Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3139332e31372e39352e302f32342d3234203d3e20383334.roa
File: 3139332e31372e39352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: zN2mC7kAO+LN5wWOUVAJTVAXXdOR6lFz5M5pjtvHM58=
Subject key identifier: C4:2C:31:EF:DB:4F:19:09:F9:12:9D:1A:ED:E1:63:41:FE:1C:48:B3
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 6D70AE7799BE5C5F4D12117BBCE9A4872BB2DD92
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3139332e31372e39352e302f32342d3234203d3e20383334.roa
Signing time: Fri 23 May 2025 12:37:23 +0000
ROA not before: Fri 23 May 2025 12:32:23 +0000
ROA not after: Fri 22 May 2026 12:37:23 +0000
asID: 834
IP address blocks: 193.17.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 02:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:70:ae:77:99:be:5c:5f:4d:12:11:7b:bc:e9:a4:87:2b:b2:dd:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: May 23 12:32:23 2025 GMT
Not After : May 22 12:37:23 2026 GMT
Subject: CN=C42C31EFDB4F1909F9129D1AEDE16341FE1C48B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:7c:3e:c2:44:1a:9a:34:30:b5:0b:09:e2:
1b:b0:92:c9:1d:80:48:38:58:bc:22:0d:46:6a:34:
a9:13:fb:2c:38:f7:3c:92:18:43:b7:19:69:68:da:
f9:15:32:fa:cd:65:fc:6e:d1:17:3a:a2:b4:96:8f:
d8:ea:ad:a8:86:4c:ff:11:b5:19:59:f9:5e:6d:54:
2c:3a:7a:4e:a7:d8:eb:21:27:38:df:2f:fd:0f:08:
50:7d:ab:55:ac:7b:a2:50:5c:31:e6:33:18:c3:ea:
f5:e4:9a:fd:78:a3:1e:f8:09:4c:75:9e:63:0c:a8:
4f:85:65:bf:6c:df:ea:08:d6:66:5e:b0:6a:7a:6c:
2c:6c:13:bf:ae:93:a8:71:62:e6:e3:69:92:b1:cc:
65:5a:a4:82:74:c1:ce:d4:5d:0f:3e:8f:9a:d1:f0:
2a:82:92:e5:e2:b1:ce:d2:49:af:74:f0:7a:82:f8:
21:5b:13:c0:89:e4:99:c4:ac:60:5a:ad:98:26:11:
de:cf:c5:85:4c:c6:5a:bc:04:22:c8:82:fc:ef:b4:
02:4d:1b:e9:2c:82:04:3e:64:26:9e:fd:89:c2:ec:
30:af:51:64:ab:88:ec:f0:8b:ab:4d:01:3d:ef:4e:
b5:e9:ee:78:08:05:49:45:74:86:c1:9a:a4:8b:df:
2e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2C:31:EF:DB:4F:19:09:F9:12:9D:1A:ED:E1:63:41:FE:1C:48:B3
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3139332e31372e39352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.95.0/24
Signature Algorithm: sha256WithRSAEncryption
13:aa:e9:ba:9d:7b:25:ae:15:21:26:16:f6:7b:42:73:24:3a:
88:4e:53:73:13:15:e1:9d:40:9b:f1:7f:51:44:c5:cb:c8:0b:
d2:34:65:24:c2:f0:22:12:9d:d6:5c:7d:4e:dc:df:12:b8:22:
f8:e6:ef:ae:43:2d:88:1f:2d:0f:ff:c8:34:be:ec:d0:60:ff:
19:d3:3e:06:ce:41:fc:ac:53:20:51:1b:7a:4e:e9:0a:a3:39:
40:8d:17:b0:49:62:1c:d7:27:b6:d6:d3:6f:22:a0:5b:d5:1f:
24:59:6e:7a:ee:f7:61:58:c4:8b:36:e6:9b:63:0d:05:54:5f:
2f:2a:48:fa:76:17:83:35:e8:ea:5c:dd:2c:d1:65:38:cc:e6:
17:11:80:db:f4:15:95:4e:7f:54:10:15:7d:3c:b6:8b:5c:1f:
06:cd:af:f4:0a:90:3c:29:ef:34:84:ee:34:f9:7d:f6:d4:e4:
e6:fc:43:ae:09:71:af:ab:80:74:a9:c7:b9:69:2a:01:cb:a5:
94:83:5d:1c:83:86:2f:80:a0:63:98:2b:a8:e1:95:cf:41:fe:
0e:2b:53:31:61:e0:c2:0e:87:51:3c:f1:18:9d:5a:1e:08:94:
fa:f3:51:1c:b5:fb:23:bb:eb:ad:4d:3c:28:c4:35:55:e1:a4:
ad:e9:4b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:33:48 2025 by rpki-client