Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132392e302f32342d3234203d3e20313531313036.roa
File: 3130332e34392e3132392e302f32342d3234203d3e20313531313036.roa (raw, json)
Hash identifier: nm6tKt2J8E7VSHbFz5buz+D+1W6oGfXycRXdu93D8lg=
Subject key identifier: 5C:74:A2:A1:D1:12:67:F0:2A:E8:DA:5B:7B:58:F0:52:02:87:1D:27
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 3D184C7C2C940EEEABF3B9741D797537236E7487
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132392e302f32342d3234203d3e20313531313036.roa
Signing time: Thu 09 Jan 2025 08:18:58 +0000
ROA not before: Thu 09 Jan 2025 08:13:58 +0000
ROA not after: Thu 08 Jan 2026 08:18:58 +0000
asID: 151106
IP address blocks: 103.49.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:18:4c:7c:2c:94:0e:ee:ab:f3:b9:74:1d:79:75:37:23:6e:74:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Jan 9 08:13:58 2025 GMT
Not After : Jan 8 08:18:58 2026 GMT
Subject: CN=5C74A2A1D11267F02AE8DA5B7B58F05202871D27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:ed:fe:c1:70:19:3e:2a:73:b3:5c:a4:0c:
f6:bd:56:2e:70:50:06:0a:31:e7:2f:53:7f:ac:88:
78:c4:85:37:4b:82:7a:c3:0e:54:68:9c:85:42:8b:
8b:17:b5:d1:23:88:4e:49:c0:db:59:b3:31:3b:52:
d6:89:22:a3:7a:78:8b:02:75:f2:1a:8c:e5:fa:89:
47:6f:ee:83:e1:93:46:59:a9:fd:b4:3c:cf:b5:a9:
3b:7e:15:d6:40:17:bf:79:5e:56:3d:31:93:02:85:
f3:b6:02:a7:cb:b7:7a:b9:6b:b0:33:00:cf:e3:9d:
14:ac:8c:f2:28:51:35:5d:5e:ef:dd:22:40:3d:df:
b7:77:b5:b9:4b:10:01:c0:5f:2a:64:b3:34:83:e4:
ed:99:47:58:7e:a0:56:4e:ca:a3:0c:4a:90:db:24:
39:f5:15:90:3d:ce:8f:da:a1:76:9c:8b:ab:01:05:
9b:e3:07:1d:25:b2:c0:79:65:83:f0:63:8a:76:54:
93:50:5a:78:e0:32:23:86:6f:f9:00:0e:18:85:57:
da:b8:f6:24:21:f1:2f:59:71:ff:46:a2:e3:e0:6f:
5c:52:1f:fa:d4:64:79:f2:d4:72:13:eb:5b:67:f3:
36:08:8b:35:3d:22:b5:fe:4f:c6:eb:05:31:4a:1a:
a3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:74:A2:A1:D1:12:67:F0:2A:E8:DA:5B:7B:58:F0:52:02:87:1D:27
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132392e302f32342d3234203d3e20313531313036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.129.0/24
Signature Algorithm: sha256WithRSAEncryption
03:25:82:1b:03:e7:f1:c4:aa:bc:8f:77:1b:88:8c:9d:c2:be:
54:8a:5e:7c:c4:f3:61:e9:66:46:6b:81:0b:53:b6:c2:45:44:
49:a5:49:76:08:ab:33:69:ac:ae:5b:c2:d3:2e:10:d6:3f:77:
c4:ff:eb:a0:ee:b2:15:32:21:e7:25:ab:9b:96:04:bd:e0:eb:
4f:37:8a:56:84:d6:1a:b2:eb:26:7f:11:01:e6:87:ac:f9:41:
e6:c8:92:72:d3:4c:d9:38:6b:9a:0b:de:15:89:21:7e:e8:12:
17:a9:83:ec:d7:a7:d6:4a:f0:f4:88:67:0e:28:7d:5a:6f:37:
5b:d4:26:d2:f6:4e:f6:9c:b5:76:c7:cd:8c:a9:9c:36:48:96:
37:93:47:e7:4e:60:64:e6:d6:74:d4:4f:0d:a1:ba:f4:f0:4a:
8e:63:7d:3a:d0:4e:22:9f:4c:64:e6:90:97:77:5a:73:93:47:
9f:9d:cf:77:c8:ab:b0:7c:35:b8:a8:39:8c:8a:d2:17:ed:0f:
ee:6c:93:64:bb:f2:34:b1:c7:cf:cf:ae:8f:17:8f:fd:dc:f1:
b1:73:8b:2c:1e:d7:02:2b:b7:da:14:7b:56:da:47:de:a8:ae:
5c:30:82:13:3e:b3:a2:a3:d6:e1:2d:73:f9:24:f5:15:11:1c:
3f:d2:d9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:44:42 2025 by rpki-client