Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130372e302f32342d3234203d3e20313336373837.roa
File: 39312e3230352e3130372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 5R9l9UF6vhHF7SIM95d77P87Ay/YIxaZ2zf6IK0JFCU=
Subject key identifier: B5:46:A9:95:E4:67:73:B6:5E:21:85:15:19:7D:CB:B1:3D:BB:B3:51
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 1B842EF93C1EDE3127BA80002E99EE7F30323CAB
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130372e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 05 Mar 2025 19:45:49 +0000
ROA not before: Wed 05 Mar 2025 19:40:49 +0000
ROA not after: Wed 04 Mar 2026 19:45:49 +0000
asID: 136787
IP address blocks: 91.205.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:84:2e:f9:3c:1e:de:31:27:ba:80:00:2e:99:ee:7f:30:32:3c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Mar 5 19:40:49 2025 GMT
Not After : Mar 4 19:45:49 2026 GMT
Subject: CN=B546A995E46773B65E218515197DCBB13DBBB351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:14:73:95:8b:02:32:7c:1c:04:33:56:74:
63:f1:28:20:13:0f:aa:e3:ed:f3:21:90:04:44:ae:
63:81:f6:7d:d5:4b:4e:c5:81:c0:93:e5:a1:cf:cf:
1e:14:58:37:b2:a6:21:7a:c2:be:9e:79:b2:54:a3:
8c:8f:5d:3f:e0:7a:15:5f:fd:82:e4:57:37:de:0b:
c0:cd:25:d5:28:35:67:32:cf:4f:ee:3f:0e:11:23:
7b:9b:02:f4:01:d0:c9:94:9c:1b:f4:9b:68:3a:76:
d4:c1:89:c1:d8:0d:01:8f:b1:f5:18:11:fe:ac:a0:
7b:74:aa:8c:2a:83:1d:f2:0c:09:36:c8:23:a6:d1:
77:20:ff:0d:62:83:c4:fb:98:ca:42:21:63:2d:32:
26:fb:31:50:31:c1:b4:9b:96:96:28:7f:0c:c4:15:
a1:78:94:30:ef:d8:fd:48:9b:e5:8b:cd:e3:34:b0:
af:3a:03:dc:e6:f7:36:8f:3b:49:03:00:f9:59:ab:
20:13:ac:da:83:07:97:0e:9e:85:1d:39:da:92:3a:
a8:8d:87:66:b1:db:60:ae:da:5c:70:04:9b:b6:ed:
eb:f5:be:28:c7:5f:85:7b:53:c4:f0:39:b6:f3:61:
9b:53:c6:e6:3c:66:5e:dc:13:6b:a0:10:77:d5:de:
e2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:46:A9:95:E4:67:73:B6:5E:21:85:15:19:7D:CB:B1:3D:BB:B3:51
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:2f:78:43:42:43:4f:2b:9f:98:63:ca:22:42:a1:9b:52:11:
df:e6:1e:11:bd:05:f2:8e:d4:ff:f4:bf:a3:8f:4e:be:e4:a9:
64:a9:ac:d0:5d:7c:3d:bd:a6:dd:8c:34:d3:84:ec:36:b1:14:
16:a7:9a:87:1a:25:07:85:ec:ea:e0:7c:51:ab:5b:c4:f2:4c:
fb:8d:50:f3:e7:f5:df:0d:7c:16:d5:cf:65:a9:4c:5e:a1:8d:
64:a0:22:1b:38:59:e3:d9:01:8f:d9:25:50:14:86:e8:e9:83:
15:f5:be:92:e0:d2:2a:ed:3f:29:a4:94:9f:6f:66:e7:2c:35:
3d:c5:21:bc:0e:82:36:db:f5:21:90:1b:92:99:c1:f6:3e:14:
91:2d:09:f9:12:6b:61:39:3b:4e:4b:3c:cd:6f:4e:6d:67:1a:
56:59:22:1b:55:0a:51:c0:6a:69:31:46:b2:a9:f3:80:69:eb:
02:e3:74:91:f2:e4:41:8a:3c:67:d2:ce:06:1e:bf:95:62:aa:
35:23:e8:b9:15:35:ca:6f:94:9a:43:b9:d7:f3:2d:af:d1:cd:
3d:d0:c2:78:e5:83:08:b5:2b:be:5f:ee:75:0d:ae:22:c9:0a:
17:90:58:16:dc:8f:f3:90:1b:ca:9d:3d:af:4d:17:dd:61:a8:
b2:f5:11:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:01:04 2025 by rpki-client