Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32322e3134362e302f32332d3332203d3e203531313637.roa
File: 3139332e32322e3134362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: XjoRULVSMnjA/p2PGtKdA3k5f9PKMpesACGUO6qwHWM=
Subject key identifier: 05:28:D3:9C:7B:DD:FF:8A:D0:E4:C2:B5:B4:77:0B:FF:8A:F8:3C:1F
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 6A72EF5CCB684EA9613D05AFB9764B824D8F3F62
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32322e3134362e302f32332d3332203d3e203531313637.roa
Signing time: Thu 01 May 2025 20:46:11 +0000
ROA not before: Thu 01 May 2025 20:41:11 +0000
ROA not after: Thu 30 Apr 2026 20:46:11 +0000
asID: 51167
IP address blocks: 193.22.146.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:72:ef:5c:cb:68:4e:a9:61:3d:05:af:b9:76:4b:82:4d:8f:3f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: May 1 20:41:11 2025 GMT
Not After : Apr 30 20:46:11 2026 GMT
Subject: CN=0528D39C7BDDFF8AD0E4C2B5B4770BFF8AF83C1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5d:28:42:e5:9b:a9:2b:22:30:be:cd:5c:12:
70:f1:b7:24:68:6f:98:9e:ad:0e:56:99:7a:a4:64:
a6:8f:af:0c:fb:99:a6:4b:29:86:e4:7c:de:fc:d9:
3d:90:2d:24:fe:60:88:65:dd:8e:57:b5:44:04:ed:
6e:5f:27:a8:68:a1:bf:86:45:93:7e:43:01:95:d5:
b5:26:c1:ab:ab:09:68:60:79:5f:cf:84:93:b0:8f:
95:f6:c2:c4:2c:6f:4f:c5:cc:98:8d:a9:45:1f:0a:
ed:8c:d6:ed:05:9e:c5:82:ad:a4:2e:f2:ed:64:93:
df:7d:05:21:49:11:56:b6:c1:30:70:7f:3a:4a:78:
c9:37:85:19:ff:c8:4d:18:f4:c2:d4:cd:ca:b2:7e:
6f:39:9e:85:35:a1:f6:b2:75:16:c0:02:95:a0:18:
57:49:48:7a:2f:95:12:3e:95:d2:7d:26:d5:19:49:
19:03:3e:80:50:64:8b:28:29:82:da:3a:96:b1:0c:
33:65:48:65:48:ba:60:87:16:2e:73:50:55:54:de:
13:b2:d5:66:28:be:41:38:3e:a5:79:69:41:9e:54:
d2:99:5c:4b:9b:e5:28:ce:fc:cc:39:0e:95:a1:5e:
ec:b7:dc:f2:bd:01:dd:7f:be:59:e5:56:a2:3a:bf:
e3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:28:D3:9C:7B:DD:FF:8A:D0:E4:C2:B5:B4:77:0B:FF:8A:F8:3C:1F
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32322e3134362e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.146.0/23
Signature Algorithm: sha256WithRSAEncryption
03:a9:c2:38:93:7e:8e:4e:d8:83:4c:f9:d8:cc:13:bf:0f:0e:
7a:12:b7:65:77:8a:a3:5d:60:61:be:f3:02:50:8a:8f:25:fe:
68:2c:cb:6e:f8:23:cf:e2:90:93:a3:52:96:04:38:e6:39:d5:
fa:6c:0e:15:f4:d3:40:9c:fa:17:7a:7f:eb:5e:5e:bf:85:8e:
a9:c9:5d:9f:1a:5c:ea:a8:ed:39:64:10:95:d9:6a:af:5c:7b:
59:cc:67:08:f4:1b:50:8a:26:b8:ce:ba:82:23:15:b7:b6:48:
9a:ad:76:7b:25:b9:a0:7c:86:77:28:2d:f7:65:48:78:0a:f7:
58:36:bd:7e:b9:78:f2:35:d6:9c:2b:92:e6:6d:27:05:e0:db:
ac:88:2e:86:14:4f:70:53:10:d8:da:03:7c:b6:03:24:0b:fc:
36:e7:28:22:01:37:39:ef:5b:e8:91:fc:f3:52:17:52:ec:c5:
54:50:c9:1b:36:b7:16:a5:55:64:86:0a:9b:80:3a:c0:dc:da:
a4:68:6c:55:0e:7f:b9:a9:9a:19:bf:93:56:a6:0c:db:e9:b3:
1d:80:3b:60:86:ad:c0:a0:d0:47:5c:33:79:e8:4f:6b:3a:e9:
f6:29:9e:d0:3f:65:2d:2d:c7:4a:ca:ae:c3:1d:c7:fc:aa:c5:
54:57:9a:7b
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUanLvXMtoTqlhPQWvuXZLgk2PP2IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNTA1MDEyMDQxMTFaFw0yNjA0MzAyMDQ2MTFaMDMxMTAvBgNV
BAMTKDA1MjhEMzlDN0JEREZGOEFEMEU0QzJCNUI0NzcwQkZGOEFGODNDMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVXShC5ZupKyIwvs1cEnDxtyRo
b5ierQ5WmXqkZKaPrwz7maZLKYbkfN782T2QLST+YIhl3Y5XtUQE7W5fJ6hoob+G
RZN+QwGV1bUmwaurCWhgeV/PhJOwj5X2wsQsb0/FzJiNqUUfCu2M1u0FnsWCraQu
8u1kk999BSFJEVa2wTBwfzpKeMk3hRn/yE0Y9MLUzcqyfm85noU1ofaydRbAApWg
GFdJSHovlRI+ldJ9JtUZSRkDPoBQZIsoKYLaOpaxDDNlSGVIumCHFi5zUFVU3hOy
1WYovkE4PqV5aUGeVNKZXEub5SjO/Mw5DpWhXuy33PK9Ad1/vlnlVqI6v+MHAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUBSjTnHvd/4rQ5MK1tHcL/4r4PB8wHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzOTMzMmUzMjMyMmUzMTM0
MzYyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
wRaSMA0GCSqGSIb3DQEBCwUAA4IBAQADqcI4k36OTtiDTPnYzBO/Dw56Erdld4qj
XWBhvvMCUIqPJf5oLMtu+CPP4pCTo1KWBDjmOdX6bA4V9NNAnPoXen/rXl6/hY6p
yV2fGlzqqO05ZBCV2WqvXHtZzGcI9BtQiia4zrqCIxW3tkiarXZ7JbmgfIZ3KC33
ZUh4CvdYNr1+uXjyNdacK5LmbScF4NusiC6GFE9wUxDY2gN8tgMkC/w25ygiATc5
71vokfzzUhdS7MVUUMkbNrcWpVVkhgqbgDrA3NqkaGxVDn+5qZoZv5NWpgzb6bMd
gDtghq3AoNBHXDN56E9rOun2KZ7QP2UtLcdKyq7DHcf8qsVUV5p7
-----END CERTIFICATE-----
Generated at Fri Jun 6 13:32:34 2025 by rpki-client