Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35362e3234382e302f32342d3234203d3e20323133343037.roa
File: 322e35362e3234382e302f32342d3234203d3e20323133343037.roa (raw, json)
Hash identifier: W5XWuf57YWGR4KtVVmRJj0baISUVUEZ2ELmlMe8W5iE=
Subject key identifier: EB:2B:42:AE:00:88:A1:5B:A1:06:7C:97:C6:65:5E:31:38:B5:A9:78
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 08A36CF642496CB5170EFEA3D594C45CD1D52A9F
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35362e3234382e302f32342d3234203d3e20323133343037.roa
Signing time: Mon 17 Feb 2025 19:58:37 +0000
ROA not before: Mon 17 Feb 2025 19:53:37 +0000
ROA not after: Mon 16 Feb 2026 19:58:37 +0000
asID: 213407
IP address blocks: 2.56.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:a3:6c:f6:42:49:6c:b5:17:0e:fe:a3:d5:94:c4:5c:d1:d5:2a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Feb 17 19:53:37 2025 GMT
Not After : Feb 16 19:58:37 2026 GMT
Subject: CN=EB2B42AE0088A15BA1067C97C6655E3138B5A978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fc:fe:5e:07:d5:56:32:ef:71:8e:00:d0:b5:
d3:d2:ef:81:08:cf:14:f7:e5:13:b2:66:42:07:48:
bb:0c:92:8a:d2:1e:a8:8a:16:cf:2b:72:97:e2:f2:
f4:72:83:04:4f:c1:ae:29:af:38:cd:ef:09:1e:97:
17:1d:15:cc:ff:7b:f8:6e:f8:d8:db:88:c1:64:9a:
6e:56:87:af:73:82:62:7d:3e:2e:0e:e0:8b:15:40:
76:84:85:f4:ef:61:24:2d:68:4d:a3:d9:47:ca:07:
9c:64:f8:6e:8f:f6:c2:6e:5b:11:d5:32:29:88:b2:
77:2e:66:78:a8:4d:6f:e0:58:4b:fc:9a:92:74:07:
e0:eb:8f:bf:77:42:ca:bf:f3:21:fd:d8:2e:b6:47:
ff:b0:fb:4a:37:24:07:b9:60:aa:38:a4:51:c1:7d:
ac:5d:0d:37:bb:5d:db:98:a4:ce:78:33:8b:45:05:
a9:2b:4a:4a:53:29:eb:46:11:a3:c3:3b:a5:5e:c9:
38:42:7b:2a:57:7f:d9:60:09:97:6c:94:68:16:b2:
33:16:49:24:a6:6d:1a:a4:10:bb:83:f8:d9:47:25:
f3:cb:67:95:06:0d:72:f1:d9:c8:12:ea:70:d3:e4:
ab:76:78:e0:f4:31:62:35:02:a3:08:1c:2b:33:16:
07:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2B:42:AE:00:88:A1:5B:A1:06:7C:97:C6:65:5E:31:38:B5:A9:78
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35362e3234382e302f32342d3234203d3e20323133343037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/24
Signature Algorithm: sha256WithRSAEncryption
37:f9:0b:fc:89:e2:c4:5b:e6:88:81:82:ed:40:a1:76:bc:7b:
34:2b:4a:0d:08:d1:40:d3:71:40:e3:67:14:4e:b2:dc:19:a4:
98:75:76:7b:bc:cf:da:31:ee:eb:b8:b9:98:66:30:74:46:82:
35:14:2e:90:0d:3a:58:34:7d:a5:0e:0d:95:22:68:1b:54:8f:
10:27:af:bf:dd:76:9d:f6:12:2f:ca:fb:92:70:02:26:fc:fa:
b7:44:27:fa:54:e9:3f:04:68:b9:46:d7:9f:a5:44:25:b0:86:
10:31:3d:93:19:e6:61:7c:41:ff:b9:9e:76:61:2f:18:c7:9d:
48:28:25:ab:e2:19:3f:5f:65:ed:6f:aa:a7:13:ff:08:04:63:
bc:6a:21:10:c1:81:55:18:48:07:96:18:02:96:42:fe:d6:f7:
13:ef:68:b6:a8:41:98:ac:c1:11:e7:0d:0b:7c:ba:db:10:ce:
35:12:c1:4b:e6:7d:8c:fb:7f:0d:ae:6b:7e:d4:9c:65:a7:c8:
3c:da:9c:73:c0:fc:e8:bb:f7:d5:a2:d7:25:64:72:ab:82:d5:
19:f9:f5:c9:66:80:50:dd:dd:49:ef:9f:d5:0c:a8:81:29:b4:
ba:39:ea:e2:2d:af:1e:88:dd:f7:97:db:e3:d4:f5:28:5d:57:
a4:83:73:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:38:42 2025 by rpki-client