Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130372e302f32342d3234203d3e20383334.roa
File: 33312e3138352e3130372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 0U/pqNWogDFfEMdY62PovGaeYXqywQqRkjBO/FF9qP4=
Subject key identifier: 1C:93:E8:EA:B7:5A:1A:BD:6A:84:5F:51:F0:C9:66:4E:16:2C:7E:F4
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 53B1DD50012647740EF3DE470C8DBC744185A323
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130372e302f32342d3234203d3e20383334.roa
Signing time: Wed 29 Jan 2025 13:36:51 +0000
ROA not before: Wed 29 Jan 2025 13:31:51 +0000
ROA not after: Wed 28 Jan 2026 13:36:51 +0000
asID: 834
IP address blocks: 31.185.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 18:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:b1:dd:50:01:26:47:74:0e:f3:de:47:0c:8d:bc:74:41:85:a3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Jan 29 13:31:51 2025 GMT
Not After : Jan 28 13:36:51 2026 GMT
Subject: CN=1C93E8EAB75A1ABD6A845F51F0C9664E162C7EF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:73:02:fb:b5:f1:82:82:bf:ea:60:94:a3:53:
4b:fa:80:3e:87:13:c5:5f:10:1c:18:d1:1b:ab:a9:
fd:6f:ff:b4:b4:ae:12:28:46:93:8f:53:b9:15:6e:
27:35:8a:15:46:3e:6c:be:39:11:c4:38:3e:9e:de:
7c:fa:3d:ec:1f:37:97:92:e9:b4:c6:06:74:c1:da:
fb:bc:73:7e:6d:3f:0d:86:0c:fb:15:ac:a5:54:e7:
77:8b:d4:a8:54:43:86:4b:85:67:12:00:4a:20:84:
5f:fd:fc:1a:9c:b8:6e:9b:af:c6:f6:82:e4:34:eb:
e3:76:6d:33:41:24:91:62:97:f8:d0:6a:0c:c7:08:
20:63:8d:9e:e1:3d:27:d3:30:61:cd:1c:fe:21:23:
a8:04:8b:aa:7f:c6:96:5b:8f:78:fd:e7:8a:25:40:
93:91:d0:32:19:f6:99:06:bd:37:b2:ff:f8:9c:e2:
fe:b8:fd:c6:4a:eb:90:3e:04:14:28:10:35:26:b6:
fb:d8:fe:ba:bd:29:c5:09:33:b5:d1:c0:06:5d:b4:
be:e3:ae:5a:45:9e:0e:0d:11:54:72:89:c6:68:54:
39:16:48:0b:76:27:bf:ca:4e:63:d9:f8:d5:af:b5:
16:18:86:43:1f:1f:6a:ee:f9:6c:64:26:95:87:da:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:93:E8:EA:B7:5A:1A:BD:6A:84:5F:51:F0:C9:66:4E:16:2C:7E:F4
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/33312e3138352e3130372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ab:6c:ac:f7:c5:6e:11:d0:6d:89:04:10:03:2c:bc:2a:44:
9d:f8:cb:1d:8c:98:f3:62:a2:50:6f:44:d9:4d:17:5a:bd:4b:
f9:bf:8a:72:76:af:81:1d:01:dd:98:e1:54:ec:0c:76:1a:3d:
98:b5:0f:40:c9:5e:19:e9:5b:4e:c7:75:62:1d:02:67:2e:ee:
1e:fb:25:c4:e7:06:f1:28:d8:9f:0a:05:f1:d3:da:03:72:42:
50:53:94:dd:b8:1c:14:90:23:26:9c:7a:8a:34:5c:75:0e:bf:
d8:c9:0d:38:14:83:e6:08:9d:41:03:b7:5c:3c:17:57:76:e4:
da:e7:0b:6f:ec:6f:65:17:ee:18:ad:f3:03:40:72:6d:31:38:
c1:2a:70:20:52:f3:b1:69:42:e0:ab:7e:cf:ef:d2:32:6e:60:
f7:78:76:ab:e3:7a:cb:de:72:a3:b9:4d:98:b5:a0:68:82:92:
b3:6e:28:67:1f:b1:a4:c8:c2:3d:96:db:c1:cd:04:d7:16:cf:
62:0b:0a:03:d0:60:cd:cc:84:33:81:b6:ac:c9:26:45:b0:08:
f1:cd:22:9f:ac:03:7c:7a:6b:a5:1d:5f:03:9c:0c:35:8c:48:
26:d5:95:c3:bb:eb:f6:86:a0:c6:97:95:f2:55:29:b6:42:a3:
ca:c8:c6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:08:34 2025 by rpki-client