Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3137382e302f32342d3234203d3e20313336353031.roa
File: 3134332e32302e3137382e302f32342d3234203d3e20313336353031.roa (raw, json)
Hash identifier: KUM4cAemzeFHq1qaU1O5SLUxsNPJN+VInRDA98I9j5E=
Subject key identifier: 6C:3F:88:CF:EC:E5:AD:A5:97:6C:CC:EB:1F:83:A9:BF:FA:7A:67:62
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 45217AEC5529FA09ED173D98784E48B9548844F2
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3137382e302f32342d3234203d3e20313336353031.roa
Signing time: Tue 13 May 2025 06:34:54 +0000
ROA not before: Tue 13 May 2025 06:29:54 +0000
ROA not after: Tue 12 May 2026 06:34:54 +0000
asID: 136501
IP address blocks: 143.20.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:21:7a:ec:55:29:fa:09:ed:17:3d:98:78:4e:48:b9:54:88:44:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 13 06:29:54 2025 GMT
Not After : May 12 06:34:54 2026 GMT
Subject: CN=6C3F88CFECE5ADA5976CCCEB1F83A9BFFA7A6762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4c:c4:34:d7:f6:ba:db:1d:42:02:06:8d:57:
3f:05:fd:a2:99:5f:b2:57:47:49:8f:67:33:16:50:
88:c5:0f:37:5b:20:84:c6:3b:1f:e5:41:91:20:c6:
a2:be:2f:74:ce:59:22:17:8d:e9:00:3b:d2:6d:f3:
08:a8:f2:f9:de:45:16:c2:52:38:c2:2e:84:90:53:
cb:9c:8b:94:cb:4c:e9:18:75:2f:0b:f2:cd:e7:21:
e8:06:43:f5:ea:20:76:cb:e7:e2:ed:ba:0b:aa:b9:
44:42:c8:2a:e8:02:86:ad:f6:b3:69:b7:47:67:01:
ca:b3:86:71:2f:99:79:dc:3b:17:ea:fb:d0:07:ba:
20:76:6c:72:6d:48:b8:64:72:cc:84:39:5e:2e:05:
2f:29:88:8d:53:37:ab:12:a4:42:5b:3f:7d:47:23:
fb:e2:6b:f9:3f:b4:57:29:1e:9b:ad:32:35:68:44:
25:b9:ba:52:dd:05:ac:91:a2:65:7d:2f:2b:73:02:
ba:d9:fc:28:a1:5f:64:7b:c9:7a:ab:a6:d5:67:c0:
52:a0:38:c1:ca:d5:da:7a:70:9b:a3:c5:26:c6:6c:
d2:8e:f7:ee:da:4a:28:8c:a5:cb:7f:84:55:98:6e:
67:49:e6:b1:6c:0c:08:90:89:6e:d6:4a:ec:d5:68:
16:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3F:88:CF:EC:E5:AD:A5:97:6C:CC:EB:1F:83:A9:BF:FA:7A:67:62
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3137382e302f32342d3234203d3e20313336353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.178.0/24
Signature Algorithm: sha256WithRSAEncryption
80:8b:c1:f5:f6:40:06:d3:9b:3a:72:71:0f:5f:ec:7c:2c:a2:
78:59:ac:a1:db:a6:93:d8:be:f4:00:3a:01:e8:53:ee:a3:84:
aa:64:90:94:62:20:24:f6:5d:43:db:33:03:cf:53:34:00:8a:
ce:be:ad:48:94:9c:d6:1d:c2:47:09:23:8e:8d:ae:3c:64:84:
e9:02:9b:5b:48:fe:17:3e:95:4f:ae:5b:55:a7:e3:94:2a:f5:
fa:f5:12:06:a9:b9:49:f5:38:9a:cc:60:8c:26:34:63:94:09:
d4:11:37:1b:38:5e:09:15:93:34:ac:94:aa:77:fb:43:fd:e8:
c5:b9:6e:f0:c2:93:48:d4:f2:06:9b:8e:72:35:33:59:74:68:
4b:21:a0:59:86:41:3f:5b:bf:0c:cd:93:11:9d:fd:e2:f5:08:
54:fa:d2:4e:cb:4d:a7:eb:5c:a4:d1:85:d5:a0:a4:ba:2b:3c:
59:9e:44:44:73:64:2a:2d:be:c4:be:00:b4:7d:88:3c:95:ef:
ef:5e:b5:c0:d6:f9:ed:83:83:5a:5a:5e:f9:85:a5:2b:44:19:
c8:32:2c:49:76:52:80:9a:10:4e:13:fa:d7:14:19:9c:45:30:
f1:4a:ae:24:06:1c:a8:7a:44:4e:1e:9b:6e:5b:a4:39:f4:39:
00:5f:42:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:36:15 2025 by rpki-client