Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/3130342e3136372e31392e302f32342d3234203d3e20323135323438.roa
File: 3130342e3136372e31392e302f32342d3234203d3e20323135323438.roa (raw, json)
Hash identifier: GMEP9iKl4Ev2lmXnOs/u75idB5oA52kN/Oszr3FXVVw=
Subject key identifier: ED:05:06:92:73:B4:DA:74:AD:89:8C:8B:7E:57:DD:F9:F0:C6:98:72
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 34B36647739B35C4B68B57D8668F2DE47BA817E2
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/3130342e3136372e31392e302f32342d3234203d3e20323135323438.roa
Signing time: Sun 09 Feb 2025 15:03:59 +0000
ROA not before: Sun 09 Feb 2025 14:58:59 +0000
ROA not after: Sun 08 Feb 2026 15:03:59 +0000
asID: 215248
IP address blocks: 104.167.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 04:09:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:b3:66:47:73:9b:35:c4:b6:8b:57:d8:66:8f:2d:e4:7b:a8:17:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: Feb 9 14:58:59 2025 GMT
Not After : Feb 8 15:03:59 2026 GMT
Subject: CN=ED05069273B4DA74AD898C8B7E57DDF9F0C69872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4c:0e:35:3a:41:54:87:5c:cb:6f:d1:01:e7:
fb:63:63:f7:1f:a0:4c:d0:b4:77:aa:76:fb:79:31:
60:00:64:4d:a3:9b:61:15:e4:fd:3d:6c:10:ca:9a:
36:c0:4e:f5:fd:dd:15:15:24:83:10:fc:fc:eb:de:
79:09:48:55:2f:17:be:78:fe:c3:d9:79:aa:44:6d:
6b:07:20:cd:7f:ed:29:33:91:f3:97:aa:43:10:ab:
f7:e5:ac:94:42:72:ff:aa:72:87:b9:60:09:39:3b:
a3:0f:48:30:20:35:3a:70:8d:69:26:01:0d:87:df:
7e:23:5a:57:45:e6:c8:ea:b5:6f:4e:2c:5b:34:0f:
f8:d4:04:a5:96:cf:cc:77:37:9f:31:2c:4f:e8:fe:
98:5d:4b:3a:74:37:4e:90:75:90:ef:e9:4d:cc:78:
14:6a:ad:50:35:d8:c4:79:a2:3c:9e:51:0f:59:1c:
37:fa:a3:06:e5:9b:fb:62:f0:31:d4:da:94:df:60:
b5:ce:96:1a:c6:3a:b3:7e:43:fc:6e:f5:db:77:e3:
2a:6a:ec:58:8d:45:09:64:98:99:94:c0:58:c2:ba:
9e:e1:fc:58:77:c5:7e:b7:62:bb:fa:47:c1:00:82:
bd:07:c6:a3:3b:3d:5b:6b:45:3f:da:28:c5:4f:d6:
f2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:05:06:92:73:B4:DA:74:AD:89:8C:8B:7E:57:DD:F9:F0:C6:98:72
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/3130342e3136372e31392e302f32342d3234203d3e20323135323438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.167.19.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:a2:0a:ae:3e:c3:74:74:fb:0f:b7:4d:fb:08:bd:ad:2d:2e:
39:d4:77:0d:ab:30:02:74:5b:cb:cc:a0:ca:18:99:dd:dc:f1:
b8:b6:e3:6f:bc:49:6e:8c:cf:99:ec:10:ee:68:6c:27:a1:2d:
c1:e0:a6:6f:ad:0b:6f:f5:b4:12:66:2f:eb:db:2f:6b:d1:10:
cb:1f:3f:38:6f:2a:13:87:24:17:0c:bf:6e:2b:08:be:72:68:
f8:fe:c1:e0:7b:f6:a5:55:e0:63:2e:e8:ea:e7:0a:89:95:01:
d1:51:6f:9a:02:b9:dd:b1:a2:83:76:9c:f8:38:78:9c:c4:65:
82:19:3e:85:ef:f1:02:3e:6f:14:19:4f:67:4a:42:4c:ef:53:
fa:1e:81:71:c7:34:94:e0:52:bc:f0:8b:92:08:d2:fb:c6:be:
81:d3:3a:48:0b:47:ef:87:3a:0d:78:72:87:13:80:7d:56:b2:
26:d0:b7:c1:b6:7f:4b:31:d9:8c:6b:c0:0e:bf:77:a8:71:89:
e4:06:9d:1d:f3:e8:f0:18:20:4a:f9:ec:36:5d:1e:31:a0:40:
93:33:e7:7b:82:50:fb:3a:12:07:5e:3e:73:bc:ba:8a:1a:d0:
59:3f:6f:70:36:c6:25:c1:a9:54:a7:a2:6c:32:cb:f9:f3:76:
54:81:56:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:12:22 2025 by rpki-client