Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233392e302f32342d3234203d3e20323030343335.roa
File: 3231332e3232352e3233392e302f32342d3234203d3e20323030343335.roa (raw, json)
Hash identifier: pXrEjYqaUxFd7llIbTL2YVTmDzTfPIRRCCp2v7pacLY=
Subject key identifier: 01:1C:68:92:58:26:70:51:D3:48:51:99:66:D4:23:8D:7A:50:31:F6
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 078E1DD2DEA373C0300BF5D9B8B1F39B23FA2452
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233392e302f32342d3234203d3e20323030343335.roa
Signing time: Thu 06 Mar 2025 11:53:55 +0000
ROA not before: Thu 06 Mar 2025 11:48:55 +0000
ROA not after: Thu 05 Mar 2026 11:53:55 +0000
asID: 200435
IP address blocks: 213.225.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:8e:1d:d2:de:a3:73:c0:30:0b:f5:d9:b8:b1:f3:9b:23:fa:24:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Mar 6 11:48:55 2025 GMT
Not After : Mar 5 11:53:55 2026 GMT
Subject: CN=011C689258267051D348519966D4238D7A5031F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f9:44:55:f6:6c:e9:d0:c4:f0:cc:bf:89:c5:
e7:ac:a1:83:3b:c3:46:c0:27:55:30:f8:19:1d:8b:
38:f4:66:54:bd:6d:27:28:fb:aa:6d:fe:43:33:a1:
0a:8e:09:11:d9:10:8b:bf:9d:9f:34:e8:f9:ad:26:
f3:ef:0e:e9:73:a8:35:3f:84:3b:a2:df:a9:c5:d1:
74:3a:d4:15:7b:43:a1:d0:ef:ee:43:f8:b1:d7:f9:
dc:8a:b2:69:bb:dc:c0:65:6d:b4:df:41:46:e7:a8:
b2:de:31:2b:45:5f:3c:0e:c7:1f:a0:ee:39:6a:ef:
38:13:7a:9c:b1:75:83:39:56:bc:f4:72:6f:b2:0e:
ff:fb:2a:95:9c:5a:2e:8c:48:90:5c:3f:15:ab:14:
ce:86:0c:85:d9:4b:97:ba:e8:3a:7e:03:5c:40:38:
92:08:90:f3:c6:cf:49:1d:c5:c8:db:da:6b:c0:cb:
5f:64:e4:b1:fa:56:e6:9b:38:73:a3:ca:e8:1f:bc:
60:4d:d5:ff:a3:de:db:3c:1b:d9:21:fa:e4:dd:cf:
6c:84:93:2d:15:aa:64:89:12:63:61:4f:69:d6:72:
42:1d:62:23:72:bb:79:ea:d9:2c:da:06:db:e2:04:
21:70:d2:e2:a4:40:c6:2b:29:22:6f:c8:8d:6a:14:
b6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1C:68:92:58:26:70:51:D3:48:51:99:66:D4:23:8D:7A:50:31:F6
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233392e302f32342d3234203d3e20323030343335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.239.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:66:57:be:97:47:b6:24:0e:3f:fc:f8:64:13:cc:05:ea:6c:
98:42:bf:90:e5:e2:83:e1:fc:9c:bb:fd:9c:e6:3d:b9:d8:4a:
12:54:7f:64:b1:80:e2:66:5d:cc:a2:7e:ca:e0:ad:90:63:8d:
28:37:bb:53:0b:19:c6:1e:92:ff:e2:a1:cc:b9:96:84:1f:59:
c1:df:50:e4:10:f1:d4:3a:14:ed:6d:e8:a1:6f:36:c3:62:11:
13:4a:e7:e2:3f:85:af:01:d1:01:ec:55:21:99:cd:f4:4a:c1:
08:4a:25:a9:cb:fb:dc:95:46:6d:58:64:c2:ed:e6:39:63:cc:
a4:39:93:87:c5:a2:f8:23:63:26:a2:12:76:ff:8f:d4:fb:c3:
12:8d:e7:4a:59:51:82:1e:c6:1a:7b:56:f1:a0:07:f2:38:74:
80:13:de:0f:b1:d8:40:31:60:bb:56:4f:0c:9b:fd:d7:3e:67:
8d:d9:ee:b3:da:3b:49:c6:78:f9:70:21:b1:fc:d6:28:fd:27:
0c:8c:4f:5e:c5:cf:f0:c2:ca:b6:4c:1f:a4:47:5d:ae:23:55:
63:55:0c:18:21:4d:f8:b6:3a:01:6b:03:0f:8e:5b:07:6d:0a:
cd:95:1b:99:dd:e0:21:df:b8:8e:73:dd:73:8d:85:39:53:5c:
4d:00:e0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:17 2025 by rpki-client