Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139332e3136392e37382e302f32332d3234203d3e203530343334.roa
File: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (raw, json)
Hash identifier: i+j0/SqL92pXqr/Yt38MmbwZjTIQClt05q1Bhtl74qs=
Subject key identifier: E1:34:C3:8F:6F:99:9A:69:1A:D6:EF:19:30:B2:D1:12:B6:51:88:6E
Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Certificate serial: 06971D05769D0909852F050F0C82477E2DF4642B
Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139332e3136392e37382e302f32332d3234203d3e203530343334.roa
Signing time: Tue 18 Feb 2025 17:35:13 +0000
ROA not before: Tue 18 Feb 2025 17:30:13 +0000
ROA not after: Tue 17 Feb 2026 17:35:13 +0000
asID: 50434
IP address blocks: 193.169.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:97:1d:05:76:9d:09:09:85:2f:05:0f:0c:82:47:7e:2d:f4:64:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Validity
Not Before: Feb 18 17:30:13 2025 GMT
Not After : Feb 17 17:35:13 2026 GMT
Subject: CN=E134C38F6F999A691AD6EF1930B2D112B651886E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:51:71:86:95:35:be:c1:a4:08:71:4f:d4:64:
e8:2f:23:7f:0e:64:d2:e4:eb:04:23:61:76:05:11:
46:5c:3d:68:d4:7c:40:ea:0a:ae:07:d1:70:56:95:
24:9a:94:4a:0b:a1:40:43:91:21:9f:ad:6c:34:bd:
63:9c:79:52:b1:9d:d3:b3:a8:96:3b:97:bc:3a:06:
e5:e3:a6:4e:e3:3f:c7:11:f9:9a:ca:af:6b:f1:4e:
4a:36:e7:e2:19:06:0a:fc:a3:ad:3a:03:a0:22:09:
42:0f:91:f0:7b:88:9a:01:2e:f4:02:66:10:8f:5e:
6c:c0:e3:aa:d7:2f:a7:91:c4:35:27:1d:57:72:b2:
ee:11:bb:dc:e2:14:85:7b:ac:89:80:bf:01:dc:68:
cd:ea:af:a6:a6:23:4e:e4:28:c4:7c:22:26:2e:65:
4c:1d:ab:f2:67:88:49:b7:57:0f:d8:0b:cd:3c:7a:
6d:a4:c4:f4:8b:1b:3e:00:28:a7:7c:f9:c4:65:e9:
df:4d:ec:f7:ec:43:28:6b:f7:ed:09:cc:11:7f:f6:
c3:9d:ab:09:07:a2:f1:05:60:f0:50:1b:1d:1b:37:
b2:94:19:58:a7:a4:94:9f:69:6d:5e:2e:bd:04:79:
89:7d:08:90:b0:1f:7b:f1:4b:d2:76:5c:e4:22:1b:
b9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:34:C3:8F:6F:99:9A:69:1A:D6:EF:19:30:B2:D1:12:B6:51:88:6E
X509v3 Authority Key Identifier:
keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139332e3136392e37382e302f32332d3234203d3e203530343334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.78.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:c0:f0:c4:ed:44:c0:9f:f7:28:88:6e:d6:dc:8c:56:74:c8:
e8:60:2e:ca:94:a0:68:37:87:ee:57:b0:59:e6:10:5f:fb:ee:
32:4c:49:2c:1e:27:ce:4e:f2:80:40:85:93:da:e2:42:5f:29:
1a:c4:02:25:22:f7:8a:57:05:0f:20:81:23:96:4b:15:4a:0f:
cd:4c:e5:c6:d3:cf:42:bc:0a:b3:d2:6c:4a:b7:87:6e:5a:02:
bc:4b:e2:18:36:4d:ca:85:23:00:c9:7f:b8:51:f5:61:1e:e4:
1e:3d:d9:bf:82:15:10:64:09:98:84:4e:81:f5:02:09:d5:26:
a1:51:b8:0c:89:09:9c:19:b9:72:71:d7:1c:b0:5f:33:b7:72:
e8:51:ec:25:b8:13:6f:ab:cd:38:e8:e7:95:74:a7:2f:1a:e3:
e0:aa:97:6f:c8:de:3f:6b:d1:e5:35:13:87:0d:44:3b:34:36:
96:e4:2c:ac:a0:ee:e5:f7:ec:60:12:35:f7:b1:cb:07:99:9d:
ba:49:78:b4:85:56:a1:ed:c1:90:61:0a:ee:e9:27:bc:7b:c2:
78:10:05:0a:5d:99:54:cf:5d:37:dc:28:f5:88:b4:a3:9b:65:
5d:7a:ad:f5:61:8e:19:f4:bf:f9:c9:5a:8d:96:8a:70:dc:40:
be:28:3a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:31 2025 by rpki-client