Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/38392e3131362e31322e302f32332d3233203d3e203135343139.roa
File: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (raw, json)
Hash identifier: vCrLMX0eSFK/WsSjH4NPI6BnYmwIN7ZEFJbozFxO6uE=
Subject key identifier: CD:3B:C9:BB:F0:25:83:C6:3E:C0:C0:24:84:98:34:20:35:EE:F6:0D
Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Certificate serial: 0C5614EB4236CCD96CF1946E4567FDB58724B57B
Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/38392e3131362e31322e302f32332d3233203d3e203135343139.roa
Signing time: Fri 09 May 2025 09:37:54 +0000
ROA not before: Fri 09 May 2025 09:32:54 +0000
ROA not after: Fri 08 May 2026 09:37:54 +0000
asID: 15419
IP address blocks: 89.116.12.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 20:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:56:14:eb:42:36:cc:d9:6c:f1:94:6e:45:67:fd:b5:87:24:b5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Validity
Not Before: May 9 09:32:54 2025 GMT
Not After : May 8 09:37:54 2026 GMT
Subject: CN=CD3BC9BBF02583C63EC0C0248498342035EEF60D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:02:4b:af:bf:8e:1e:00:84:8d:09:f5:c0:45:
71:c2:a3:81:59:8f:15:de:f8:ae:69:cc:e0:1c:7a:
c6:33:93:07:73:0a:15:56:16:11:57:ae:1f:aa:fe:
ba:d8:d8:4a:7d:0a:25:ab:0f:d2:c4:83:4d:7a:b6:
56:2f:1b:7f:5b:00:62:17:e6:d1:16:ed:8c:f8:df:
2a:be:36:24:0b:9a:6a:c7:55:98:1e:ce:06:a2:b6:
d3:0a:45:1f:da:a5:53:4e:4e:fc:e3:ee:7d:f4:a4:
e4:c8:be:f9:1b:a0:7a:29:6c:52:a2:e4:bc:c2:34:
a9:60:86:cc:4b:9c:64:e4:96:fb:eb:52:af:06:64:
8d:10:12:4c:94:d9:6f:89:f9:b5:2f:ed:7a:72:7a:
49:50:2c:fc:65:70:83:e5:79:4c:e7:b1:65:52:d6:
4d:d3:ae:71:f8:e6:fa:ae:ac:d2:88:b5:51:03:d0:
a7:e3:05:53:68:8b:1c:b9:48:9d:ff:9a:66:7f:ab:
41:1d:2d:b9:46:c0:4f:31:0b:f4:71:c5:a0:0d:a4:
0d:21:47:b2:12:e2:73:24:97:d5:75:05:40:be:d8:
72:af:38:20:85:14:62:e6:b0:54:a6:40:a5:38:83:
76:21:8d:a9:a2:48:4c:19:33:fe:0a:80:63:7f:ff:
37:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3B:C9:BB:F0:25:83:C6:3E:C0:C0:24:84:98:34:20:35:EE:F6:0D
X509v3 Authority Key Identifier:
keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/38392e3131362e31322e302f32332d3233203d3e203135343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.12.0/23
Signature Algorithm: sha256WithRSAEncryption
32:6b:fc:c1:aa:39:21:5a:b8:bc:14:54:95:37:6f:39:3e:e5:
32:6a:e6:85:ff:70:6d:3d:ac:68:83:1b:9e:b4:47:d5:2f:2f:
bb:70:29:65:e8:39:dd:e1:9e:10:1d:d4:22:05:34:7b:a4:a4:
1f:2e:f0:9a:aa:3f:8f:8e:3c:f7:f7:82:ed:aa:97:8e:ab:e6:
bc:af:34:26:89:8d:57:61:af:4e:5a:01:28:e6:31:a2:a3:44:
ff:ce:c3:4c:42:8f:30:e8:f4:03:55:da:7a:e3:2c:1e:18:2f:
b2:c6:f3:a9:99:55:11:e5:58:c8:2f:c6:7b:a6:06:88:ad:88:
58:2c:fc:04:1b:4e:75:a8:cb:94:2d:6d:a9:34:de:1e:8b:83:
ba:e5:63:f3:ee:27:3e:68:67:0c:75:03:a1:6a:82:fd:fc:cc:
ba:87:cd:b7:58:fe:59:22:63:40:00:15:87:d1:30:15:15:a7:
ec:15:36:1a:97:8b:7b:28:6e:14:53:c6:32:d7:84:cb:33:81:
1f:b4:61:2f:ca:57:5c:51:cf:04:89:69:8a:0c:2b:96:01:2f:
f3:7b:64:dc:15:ae:10:1b:50:88:2e:ec:af:c7:ce:16:49:a9:
b9:46:f5:bf:20:f8:81:57:45:89:08:dd:1f:48:f1:2f:ac:29:
d9:bf:97:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:17:17 2025 by rpki-client