Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3134302e302f32332d3234203d3e20383334.roa
File: 3134332e32302e3134302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: tljQr0rnJSCXxAx7Terv+Z7Sm1az9NbppK0xBdZgxWU=
Subject key identifier: 83:F1:28:FA:F5:F0:7F:0C:5E:1B:C3:C9:7C:36:7F:0C:A4:40:59:BE
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 4E2B2C08C36AC346A6DAE89CC4A3EACDBBB9FACC
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3134302e302f32332d3234203d3e20383334.roa
Signing time: Mon 02 Jun 2025 16:40:30 +0000
ROA not before: Mon 02 Jun 2025 16:35:30 +0000
ROA not after: Mon 01 Jun 2026 16:40:30 +0000
asID: 834
IP address blocks: 143.20.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:2b:2c:08:c3:6a:c3:46:a6:da:e8:9c:c4:a3:ea:cd:bb:b9:fa:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 2 16:35:30 2025 GMT
Not After : Jun 1 16:40:30 2026 GMT
Subject: CN=83F128FAF5F07F0C5E1BC3C97C367F0CA44059BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1c:f6:34:ba:49:a5:47:4e:62:57:35:94:59:
dd:31:22:b2:68:26:38:db:e3:61:8f:4e:99:ac:d8:
72:31:3c:ed:9e:ce:e6:4e:72:19:49:e8:14:e1:72:
96:23:d6:94:60:e7:f1:d8:31:b0:9f:d8:16:99:0d:
55:19:70:1a:ef:e1:47:f7:f9:94:76:8d:76:f5:35:
47:a1:51:96:19:f7:3b:2a:97:f4:11:0f:0a:57:cc:
a7:eb:9c:2d:4e:5a:4e:53:c6:33:0a:1f:66:28:52:
ee:ca:b9:b7:e0:b7:a7:e7:ee:4f:6e:26:40:ee:0f:
58:84:a2:ed:8c:68:e9:b7:66:6b:3d:13:2c:f2:ad:
a4:85:37:61:1b:09:8d:62:43:5b:f6:2f:59:ea:2a:
31:a9:ea:37:1d:ce:3f:ef:3f:12:db:ed:20:21:a5:
28:ee:2a:c6:26:a7:25:40:20:9e:0c:3f:6e:d6:45:
48:a5:b7:3d:83:2a:9c:bf:5b:53:ed:35:a8:03:47:
9e:6b:3f:24:06:ca:26:26:74:16:db:6b:f7:08:a8:
79:9a:b4:e9:e1:62:49:fe:ce:76:e5:34:35:79:d8:
59:5b:b1:d4:2f:7b:a1:16:7d:2f:ab:fc:d9:b6:6f:
82:b9:7f:c8:bd:91:12:28:67:aa:6e:06:21:f1:f1:
d0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F1:28:FA:F5:F0:7F:0C:5E:1B:C3:C9:7C:36:7F:0C:A4:40:59:BE
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3134302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.140.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:3f:12:6c:62:e5:3e:9e:53:06:d6:3d:cb:19:58:96:28:da:
a3:e5:2e:e0:98:3d:a8:92:f9:a4:12:6e:ae:f0:22:aa:1b:cf:
90:88:a7:49:6c:06:f1:08:d6:b7:8d:32:69:71:76:b3:80:84:
98:d1:34:54:19:b3:5a:81:ba:38:28:c2:1c:14:68:8c:69:67:
34:c5:bd:7a:e5:5a:04:1c:7d:fb:27:a6:5b:3c:06:93:50:ca:
73:e1:23:a5:e5:06:33:03:ac:c1:2f:9a:e5:10:ea:3d:6c:71:
c0:7c:42:4a:0c:35:52:28:8b:93:1d:3e:62:c9:56:99:e2:6e:
2f:46:9c:29:2f:51:03:ce:14:ce:aa:ec:91:aa:8b:25:4f:02:
de:2e:52:0e:08:3a:ff:12:38:5c:90:43:18:ad:6a:75:37:98:
df:be:6c:a2:93:75:7a:68:1e:59:2d:4c:b0:f1:20:51:8b:f8:
2a:c3:29:bd:5b:07:3d:b9:d3:c3:84:5f:0f:92:48:a8:99:d4:
56:a2:f5:b6:68:86:a0:94:97:18:b5:a4:8e:51:81:26:3a:ef:
f6:6d:60:9b:e3:8c:0e:bf:8d:75:10:2a:c9:68:e9:68:ff:88:
a3:c0:75:2f:17:bb:f4:9d:46:f2:de:e1:30:f7:37:03:d0:d0:
aa:3a:b3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:26:11 2025 by rpki-client