Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139352e34322e3131322e302f32342d3234203d3e203438343335.roa
File: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (raw, json)
Hash identifier: 0fCZnPcUR/TU0KGeDhdE4rzY8AMOIFMDCEwGzQYi3Zw=
Subject key identifier: DF:AF:3C:23:40:FC:A8:45:06:81:A4:83:D3:0E:72:D1:D7:06:89:C1
Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Certificate serial: 4712D6C709892E1FDFE5A62ED6F7E6093D97160F
Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139352e34322e3131322e302f32342d3234203d3e203438343335.roa
Signing time: Tue 18 Feb 2025 17:36:21 +0000
ROA not before: Tue 18 Feb 2025 17:31:21 +0000
ROA not after: Tue 17 Feb 2026 17:36:21 +0000
asID: 48435
IP address blocks: 195.42.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:12:d6:c7:09:89:2e:1f:df:e5:a6:2e:d6:f7:e6:09:3d:97:16:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Validity
Not Before: Feb 18 17:31:21 2025 GMT
Not After : Feb 17 17:36:21 2026 GMT
Subject: CN=DFAF3C2340FCA8450681A483D30E72D1D70689C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b6:af:57:cb:18:db:92:80:23:ff:8c:35:19:
23:d1:19:f4:3d:29:3c:77:56:7f:f4:6c:85:de:b4:
84:0d:74:6a:e0:f5:e3:bd:ad:fc:3a:48:f3:16:75:
9a:78:7e:83:7d:6a:04:26:ff:77:13:17:4f:65:74:
84:a1:4f:bd:54:8b:5e:97:74:cf:18:75:cb:ed:0c:
b6:a5:ea:2f:91:f6:aa:37:68:d3:ae:05:04:09:fd:
82:55:86:12:ea:a5:dc:07:9c:d5:cc:a0:9c:1b:ab:
1a:ac:a4:be:50:29:b7:e0:ca:ef:eb:74:66:8d:17:
22:3a:58:ec:02:12:49:0c:02:40:37:c6:11:31:6f:
ee:95:0a:8f:b0:3a:a1:60:08:c7:b5:8b:da:a3:99:
56:d9:a2:f4:e3:ac:9b:57:e4:38:c6:ec:4f:6e:e4:
6a:8e:f9:ec:13:08:6b:44:63:2d:f0:9d:91:d3:2d:
f7:b1:fd:22:56:97:00:ec:c8:b2:f1:e5:4f:07:90:
32:62:a8:0c:c8:3a:5c:8f:99:7b:ba:18:a1:ba:91:
62:40:0b:c8:26:14:70:fd:a7:3f:51:cc:c4:0c:23:
9e:38:07:df:3c:ca:a8:ca:f8:dd:9e:e5:1c:a4:4f:
d6:77:7b:d9:90:56:0e:9d:69:7d:a8:24:92:fe:22:
5e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AF:3C:23:40:FC:A8:45:06:81:A4:83:D3:0E:72:D1:D7:06:89:C1
X509v3 Authority Key Identifier:
keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3139352e34322e3131322e302f32342d3234203d3e203438343335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.42.112.0/24
Signature Algorithm: sha256WithRSAEncryption
75:17:f4:8a:06:09:3d:1f:88:29:f0:6a:ce:90:7f:b0:15:52:
a8:5f:f9:9c:dc:b2:c9:f8:4e:26:c5:75:1d:aa:a8:ce:6d:24:
ac:ef:40:b8:3e:7c:70:05:37:96:6c:80:66:68:b8:5a:28:4f:
4e:d6:bc:02:dd:bd:07:c8:4e:7c:70:1d:59:45:0e:8f:79:c8:
21:b1:ef:63:cd:57:80:af:3c:9f:bf:4d:0f:30:81:13:18:a8:
1a:ad:6b:ec:61:05:f0:3c:1d:9d:03:be:75:88:d0:50:3e:55:
a2:d4:5e:4d:3f:a6:d2:d7:3c:fb:b2:7a:f2:10:f8:aa:99:2b:
62:e6:3c:aa:75:3d:2c:f4:93:90:e1:34:d3:ef:b4:26:69:0a:
e1:e1:93:5b:82:d8:d0:8c:1b:26:4a:25:46:bf:f5:32:aa:5c:
d9:a1:d0:b6:29:a4:b5:5c:1e:88:20:c5:44:9d:3b:ad:6b:27:
ff:b5:75:0f:82:4d:85:9f:89:6f:25:c7:08:51:ae:dc:fe:e1:
b6:9d:18:b8:74:6c:a3:ea:8e:ee:5d:52:9c:fd:b8:b6:77:ae:
d6:59:bd:54:82:43:c0:32:45:e4:16:2a:f7:41:d7:21:e4:6d:
c2:a9:22:33:01:d4:58:1b:5f:40:fc:ed:78:8c:46:da:ae:56:
dd:3d:06:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:12 2025 by rpki-client