:92:
6f:e2:d7:44:0c:45:ca:17:12:59:7e:d4:b3:ec:71:55:a8:b9:
7b:d7:8e:c9:82:5e:49:4b:6c:29:65:6a:56:5b:e5:e9:6a:56:
46:87:2e:af:45:34:d3:1a:2a:82:69:11:68:98:9c:3b:5a:78:
fb:7f:f1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:34:37 2025 by rpki-client