Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/3130342e3136372e31392e302f32342d3234203d3e20333936303634.roa
File: 3130342e3136372e31392e302f32342d3234203d3e20333936303634.roa (raw, json)
Hash identifier: 6fhYYyEnaWNq97PI/L9874+nfD60vOGcyWKDeMmVfsI=
Subject key identifier: B6:20:D0:08:09:AF:0F:4F:D9:E9:19:62:73:49:74:2E:B2:37:A8:7D
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 08495792C6AD7D7593C87BEA94CC285271D6EEDA
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/3130342e3136372e31392e302f32342d3234203d3e20333936303634.roa
Signing time: Sun 23 Mar 2025 17:12:35 +0000
ROA not before: Sun 23 Mar 2025 17:07:35 +0000
ROA not after: Sun 22 Mar 2026 17:12:35 +0000
asID: 396064
IP address blocks: 104.167.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 04:09:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:49:57:92:c6:ad:7d:75:93:c8:7b:ea:94:cc:28:52:71:d6:ee:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: Mar 23 17:07:35 2025 GMT
Not After : Mar 22 17:12:35 2026 GMT
Subject: CN=B620D00809AF0F4FD9E919627349742EB237A87D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:c0:f3:f6:31:38:02:6b:ce:d1:9b:e9:70:
f0:04:d4:23:d3:ca:7f:0d:0b:79:97:cd:4e:0d:3f:
b6:05:d9:a4:53:4e:c4:4f:bd:e7:3b:15:cd:ac:94:
f7:03:67:39:34:67:e0:09:3b:ff:2c:de:2f:62:de:
2f:98:48:f8:59:d1:41:b1:22:8a:dd:97:ef:ed:a3:
0d:5d:c5:78:c8:1c:7b:59:54:bc:7e:7f:37:77:e7:
99:14:16:d5:f7:07:57:e7:f2:81:58:c3:e6:e1:ee:
c4:9b:57:19:ca:f8:e4:32:83:2e:31:b4:43:69:7c:
f5:38:cb:32:e4:ee:7b:b7:fb:76:67:3a:8d:76:91:
7f:03:e5:96:0c:d4:c6:d0:a8:04:96:1a:5a:0a:2a:
20:26:68:32:20:bd:3f:de:fe:a9:3e:41:38:6a:94:
07:49:42:0d:b4:f9:80:a8:f8:c8:5a:f4:a4:3b:ca:
4b:09:91:83:8b:6d:0b:01:61:5b:71:ce:cb:4f:ec:
e2:e0:e4:53:a7:dc:1c:a3:1f:63:56:10:c0:b0:d4:
4f:3e:e0:8e:3f:9c:1d:dc:e9:0e:20:09:c9:7b:2a:
93:e6:ac:49:15:50:ae:20:57:da:c1:1c:a6:db:43:
87:9b:c6:cd:8b:4a:e3:32:da:ae:83:68:57:fc:75:
f7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:20:D0:08:09:AF:0F:4F:D9:E9:19:62:73:49:74:2E:B2:37:A8:7D
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/3130342e3136372e31392e302f32342d3234203d3e20333936303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.167.19.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:7c:7f:d2:46:56:b4:7b:ca:df:b6:b5:f1:11:ce:a0:dc:fb:
0b:f8:ad:75:f6:ed:12:d5:6d:9c:a5:f1:80:cb:e3:fb:6f:6a:
99:0e:27:33:7b:1c:b6:63:10:ae:0d:00:d9:0a:b9:a9:87:bd:
da:37:1d:f5:e7:c1:e2:83:44:92:3e:c7:71:14:8c:ac:4b:bb:
12:d2:ad:2d:b5:ad:b5:e4:1d:1f:b9:92:5f:33:8e:67:d4:97:
09:36:10:d5:21:3a:ab:d9:b2:c6:18:d0:f5:a6:e5:21:73:d1:
d3:a4:ac:22:8a:f1:3f:27:9f:60:98:18:8b:f5:bd:fa:6d:dc:
91:a4:e4:93:b9:cc:61:8e:a3:9f:60:5e:03:b2:4e:75:16:f3:
81:fb:c5:fe:da:db:49:c3:62:d0:2c:0f:ff:30:bd:14:58:12:
e8:dd:14:f2:da:50:8a:da:60:90:a5:e5:13:f9:9d:c1:b1:20:
4a:27:a7:5a:6d:2e:de:5e:37:a5:09:ca:57:7c:8f:77:6a:c0:
1d:3a:67:5d:3d:f1:40:95:14:47:85:f0:e1:cd:26:72:12:ae:
73:d5:04:64:f5:6e:f7:99:5a:85:42:d2:6b:4f:94:b1:be:ff:
4a:dd:be:55:39:79:d0:55:c8:ac:fc:ea:e6:01:11:86:6d:ec:
19:f6:7f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:13:51 2025 by rpki-client