Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39322e3234392e34342e302f32332d3234203d3e203437353833.roa
File: 39322e3234392e34342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: qVxr9Bij9IJfffVV5kjDBJF2G9S/+MktihWsYdJTmaE=
Subject key identifier: C2:14:22:59:DB:5F:60:42:AE:9D:B1:EE:9C:66:C4:73:50:08:43:3F
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 2F40188FFB8DE50FB2D36C96737F5BBC14916124
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39322e3234392e34342e302f32332d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:44:50 +0000
ROA not before: Mon 27 Jan 2025 09:39:50 +0000
ROA not after: Mon 26 Jan 2026 09:44:50 +0000
asID: 47583
IP address blocks: 92.249.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:40:18:8f:fb:8d:e5:0f:b2:d3:6c:96:73:7f:5b:bc:14:91:61:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Jan 27 09:39:50 2025 GMT
Not After : Jan 26 09:44:50 2026 GMT
Subject: CN=C2142259DB5F6042AE9DB1EE9C66C4735008433F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:df:e8:32:df:d5:d7:a8:af:a3:e1:9f:b8:01:
78:70:a9:00:c9:ae:6b:6f:0a:1f:a3:61:af:5c:92:
ed:be:42:2a:b7:de:56:4e:49:71:29:26:10:c9:16:
0b:12:94:0f:fd:ff:e5:cd:df:30:96:74:88:ce:ba:
21:5c:7a:65:b5:53:26:d1:fa:7c:f8:d0:29:fc:7a:
c1:83:43:17:5f:f1:8d:42:7b:e1:15:2b:72:42:fb:
e3:cd:f7:09:f9:63:99:73:19:e0:0d:0e:10:ae:83:
23:19:36:85:12:a2:0f:11:9f:89:3c:00:1d:05:dd:
5a:6c:07:23:ee:5f:f0:3e:bc:fa:74:7c:00:79:70:
21:80:82:43:f0:f8:6b:52:34:34:a5:f5:16:66:3f:
23:81:1a:04:0e:ab:5b:8f:8e:56:0b:39:a2:36:1c:
3b:75:b4:53:13:16:c7:08:f7:a3:de:b1:8a:b3:34:
6a:94:48:d9:1e:a7:7e:69:2e:d7:6f:6e:06:4d:dc:
36:38:7e:6c:64:10:01:7a:77:c6:db:61:7d:58:1e:
72:76:c2:6e:d9:18:d4:0e:94:bb:fe:b4:7f:31:ba:
d5:85:3b:cc:70:8d:ee:34:31:33:a8:78:4d:71:72:
ce:f7:ff:10:4e:aa:05:ca:25:c3:bf:61:80:c9:7b:
ba:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:14:22:59:DB:5F:60:42:AE:9D:B1:EE:9C:66:C4:73:50:08:43:3F
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39322e3234392e34342e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.44.0/23
Signature Algorithm: sha256WithRSAEncryption
55:cf:16:c5:18:07:5f:8a:44:b4:8a:b2:6c:e8:d8:0f:dd:04:
cb:67:6f:14:d5:de:64:4f:25:61:4c:3d:c7:37:7e:44:5b:fd:
2c:07:6c:99:40:17:e6:ef:bd:bf:12:07:ef:f8:d8:06:10:79:
76:1a:bb:f2:91:9a:96:96:de:12:6f:97:c7:d1:44:36:90:d8:
37:2d:06:03:e1:c6:d0:83:b6:a8:f8:37:fb:2a:c2:1e:f7:68:
6e:53:35:84:46:a4:be:2a:2e:39:4a:dc:0c:71:d1:9e:d9:a8:
f8:f7:a3:cf:17:1e:ce:c5:6d:71:81:e1:00:e7:99:29:19:20:
4d:d2:37:66:b8:52:bd:a2:24:07:15:db:84:43:8e:85:98:d6:
3b:b5:0f:8b:26:76:49:67:ea:d2:00:86:c9:dd:66:9e:9d:50:
3c:11:77:7c:8d:80:ec:de:93:c1:51:e2:7f:f1:24:74:8e:08:
47:4b:51:e2:0c:70:47:2f:16:c7:da:fc:61:76:71:c7:5f:12:
36:1f:86:48:d6:0e:b2:80:54:5b:38:c6:77:6f:a5:aa:6d:46:
2c:75:e7:01:e1:d4:33:02:71:56:8c:76:2d:ac:bc:1e:8a:d5:
30:58:84:ba:d3:b4:9d:d9:4c:2b:6d:d1:d6:f2:61:ec:6d:4c:
f4:00:3a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:51 2025 by rpki-client