Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3137392e302f32342d3234203d3e20383334.roa
File: 3134332e32302e3137392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: dxHjzAV4/KsCfuZTN+n5dv+Lwf6aABMzeq8J2oyGNCU=
Subject key identifier: E9:B1:D6:1D:32:57:62:BE:91:A1:4F:93:3A:4C:E2:84:34:0A:CE:55
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 607B57AA34FB505E4F6AC6B4F3718AA21E6A1AFB
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3137392e302f32342d3234203d3e20383334.roa
Signing time: Mon 02 Jun 2025 16:52:40 +0000
ROA not before: Mon 02 Jun 2025 16:47:40 +0000
ROA not after: Mon 01 Jun 2026 16:52:40 +0000
asID: 834
IP address blocks: 143.20.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:7b:57:aa:34:fb:50:5e:4f:6a:c6:b4:f3:71:8a:a2:1e:6a:1a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 2 16:47:40 2025 GMT
Not After : Jun 1 16:52:40 2026 GMT
Subject: CN=E9B1D61D325762BE91A14F933A4CE284340ACE55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e2:55:19:de:b9:b5:34:4b:27:cc:a0:a0:7f:
b7:96:95:55:de:2d:25:78:7c:03:5f:7e:ab:f4:b0:
d2:58:1b:99:97:27:bf:f8:25:7f:96:15:a1:a5:43:
14:f8:bb:f5:a9:75:78:61:4d:7f:a3:95:ad:9b:21:
aa:cd:04:4c:7a:80:4a:b8:2d:93:da:40:6c:76:3b:
8c:be:90:05:75:93:6d:55:7b:88:25:3d:32:05:8c:
fd:31:bd:e9:4a:02:36:e4:b9:4e:d3:19:02:d9:99:
bc:22:4c:ed:95:45:53:4e:e6:fa:44:34:9b:b7:ae:
ed:27:9b:bf:2e:78:95:fc:3f:ac:45:f3:b9:3b:f5:
22:12:57:a6:97:58:a5:dc:ac:08:cb:65:bf:aa:bc:
50:4f:f4:a3:a0:65:16:de:a2:fc:66:63:ee:3a:05:
d1:82:90:96:70:f8:fe:3a:af:2a:3c:08:68:dd:37:
c0:d7:1a:ba:75:f9:50:49:16:85:67:74:9d:9c:12:
e9:e6:97:1d:0a:3f:5b:88:a6:4e:0f:3b:78:0b:08:
98:e2:d9:8c:1c:1f:97:d1:f1:78:0f:33:14:55:4d:
5a:39:69:42:09:6d:1d:91:f0:e6:ce:1f:58:ae:81:
48:c5:8b:c9:6b:b1:d9:ea:0c:50:68:33:04:e8:c7:
c9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B1:D6:1D:32:57:62:BE:91:A1:4F:93:3A:4C:E2:84:34:0A:CE:55
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3137392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.179.0/24
Signature Algorithm: sha256WithRSAEncryption
56:6e:57:6a:f5:f8:4a:e1:b8:b6:c7:0e:67:6f:71:79:fb:99:
7b:80:0f:d6:a4:d1:bc:91:fb:22:a0:7c:7b:1c:6d:c4:01:ce:
c9:50:ca:e3:21:2b:20:cb:c2:a5:73:3d:47:aa:34:b4:fe:94:
4a:43:8e:b9:3f:5d:07:6a:14:d6:2e:27:c7:2d:c6:f9:91:5a:
a0:8a:66:95:77:ce:47:8c:31:1f:b1:a7:02:9d:4a:f3:e1:58:
69:b2:c4:94:26:65:ac:4e:eb:d9:4f:8e:91:06:2d:88:06:ef:
4d:30:9e:be:76:1e:37:ac:6f:8d:2e:e6:11:50:e5:0f:84:33:
df:b2:ae:12:05:51:cd:96:be:63:7d:ca:e0:b0:aa:13:cc:06:
b1:6b:de:c9:60:9c:1f:89:76:81:8f:8e:65:4d:33:43:d2:e3:
7b:f6:6c:7e:7e:04:b5:50:fc:6f:43:ae:89:7d:dc:8a:ed:e0:
0f:ce:01:82:a7:b2:dc:b1:34:20:b9:f3:7f:e9:4f:11:bd:de:
eb:45:4e:45:46:75:19:a1:c8:1e:f2:04:db:11:b4:52:cb:54:
ca:50:ba:cd:92:00:dc:21:8f:5c:e7:04:47:c8:f6:4e:e5:fa:
04:5c:11:6b:0c:a1:c1:de:4f:0c:42:0b:3e:81:bb:70:8a:a4:
5b:82:3c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:20:58 2025 by rpki-client