Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa
File: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (raw, json)
Hash identifier: OZBNVOvtp3V7O1L8kF6JcTp/niAHFDMwWI3RV/AoyZY=
Subject key identifier: 7B:F8:F3:0B:41:AB:53:02:C8:4C:99:3A:9F:DF:46:FE:F9:19:57:57
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 4DA8507541358E2A2BC7AA0E650EAF1AAFFF99E2
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa
Signing time: Thu 19 Dec 2024 15:33:37 +0000
ROA not before: Thu 19 Dec 2024 15:28:37 +0000
ROA not after: Thu 18 Dec 2025 15:33:37 +0000
asID: 49468
IP address blocks: 193.203.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:a8:50:75:41:35:8e:2a:2b:c7:aa:0e:65:0e:af:1a:af:ff:99:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Dec 19 15:28:37 2024 GMT
Not After : Dec 18 15:33:37 2025 GMT
Subject: CN=7BF8F30B41AB5302C84C993A9FDF46FEF9195757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:e2:42:27:09:8a:c0:86:f3:94:e1:10:09:
b8:97:f3:77:44:82:3e:ed:12:b9:ad:34:8a:be:8c:
00:b6:81:ec:1c:a9:83:d4:0b:f2:23:cd:9d:c5:60:
61:0b:1d:d1:1f:1c:d4:c0:6d:39:f5:ff:d4:f5:47:
e3:35:8e:25:7b:00:8f:de:d0:08:0b:dc:0f:d2:af:
ab:2c:e9:f6:17:8a:93:dc:b7:4d:a1:c6:f1:b2:a1:
b1:05:dc:5a:f0:3e:19:fe:dc:26:fd:87:a9:11:c0:
de:ce:78:8a:5b:14:50:e0:ab:66:8a:57:39:2b:b6:
4f:c0:7b:c1:03:e4:f4:b6:4f:05:74:9b:ce:b6:0e:
99:94:f3:9a:b4:0c:5c:af:77:80:fb:28:49:18:ce:
34:95:47:68:e3:6d:c1:a0:74:6d:0e:9c:33:e9:3b:
73:2c:06:cb:5c:bc:8c:e9:1d:e3:23:80:73:19:c6:
3c:e9:29:d3:e9:9b:28:5c:14:40:5f:e4:63:74:65:
da:63:d5:e9:e4:27:ea:0b:49:5d:35:c8:d3:9c:74:
b4:c3:c2:87:2f:f5:c1:0a:2a:c3:62:b5:18:15:a4:
9c:35:e0:bc:04:38:6f:b4:bf:2d:11:7a:3e:af:2c:
72:07:94:cf:b8:e3:6a:24:e7:da:42:73:57:94:f1:
05:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F8:F3:0B:41:AB:53:02:C8:4C:99:3A:9F:DF:46:FE:F9:19:57:57
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.204.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:84:0d:fb:29:d1:78:78:8e:10:61:8d:ae:29:a2:b2:d2:6d:
3c:1f:de:77:8d:0f:33:ce:65:2a:71:82:ea:e6:80:6a:6e:78:
de:b1:66:2f:20:89:87:64:21:36:a2:40:58:3a:27:14:e6:98:
7a:e8:e3:ea:e2:18:0b:0c:18:a2:1f:54:89:1b:0a:3b:3c:7f:
dc:7c:47:02:8b:41:22:53:4b:9c:12:1b:c3:df:a0:cd:41:8b:
ba:97:7d:23:ba:cf:cf:f8:17:ec:29:e0:37:17:66:5d:fc:63:
4f:5a:e3:d8:36:67:ba:ff:36:6c:64:5d:56:a1:35:ed:49:02:
49:a0:74:4b:db:45:9b:65:8d:ef:9b:b1:3a:63:13:23:e1:9f:
b0:55:07:58:e3:c7:0d:1a:76:67:88:be:3e:ff:8e:6a:c8:22:
a7:6c:68:59:c8:47:a5:51:87:be:6b:22:13:aa:26:94:87:93:
32:b7:a0:60:53:69:04:3b:ef:4f:d5:16:0d:85:54:1d:21:b7:
6d:ac:ee:46:75:15:c6:6b:44:71:59:f8:67:e9:4b:35:ce:90:
ea:37:a8:5f:60:3f:17:8f:cc:f1:74:23:eb:70:50:81:9e:93:
37:4a:04:da:45:10:1d:7a:3a:68:c1:13:77:36:fd:ee:44:21:
0f:84:fc:36
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUTahQdUE1jiorx6oOZQ6vGq//meIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi
ZmEyY2NhNDAeFw0yNDEyMTkxNTI4MzdaFw0yNTEyMTgxNTMzMzdaMDMxMTAvBgNV
BAMTKDdCRjhGMzBCNDFBQjUzMDJDODRDOTkzQTlGREY0NkZFRjkxOTU3NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+beJCJwmKwIbzlOEQCbiX83dE
gj7tErmtNIq+jAC2gewcqYPUC/IjzZ3FYGELHdEfHNTAbTn1/9T1R+M1jiV7AI/e
0AgL3A/Sr6ss6fYXipPct02hxvGyobEF3FrwPhn+3Cb9h6kRwN7OeIpbFFDgq2aK
Vzkrtk/Ae8ED5PS2TwV0m862DpmU85q0DFyvd4D7KEkYzjSVR2jjbcGgdG0OnDPp
O3MsBstcvIzpHeMjgHMZxjzpKdPpmyhcFEBf5GN0Zdpj1enkJ+oLSV01yNOcdLTD
wocv9cEKKsNitRgVpJw14LwEOG+0vy0Rej6vLHIHlM+442ok59pCc1eU8QX7AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUe/jzC0GrUwLITJk6n99G/vkZV1cwHwYDVR0j
BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz
Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt
aXpLUS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWEwZGU5N2Yt
N2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQzYzc5LzAvMzEzOTMzMmUzMjMwMzMyZTMy
MzAzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM0MzkzNDM2Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAHBy8wwDQYJKoZIhvcNAQELBQADggEBAG2EDfsp0Xh4jhBhja4porLSbTwf3neN
DzPOZSpxgurmgGpueN6xZi8giYdkITaiQFg6JxTmmHro4+riGAsMGKIfVIkbCjs8
f9x8RwKLQSJTS5wSG8PfoM1Bi7qXfSO6z8/4F+wp4DcXZl38Y09a49g2Z7r/Nmxk
XVahNe1JAkmgdEvbRZtlje+bsTpjEyPhn7BVB1jjxw0admeIvj7/jmrIIqdsaFnI
R6VRh75rIhOqJpSHkzK3oGBTaQQ770/VFg2FVB0ht22s7kZ1FcZrRHFZ+GfpSzXO
kOo3qF9gPxePzPF0I+twUIGekzdKBNpFEB16OmjBE3c2/e5EIQ+E/DY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:48 2025 by rpki-client