Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/38392e3131362e31352e302f32342d3234203d3e203135343139.roa
File: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (raw, json)
Hash identifier: /LejqbWiFUxs1DgkjzVItnmcQXCtVjOkQxj/fIk9rAQ=
Subject key identifier: 71:73:F4:69:E6:53:2E:D3:43:89:F2:62:29:8E:FF:6C:DF:76:84:0E
Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Certificate serial: 18658A6AC08042F4C2899E4383D44716440001C5
Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/38392e3131362e31352e302f32342d3234203d3e203135343139.roa
Signing time: Fri 09 May 2025 09:37:56 +0000
ROA not before: Fri 09 May 2025 09:32:56 +0000
ROA not after: Fri 08 May 2026 09:37:56 +0000
asID: 15419
IP address blocks: 89.116.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 20:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:65:8a:6a:c0:80:42:f4:c2:89:9e:43:83:d4:47:16:44:00:01:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Validity
Not Before: May 9 09:32:56 2025 GMT
Not After : May 8 09:37:56 2026 GMT
Subject: CN=7173F469E6532ED34389F262298EFF6CDF76840E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4d:a1:c3:62:9d:36:c9:ea:97:c6:53:6f:6a:
74:8f:0f:77:26:9e:72:01:5b:96:2b:0f:04:fc:89:
c1:22:09:ca:76:a1:6f:e6:d4:bb:27:0a:c4:4e:60:
1d:98:81:5e:7e:c5:49:f8:f2:97:59:3e:a6:8a:4c:
2e:98:d9:8b:01:26:c7:e8:37:81:93:d9:4f:41:6e:
77:b8:1f:b2:95:25:a7:17:38:c9:a2:de:10:6e:10:
2c:c8:ed:a6:58:03:aa:29:ea:3f:98:25:0f:bc:40:
80:22:85:8e:65:f5:58:0e:a5:a4:de:12:ff:c4:bf:
4b:86:d1:56:53:f0:e9:d6:81:08:0f:6d:da:8e:ed:
34:58:04:93:2f:a6:31:18:89:44:0f:6e:89:1b:91:
4c:79:d5:66:97:dc:40:cf:99:6d:fc:6c:df:24:43:
03:f2:08:27:91:90:9c:21:10:89:e2:1a:b4:c0:dc:
49:b6:20:88:b5:3d:33:16:17:c9:56:ff:7b:59:cb:
0b:4f:ce:15:65:4d:5d:93:58:56:91:72:a1:13:88:
3e:f3:36:ec:70:f7:54:2b:e8:6f:c1:db:f0:13:bb:
87:bc:fc:c1:e0:6b:78:3b:28:3a:8c:15:ca:b7:04:
83:a0:5d:74:97:82:a8:b7:6a:d4:ed:cc:d7:2f:69:
6d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:73:F4:69:E6:53:2E:D3:43:89:F2:62:29:8E:FF:6C:DF:76:84:0E
X509v3 Authority Key Identifier:
keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/38392e3131362e31352e302f32342d3234203d3e203135343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.15.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:90:b8:cc:1d:c4:fb:dc:52:6f:03:ba:c0:c3:cf:ed:8a:b7:
93:91:9d:2c:4a:34:b1:2f:8c:78:db:8e:90:5e:6b:4f:67:f0:
a5:1b:ca:3c:81:45:dc:3a:b2:a1:ff:3f:de:3d:de:6b:a0:ad:
9b:fb:ec:b6:09:52:b2:02:7c:35:b0:44:0f:22:68:ee:73:10:
a3:0c:f5:af:af:77:b4:0f:74:fe:a9:31:fe:a6:05:26:46:97:
08:ac:e1:3a:20:b7:79:9e:fb:7e:d8:50:aa:b9:dc:19:64:96:
ef:3f:1b:21:6c:5f:80:4a:9b:22:2c:ad:d7:f0:0f:0a:f1:87:
34:05:b0:81:64:4e:61:53:38:be:43:83:9e:6a:18:85:99:cc:
90:f8:93:7b:69:38:ba:6d:e0:a4:70:f4:ad:4a:28:24:b7:db:
25:53:8a:3f:f6:ba:c6:a4:ce:4b:f5:c7:91:6b:8f:ae:1b:35:
f9:63:3a:7e:45:da:87:8d:6d:46:5f:1b:c5:4c:06:88:10:56:
46:59:7b:42:9b:c9:bf:69:ab:52:53:54:96:ca:d1:90:17:9b:
b2:26:30:ca:8a:bc:43:76:1c:27:a6:86:b9:6e:a6:25:9d:47:
cf:61:14:35:23:d0:96:10:61:97:98:4d:51:ff:17:fc:94:08:
9c:d7:da:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:28:45 2025 by rpki-client