Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3134382e302f32342d3234203d3e20383334.roa
File: 3139342e33312e3134382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ot8qjXqLAcShlU9Vu0AfMrREFRXN/gvIeX+0RAyv7Ks=
Subject key identifier: 07:E8:6E:D7:39:3C:83:38:75:26:65:A4:BF:D2:54:6F:FE:50:C6:11
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 466B1A13CE9E34F9A7ED31CA89A4FCC68B9B1C2C
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3134382e302f32342d3234203d3e20383334.roa
Signing time: Wed 12 Mar 2025 11:28:06 +0000
ROA not before: Wed 12 Mar 2025 11:23:06 +0000
ROA not after: Wed 11 Mar 2026 11:28:06 +0000
asID: 834
IP address blocks: 194.31.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:6b:1a:13:ce:9e:34:f9:a7:ed:31:ca:89:a4:fc:c6:8b:9b:1c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Mar 12 11:23:06 2025 GMT
Not After : Mar 11 11:28:06 2026 GMT
Subject: CN=07E86ED7393C8338752665A4BFD2546FFE50C611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:b5:b8:75:57:b2:11:d5:40:1d:5a:97:f2:
28:be:cb:72:f2:35:1c:e0:ae:f1:8e:10:fc:3d:74:
1c:5d:98:da:9f:2b:9a:2c:02:28:16:20:ae:6d:f0:
5e:2e:40:98:ae:ed:13:8e:ba:fd:5d:b8:23:93:aa:
fb:1a:77:56:0b:3a:8d:f8:c8:3a:ac:e8:90:cc:c4:
84:52:d6:af:00:df:6d:66:2c:40:00:6c:b8:0c:26:
09:23:9e:4f:68:e7:bf:bd:a2:03:b7:64:76:c6:36:
ca:33:08:6e:e6:1a:bf:43:05:1a:e4:f5:d6:50:5b:
6d:c6:e4:bb:77:f8:6b:28:0e:4e:14:62:33:3a:f2:
33:da:be:d6:a5:97:8e:2f:a9:15:d5:d8:c8:61:d3:
4b:fa:8e:61:d7:59:1a:64:68:27:0f:4f:12:94:8d:
93:0d:07:78:88:b3:65:10:fc:fa:55:75:ab:e5:0a:
bf:0d:dd:78:ef:cb:8d:b7:5a:46:a1:3f:6f:fd:41:
ff:8c:7b:72:5d:50:f9:65:93:f8:fd:be:b9:3c:69:
cf:6f:2a:08:f7:8f:c2:26:fb:22:00:77:a7:f4:9f:
26:13:3e:a2:1d:80:13:ee:fd:f8:cb:a5:81:89:28:
9d:96:82:83:f6:e2:d9:9d:f7:35:0a:1b:37:ef:ae:
e8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E8:6E:D7:39:3C:83:38:75:26:65:A4:BF:D2:54:6F:FE:50:C6:11
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3134382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.148.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:0f:f9:56:36:9d:56:f5:fe:41:11:79:e4:de:5b:13:56:a8:
af:ef:7b:44:d2:aa:3c:45:a1:c2:a3:13:c0:24:68:ff:c8:3a:
ed:2e:a0:0c:12:a0:67:11:f2:7e:22:30:be:cf:4c:87:66:0b:
4c:ec:e9:bb:35:03:fb:8b:da:09:51:c3:d6:b9:eb:4e:89:37:
79:92:1b:5f:c1:63:e6:76:9a:97:2c:9e:ee:66:64:50:78:d4:
ea:d8:78:43:32:24:da:49:ee:80:50:29:5c:62:e9:ac:9a:fa:
d8:a7:9f:af:1c:ac:7e:30:f8:7a:a4:bb:6a:7b:13:69:de:7b:
81:9b:32:09:04:78:eb:e6:00:38:24:fb:07:4a:40:6e:84:08:
a8:f3:8a:d8:a8:c2:c8:d5:87:f0:9a:5f:6d:41:f9:ac:16:f1:
b5:e9:7a:30:74:c3:55:6e:b2:b7:dd:fa:4c:9b:ce:76:92:dd:
c2:04:16:23:f9:0a:68:1a:bf:52:33:3e:a7:ae:6b:1f:27:37:
c1:72:06:d9:6c:33:3b:b2:ae:70:25:82:ff:01:0a:40:4d:ec:
b3:d9:60:a4:4b:6b:d2:95:a1:93:2d:65:3c:e0:92:80:6e:76:
57:46:29:46:1d:05:89:0d:82:e0:f1:0b:94:40:61:f2:3d:e3:
33:9b:ba:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:27 2025 by rpki-client