Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa
File: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (raw, json)
Hash identifier: tjhKwoa/z/ms3eL96lf+MyeXfH8SFjq92hWldF9BNCA=
Subject key identifier: 09:B4:69:3E:DD:D4:0E:07:F2:38:88:F7:CC:24:23:AC:55:0F:47:57
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 084CE4A16AAB84620B9711032D3230E0ACDB2382
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa
Signing time: Mon 03 Mar 2025 03:47:17 +0000
ROA not before: Mon 03 Mar 2025 03:42:17 +0000
ROA not after: Mon 02 Mar 2026 03:47:17 +0000
asID: 395374
IP address blocks: 31.185.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 15:28:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:4c:e4:a1:6a:ab:84:62:0b:97:11:03:2d:32:30:e0:ac:db:23:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Mar 3 03:42:17 2025 GMT
Not After : Mar 2 03:47:17 2026 GMT
Subject: CN=09B4693EDDD40E07F23888F7CC2423AC550F4757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:44:dc:f4:e4:cf:92:8b:c4:b2:ac:03:ce:
8f:02:d5:50:ac:80:55:67:2d:f4:f4:f0:d5:cd:9d:
1e:69:4a:c1:0e:4a:47:29:15:7e:54:32:8d:d9:7e:
2b:22:e3:2e:28:25:25:66:7e:5f:6e:6d:39:6b:a5:
cf:03:13:2e:55:9f:7b:06:83:3f:fb:7e:33:e1:84:
7d:4c:93:d8:20:e2:5f:db:14:26:56:c6:b7:d3:64:
82:30:ed:ec:e9:b3:18:13:03:8d:df:88:6a:da:c2:
8e:65:27:83:38:ff:85:bb:35:28:ce:1d:03:2e:e0:
8b:5a:52:40:c2:75:7c:40:04:bd:e4:ec:aa:0a:3d:
61:08:1a:c0:c6:3e:a5:39:65:40:cc:57:7a:7b:ae:
c7:9c:16:58:d7:0e:6e:52:16:45:75:2d:72:c3:81:
84:3b:c5:d9:14:e6:1f:2a:a2:81:03:96:a0:3b:b7:
f0:82:d9:ed:82:d7:34:9f:3e:fe:f5:b5:3d:ca:bd:
7d:a9:4a:e7:bd:54:c5:dd:de:f7:3d:bf:c8:0c:a4:
34:e7:7a:df:d2:42:79:d2:26:06:52:e4:d3:10:27:
ab:ef:3a:d5:fc:7b:f2:6a:ce:1c:23:4f:c3:6e:26:
e1:d2:f5:70:2f:2d:02:9c:fc:7a:75:8c:3b:60:d3:
95:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B4:69:3E:DD:D4:0E:07:F2:38:88:F7:CC:24:23:AC:55:0F:47:57
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.106.0/24
Signature Algorithm: sha256WithRSAEncryption
31:41:9d:f1:bd:88:32:dc:52:44:2a:10:d7:87:29:7e:07:bc:
9e:1c:32:9f:5c:48:51:61:62:1f:a2:ad:89:6d:48:d1:72:33:
0f:e2:83:c2:cc:c1:d2:d5:fd:c9:1a:32:2d:09:72:96:e6:5f:
3c:4f:7c:34:3b:bf:fb:ae:8c:cb:f9:88:1f:ae:5a:c8:aa:4e:
56:f7:f4:83:d5:76:ae:98:dc:a3:16:11:76:68:74:63:5b:4f:
e0:f9:28:e2:1f:d1:97:f2:00:21:67:b4:ff:30:f7:3e:e7:79:
b2:de:8d:80:d7:75:bf:ce:b8:b5:b3:d0:dd:41:2f:c8:d0:c1:
02:1b:b2:c3:b2:06:f6:9c:e5:8e:0e:13:0a:39:e4:09:75:59:
d4:cb:42:b1:49:da:19:de:d0:12:09:c4:71:bc:57:41:17:06:
97:b9:32:46:a6:70:4d:c0:b1:a7:e6:44:8d:3a:73:a9:1b:f2:
88:f2:90:a8:db:ed:b0:d3:92:54:f4:cc:e9:55:d2:16:52:13:
b1:e7:a0:e6:f6:06:8e:68:d9:e9:7f:03:6b:1c:0b:44:bf:88:
f6:01:95:a1:8c:35:53:27:9a:c1:b2:63:ea:b4:7e:58:63:33:
0a:d8:d1:19:5b:fc:23:f6:aa:84:8b:c3:31:cf:46:a3:e9:c8:
5f:0d:15:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:06:40 2025 by rpki-client