Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132382e302f32342d3234203d3e20313531313036.roa
File: 3130332e34392e3132382e302f32342d3234203d3e20313531313036.roa (raw, json)
Hash identifier: HL45eJnir0ANSqJxd9jJGONXxdI92IE0Znx/CdZHabE=
Subject key identifier: CE:F0:C7:2C:63:C1:E7:15:30:F3:14:A9:DF:81:1D:2F:8A:1E:D4:9F
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 17A2D3E4386632C9078155CAB667821F726D5BE8
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132382e302f32342d3234203d3e20313531313036.roa
Signing time: Thu 09 Jan 2025 08:18:58 +0000
ROA not before: Thu 09 Jan 2025 08:13:58 +0000
ROA not after: Thu 08 Jan 2026 08:18:58 +0000
asID: 151106
IP address blocks: 103.49.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:a2:d3:e4:38:66:32:c9:07:81:55:ca:b6:67:82:1f:72:6d:5b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Jan 9 08:13:58 2025 GMT
Not After : Jan 8 08:18:58 2026 GMT
Subject: CN=CEF0C72C63C1E71530F314A9DF811D2F8A1ED49F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:0c:b7:2c:fa:d4:44:cd:08:e0:60:d2:c5:
33:4e:b2:bf:d6:7c:ef:9d:5a:b0:2e:c7:1d:a2:9d:
b4:c5:54:0c:db:ca:eb:50:5b:ea:65:3f:8c:a2:bc:
bc:ac:e1:03:a5:88:c6:c4:25:ee:3c:83:69:cc:67:
69:da:aa:a0:e0:0f:a0:6d:f9:96:8b:8c:db:ad:a0:
f3:36:33:1e:67:a2:2c:01:33:24:15:6b:b7:71:33:
9b:5f:e3:36:6a:d6:5e:99:80:5a:2f:00:e9:e4:a3:
e6:4d:14:cf:e0:34:49:69:76:06:ea:7a:ca:9e:de:
96:4f:fe:e9:7b:ec:ef:95:77:e9:a9:8c:61:d5:84:
8b:57:5b:ff:57:74:7d:d4:58:59:c4:a9:b7:57:da:
1f:9e:24:49:9f:9a:db:6b:d4:e3:b7:08:b9:0a:72:
6e:ac:3b:a7:f0:a0:ca:ce:ee:d3:a6:be:79:aa:95:
69:78:c8:7a:78:bc:01:e3:c4:ab:16:b5:cb:b4:ab:
cd:6d:a9:1b:1a:7e:86:1e:73:89:3b:5c:88:64:88:
37:41:71:fa:53:51:28:00:fe:7e:f0:72:11:c9:e9:
1c:3e:46:b5:f1:27:83:05:26:ef:84:f1:b4:ce:0b:
5a:4f:b4:b8:cd:26:b5:ad:f9:4e:50:80:ce:fe:50:
1d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F0:C7:2C:63:C1:E7:15:30:F3:14:A9:DF:81:1D:2F:8A:1E:D4:9F
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132382e302f32342d3234203d3e20313531313036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.128.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:1a:6f:42:13:22:d0:29:ef:51:68:49:91:fc:52:e5:16:58:
71:6c:d1:b8:25:cc:60:50:c6:00:d0:ca:d4:92:df:b9:5c:f0:
2d:62:0d:d9:0e:96:63:27:7a:a9:95:8a:75:f7:55:82:76:0e:
95:d9:42:3c:24:43:1a:ef:ea:3a:2f:c8:ac:0f:39:d1:30:6a:
d4:40:fa:2a:a4:67:07:f4:47:e9:26:09:ca:d3:c5:7c:a4:1f:
98:06:8c:88:4d:ca:f1:3e:d5:61:88:09:af:05:80:c5:ce:ca:
cc:c2:d0:4d:f5:fe:f2:a6:20:de:1a:5d:f6:a6:ca:a4:b4:69:
b5:7c:23:b9:16:ed:90:cd:c4:7a:8b:f3:63:d8:24:63:ef:00:
59:88:42:5d:13:c2:f7:96:ac:4a:7f:52:ad:69:3d:77:1e:fe:
70:3c:40:62:b7:da:1b:70:2d:7b:8d:f0:23:cc:b0:49:4e:a0:
b7:b8:7f:a7:5c:e4:4e:b8:c9:1b:fe:8f:57:d7:f9:15:19:cd:
e0:fc:31:24:2d:07:85:13:49:bd:34:f9:c9:93:ed:5f:4b:2a:
0a:0e:b0:af:0f:7e:d3:33:25:62:11:85:7e:f1:1f:10:28:4a:
11:73:cb:24:ae:ff:13:53:ce:bb:57:39:2b:b8:82:f4:ca:39:
cd:18:05:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:05:12 2025 by rpki-client