Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/39312e3230372e31332e302f32342d3234203d3e203532313132.roa
File: 39312e3230372e31332e302f32342d3234203d3e203532313132.roa (raw, json)
Hash identifier: +JU+ydXmMjIBHlt1kVXfkJBGqdmH1ATfk8PRfe8t4Rc=
Subject key identifier: 2B:9C:37:0D:F0:25:B6:CF:A3:76:AA:A7:D9:55:1B:A1:AA:17:6E:D1
Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace
Certificate serial: 574E4A102A80B104EABCE9E082456E6CEBBF2040
Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/39312e3230372e31332e302f32342d3234203d3e203532313132.roa
Signing time: Tue 14 Jan 2025 09:35:51 +0000
ROA not before: Tue 14 Jan 2025 09:30:51 +0000
ROA not after: Tue 13 Jan 2026 09:35:51 +0000
asID: 52112
IP address blocks: 91.207.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:33:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:4e:4a:10:2a:80:b1:04:ea:bc:e9:e0:82:45:6e:6c:eb:bf:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace
Validity
Not Before: Jan 14 09:30:51 2025 GMT
Not After : Jan 13 09:35:51 2026 GMT
Subject: CN=2B9C370DF025B6CFA376AAA7D9551BA1AA176ED1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d2:f8:a2:12:1c:35:fa:e2:5d:ac:99:29:84:
86:3a:f6:cb:e6:6b:de:a3:8a:e9:12:48:da:c2:a5:
39:d4:2f:cb:f1:9b:70:d6:1b:5b:8d:0e:51:2f:75:
92:0f:cf:52:61:ee:75:6b:48:e2:da:5c:f7:21:9b:
a6:b3:09:8b:3b:84:91:25:a9:c5:b4:31:ef:51:60:
06:a7:25:b1:a1:93:ba:e2:4d:25:19:e0:a4:1a:50:
5b:7f:61:74:ad:04:15:29:4f:7e:4f:0c:17:70:ec:
b5:e3:68:a0:7e:b3:5d:ab:22:68:3d:c2:26:22:6e:
23:84:1e:1e:85:23:ea:d3:b7:0e:36:8f:f3:2f:9c:
b7:28:77:31:d8:22:65:32:49:c4:9b:8e:24:3d:51:
be:8a:0a:f6:eb:80:7d:fd:79:db:b7:9d:71:9a:f6:
4f:cc:78:6d:cc:1f:92:64:06:0e:97:c9:de:38:38:
9c:4c:ac:24:f6:fd:11:bc:42:33:30:43:58:ed:b1:
55:77:60:ff:26:b9:6e:fa:38:ac:df:65:cb:b9:46:
3b:b0:68:ba:be:00:1b:ad:38:ed:ae:6e:97:ea:8e:
3b:a8:42:09:76:81:0c:2d:25:3f:ad:91:c3:42:ab:
73:62:fa:60:1b:c9:69:eb:d3:94:07:f5:ed:9a:73:
1e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9C:37:0D:F0:25:B6:CF:A3:76:AA:A7:D9:55:1B:A1:AA:17:6E:D1
X509v3 Authority Key Identifier:
keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/39312e3230372e31332e302f32342d3234203d3e203532313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.13.0/24
Signature Algorithm: sha256WithRSAEncryption
71:3f:c1:68:96:25:45:aa:f2:2a:60:07:cf:53:70:20:62:06:
07:16:64:cf:69:84:55:15:54:3e:dc:10:6d:a0:27:22:0c:cf:
4e:8f:3e:62:d1:62:bd:d5:fb:7e:99:77:fa:d4:70:b9:64:49:
2f:fb:0d:58:9a:14:fd:e4:8d:b7:9d:d9:ef:7d:6b:e5:91:57:
33:92:3c:61:78:3f:9f:cb:65:6d:13:56:0a:d0:ee:bb:a0:92:
5c:c2:0d:13:4b:4a:d1:fd:c8:85:fb:a4:b2:bc:b0:db:4e:6f:
ac:03:55:cb:64:25:7b:5d:0f:2f:cb:c1:b4:f6:0c:a4:8e:f9:
84:9f:96:10:10:bb:99:b2:c7:71:3a:d7:fe:c9:ed:34:55:c5:
0a:e9:ee:b7:84:c9:b9:88:25:79:5e:a0:d6:8e:bd:0f:94:07:
c2:f2:91:ca:f0:cc:6e:2a:8c:d1:b9:98:77:56:5a:78:0e:03:
6c:db:57:3e:03:e1:4e:28:7c:2e:98:2b:49:66:51:3b:66:bf:
8c:15:25:fd:63:e6:69:8f:d0:db:6f:ff:a3:f7:a9:8a:85:91:
20:fa:58:d8:2d:49:a2:4b:1e:9e:8a:03:b8:5a:7a:2b:ca:a4:
4e:c8:97:4c:bb:b9:6c:09:12:84:d2:55:07:1d:33:45:c2:16:
3c:88:a2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:13 2025 by rpki-client