Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3134312e3139332e3232382e302f32342d3234203d3e2039333034.roa
File: 3134312e3139332e3232382e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: s5WbNe5Whw4ZMD9Ltnk2u5lg9JZnAEnQMp+26m9SqMs=
Subject key identifier: 31:EC:53:D7:D7:E6:EE:0C:69:38:29:6F:F7:1B:58:92:B2:AF:16:96
Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Certificate serial: 1C469FF8650AD1D60849FFFD46195E2B6E5D9140
Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3134312e3139332e3232382e302f32342d3234203d3e2039333034.roa
Signing time: Mon 17 Mar 2025 06:01:20 +0000
ROA not before: Mon 17 Mar 2025 05:56:20 +0000
ROA not after: Mon 16 Mar 2026 06:01:20 +0000
asID: 9304
IP address blocks: 141.193.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:46:9f:f8:65:0a:d1:d6:08:49:ff:fd:46:19:5e:2b:6e:5d:91:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Validity
Not Before: Mar 17 05:56:20 2025 GMT
Not After : Mar 16 06:01:20 2026 GMT
Subject: CN=31EC53D7D7E6EE0C6938296FF71B5892B2AF1696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:17:7a:4d:4c:b0:7d:75:a2:d6:0c:68:78:
13:c0:06:7b:d5:91:6a:84:f6:9d:23:e7:ce:62:18:
71:54:61:6a:81:d6:76:ee:8e:b3:06:6d:a9:b3:16:
8a:73:fd:ea:91:2a:1e:e0:28:34:f2:f2:3a:2e:0f:
a1:b8:9f:e7:45:61:50:61:40:4c:ef:83:c3:bf:da:
83:66:b9:b6:b0:b0:ff:0c:fc:2b:e7:f3:84:06:8c:
cc:52:c2:45:37:c7:be:f3:58:48:c1:d5:08:07:93:
fa:1b:7a:10:75:3f:81:02:ce:8a:79:6e:b8:4a:d5:
4a:2a:13:17:96:6a:a3:48:5f:d0:bd:f7:d6:d4:24:
27:11:da:d2:46:eb:9d:e3:0e:79:76:08:2e:5d:e9:
3b:4e:e0:dc:05:25:33:94:85:36:07:52:49:ab:9d:
e5:eb:db:f0:e8:35:8c:9b:cb:86:7a:7c:26:6e:2e:
c7:61:a3:42:9a:66:6e:9d:7b:5f:f0:37:fc:e6:c8:
e1:19:13:8b:08:0b:a7:21:0b:b9:4a:15:34:cd:cc:
49:59:ce:1e:aa:55:c9:87:58:f0:3f:5d:1d:b3:01:
d6:6d:57:00:c7:8e:31:d6:3d:d6:a8:17:f0:fa:17:
8e:bb:82:ca:cf:31:1e:e3:99:8e:52:7c:4b:11:57:
01:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EC:53:D7:D7:E6:EE:0C:69:38:29:6F:F7:1B:58:92:B2:AF:16:96
X509v3 Authority Key Identifier:
keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3134312e3139332e3232382e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.193.228.0/24
Signature Algorithm: sha256WithRSAEncryption
00:86:89:a9:14:f5:c3:01:77:4f:d6:a3:53:6a:12:af:95:60:
26:cb:e7:93:fd:66:4d:b9:7e:74:20:52:bf:4c:30:d7:07:ca:
e8:f9:48:cf:66:8e:c6:e9:a1:db:d0:4c:f3:f0:73:36:e0:29:
82:0d:d1:be:8e:24:14:93:8f:6a:cc:80:9a:81:ad:2b:10:0e:
94:a3:65:d5:fa:2b:5f:fa:84:28:7f:90:60:8a:95:a1:6e:e7:
30:d5:0e:66:29:ff:38:7c:39:2c:be:53:ee:eb:1b:46:41:74:
d8:56:c9:21:ba:f3:3f:ec:6d:84:cf:e8:ee:ab:aa:9d:0d:67:
15:0c:96:20:92:d0:21:bb:c4:22:0c:8f:90:f1:bb:96:e8:c0:
e1:f7:86:e2:47:53:3b:8c:69:c9:e0:6d:c8:7f:b6:a7:12:67:
84:81:28:6d:b4:c4:c1:36:f7:b5:0d:a2:24:65:db:a0:e1:e0:
e3:15:6b:e2:81:97:69:2b:28:28:a5:1c:d6:9e:ca:28:1c:5c:
bc:2e:02:44:82:90:ba:f2:0e:35:b9:a9:f4:72:f9:37:bb:44:
c3:f7:e1:58:27:d9:72:3c:1d:b9:c0:8d:1f:07:2f:f5:67:d6:
ba:c8:d4:cb:72:f1:a0:e3:5e:f6:e6:f4:32:b3:c5:dc:8a:ec:
f6:5b:c0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:47 2025 by rpki-client