Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20323037333838.roa
File: 3231332e3133392e37392e302f32342d3234203d3e20323037333838.roa (raw, json)
Hash identifier: ++GZ339S0KrF867J3TV0tr4TdthWz9Doq5ZUIyvykVE=
Subject key identifier: F0:39:A5:A8:97:FD:B5:C8:17:0E:20:8B:70:ED:CF:6D:4B:0A:B0:BE
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 2327EFA51ED544C53423AD0E6EB25793286014DC
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20323037333838.roa
Signing time: Tue 07 Jan 2025 22:35:19 +0000
ROA not before: Tue 07 Jan 2025 22:30:19 +0000
ROA not after: Tue 06 Jan 2026 22:35:19 +0000
asID: 207388
IP address blocks: 213.139.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:27:ef:a5:1e:d5:44:c5:34:23:ad:0e:6e:b2:57:93:28:60:14:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jan 7 22:30:19 2025 GMT
Not After : Jan 6 22:35:19 2026 GMT
Subject: CN=F039A5A897FDB5C8170E208B70EDCF6D4B0AB0BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:b6:ad:62:99:fe:2d:9b:f0:2c:34:b5:94:
b3:df:fc:9c:3e:b8:a2:25:ce:c2:d5:97:ec:5b:12:
f5:b3:c8:5e:dc:8e:63:56:91:44:62:9d:eb:76:cc:
49:e6:b0:68:74:cd:7e:51:5d:d9:78:74:7a:13:c9:
e0:d4:f7:38:2e:e1:f1:aa:a8:05:02:f4:9e:95:8b:
c8:d6:5f:4b:ab:5b:3c:16:b1:a0:7d:2f:96:36:86:
59:78:e6:1d:a8:be:09:44:c9:be:f9:5a:88:2b:55:
a4:e6:de:f1:23:55:87:65:52:54:75:ad:54:f7:ba:
a0:71:e9:bc:6f:a6:9d:b4:9d:b8:58:d8:88:fc:03:
bf:da:b9:b8:04:d5:53:39:27:df:15:95:db:55:74:
1c:6b:eb:fd:8e:49:82:a5:c9:0c:5a:fc:63:96:81:
7d:19:f5:17:6d:38:8c:28:35:f8:39:70:e8:ac:55:
29:f8:32:d1:61:1e:58:ac:88:c9:61:cd:75:cd:fb:
6d:7c:ea:19:34:b4:1a:63:ae:ba:87:85:82:ff:bd:
a4:f3:35:30:22:29:69:82:cb:93:0d:55:e6:36:77:
c0:e3:5c:bd:24:cd:65:77:dc:6b:ab:f8:88:96:4d:
6e:cb:d1:4f:69:fe:80:e5:d0:35:57:48:0f:af:04:
0b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:39:A5:A8:97:FD:B5:C8:17:0E:20:8B:70:ED:CF:6D:4B:0A:B0:BE
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20323037333838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.79.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:5d:51:38:08:84:3d:74:52:88:da:34:1d:84:f3:a1:a4:11:
6a:5f:e4:5a:7e:de:18:51:70:4e:a2:1e:01:92:71:81:b2:52:
0b:ad:e0:fa:60:02:f5:fa:92:b2:44:50:a9:7a:37:d3:c9:57:
2f:bc:04:dc:07:92:71:7b:d2:67:b1:0c:88:48:32:87:69:bf:
b9:95:92:a6:77:37:3d:38:40:bf:d5:3f:a8:0f:89:59:45:96:
0f:97:3d:a0:58:bb:12:56:e3:46:5c:09:7d:2e:fb:5e:ef:b7:
d3:18:e1:ff:ba:91:ae:50:73:4e:08:99:44:ab:10:e5:a8:49:
92:cb:0f:b6:2d:73:38:e8:92:3e:fe:30:55:2b:fb:7e:cc:bc:
6a:e7:d3:c2:26:30:08:6f:69:d8:c0:d4:75:58:ed:00:72:91:
bf:38:ac:50:14:df:9c:01:26:48:28:12:06:53:58:64:6f:e5:
31:59:4e:a6:9f:52:05:db:13:8f:ed:6d:5c:99:72:49:d3:51:
41:07:70:d1:ee:45:ea:d6:2e:45:fd:f7:59:41:eb:5e:1f:8c:
1e:24:33:fb:a8:89:3a:23:7f:c8:9f:57:c3:b7:fa:27:68:78:
09:b1:2c:dd:d7:a7:9f:84:09:d8:aa:77:dd:da:9a:af:d8:c6:
3d:d2:31:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:03 2025 by rpki-client