Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139332e3136392e37382e302f32332d3234203d3e203438343335.roa
File: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (raw, json)
Hash identifier: 0e4l5EqcD9+SWWVL79QZba03Lu9mdjyR/TfDJr390dA=
Subject key identifier: 07:8E:99:C5:7E:29:B6:07:ED:6F:D9:06:4D:5A:FC:1F:37:1F:A1:88
Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Certificate serial: 426628BDE8CF7C67926AD994641A0848DC8BA78C
Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139332e3136392e37382e302f32332d3234203d3e203438343335.roa
Signing time: Tue 18 Feb 2025 17:34:46 +0000
ROA not before: Tue 18 Feb 2025 17:29:46 +0000
ROA not after: Tue 17 Feb 2026 17:34:46 +0000
asID: 48435
IP address blocks: 193.169.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:66:28:bd:e8:cf:7c:67:92:6a:d9:94:64:1a:08:48:dc:8b:a7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Validity
Not Before: Feb 18 17:29:46 2025 GMT
Not After : Feb 17 17:34:46 2026 GMT
Subject: CN=078E99C57E29B607ED6FD9064D5AFC1F371FA188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:29:f9:10:61:67:bd:7f:fd:01:e9:e5:5d:
33:30:fb:bc:f3:74:ba:1b:8e:db:44:47:41:4f:cd:
18:f4:02:c8:6a:a0:1d:aa:4d:4c:3a:84:e8:fe:52:
fb:bc:ae:39:f9:01:ad:16:26:25:1c:2c:4f:5a:d2:
3f:62:81:07:43:d9:c6:69:d1:6a:34:c7:e0:be:03:
ee:31:9e:28:5c:bb:8a:df:23:0e:1c:f3:62:bd:32:
41:58:f6:2e:e1:e3:6b:ec:14:bb:43:3e:cc:f1:97:
59:01:d8:30:f0:4d:80:28:65:72:87:78:b8:78:44:
d6:6f:ae:b7:17:3c:b6:d7:d1:01:42:b4:a0:0b:8c:
69:27:b1:3f:a7:02:9b:9f:74:a3:8e:af:19:1b:a5:
43:f9:28:4b:c0:5d:22:23:e1:c4:86:dc:fa:eb:01:
df:3b:e6:31:5f:c4:bb:bb:e9:72:85:39:8d:7d:2f:
b9:82:7e:a1:c6:69:6b:22:f6:ca:49:c9:8d:aa:bf:
9a:0b:57:d9:49:59:cd:71:98:90:53:c0:8e:b4:78:
64:50:58:33:27:23:c1:54:1e:54:15:cf:c4:17:df:
c7:fc:2f:57:d6:a0:c6:54:54:a7:c7:cd:4e:81:8b:
ce:0d:01:0b:4d:d3:e4:72:a4:cd:00:1d:1f:01:91:
78:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8E:99:C5:7E:29:B6:07:ED:6F:D9:06:4D:5A:FC:1F:37:1F:A1:88
X509v3 Authority Key Identifier:
keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139332e3136392e37382e302f32332d3234203d3e203438343335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.78.0/23
Signature Algorithm: sha256WithRSAEncryption
49:8b:78:6f:20:9f:ba:b5:27:3f:ad:a7:cd:34:8b:53:5c:51:
46:91:6b:7f:bc:e7:09:00:25:c6:db:d9:90:0b:b0:bb:66:28:
6a:77:e7:3d:d9:51:1b:34:3c:fe:12:62:2a:d7:f4:02:d4:d1:
89:9a:0f:b0:83:f1:0a:cc:30:59:40:8a:a5:5c:9f:ab:94:51:
76:72:dd:bd:6e:71:21:e1:b6:4c:b1:da:8c:81:33:12:90:f6:
29:83:83:b3:ca:b7:60:ec:4f:a6:2b:98:15:00:f4:4d:52:a5:
b5:c5:ff:1b:89:3f:5c:e1:e1:41:38:c8:44:c5:58:84:2a:7f:
6b:c8:9a:b0:46:b9:6e:8f:42:9b:8d:40:24:72:0f:12:7d:3e:
fa:a3:09:2f:83:77:b9:a2:32:52:79:08:cc:b0:7e:e5:a7:bf:
1d:e1:be:9c:de:7e:9b:bc:ec:f5:81:d0:9d:d6:c8:ab:46:a0:
8f:e3:8d:f4:9f:81:d7:4c:1b:6f:ae:b2:7f:13:67:de:12:fd:
12:38:28:15:28:86:29:89:d9:d9:08:7d:7b:d0:1f:77:94:53:
74:c0:08:1b:b1:52:01:a8:d2:ca:49:0d:96:a1:53:6a:c9:92:
80:9a:0a:6f:fa:0f:10:10:63:40:ce:38:85:84:ea:9c:da:c0:
c7:8d:18:84
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUQmYovejPfGeSatmUZBoISNyLp4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz
ZWFlYzQ3ZDAeFw0yNTAyMTgxNzI5NDZaFw0yNjAyMTcxNzM0NDZaMDMxMTAvBgNV
BAMTKDA3OEU5OUM1N0UyOUI2MDdFRDZGRDkwNjRENUFGQzFGMzcxRkExODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrRin5EGFnvX/9AenlXTMw+7zz
dLobjttER0FPzRj0AshqoB2qTUw6hOj+Uvu8rjn5Aa0WJiUcLE9a0j9igQdD2cZp
0Wo0x+C+A+4xnihcu4rfIw4c82K9MkFY9i7h42vsFLtDPszxl1kB2DDwTYAoZXKH
eLh4RNZvrrcXPLbX0QFCtKALjGknsT+nApufdKOOrxkbpUP5KEvAXSIj4cSG3Prr
Ad875jFfxLu76XKFOY19L7mCfqHGaWsi9spJyY2qv5oLV9lJWc1xmJBTwI60eGRQ
WDMnI8FUHlQVz8QX38f8L1fWoMZUVKfHzU6Bi84NAQtN0+RypM0AHR8BkXirAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUB46ZxX4ptgftb9kGTVr8HzcfoYgwHwYDVR0j
BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx
ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2
dXhIMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWMxNDMzODct
ZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUxZTRhLzAvMzEzOTMzMmUzMTM2MzkyZTM3
MzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM4MzQzMzM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
walOMA0GCSqGSIb3DQEBCwUAA4IBAQBJi3hvIJ+6tSc/rafNNItTXFFGkWt/vOcJ
ACXG29mQC7C7Zihqd+c92VEbNDz+EmIq1/QC1NGJmg+wg/EKzDBZQIqlXJ+rlFF2
ct29bnEh4bZMsdqMgTMSkPYpg4Ozyrdg7E+mK5gVAPRNUqW1xf8biT9c4eFBOMhE
xViEKn9ryJqwRrluj0KbjUAkcg8SfT76owkvg3e5ojJSeQjMsH7lp78d4b6c3n6b
vOz1gdCd1sirRqCP4430n4HXTBtvrrJ/E2feEv0SOCgVKIYpidnZCH170B93lFN0
wAgbsVIBqNLKSQ2WoVNqyZKAmgpv+g8QEGNAzjiFhOqc2sDHjRiE
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:04 2025 by rpki-client