Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139332e302f32342d3234203d3e20313332393235.roa
File: 3137382e3133322e3139332e302f32342d3234203d3e20313332393235.roa (raw, json)
Hash identifier: 0r49mcG2J+PGpW4jvN3NhokfFp5wtP+NHxkfXTC2C/Y=
Subject key identifier: CF:16:7A:16:24:6E:1B:EC:D5:80:8E:B7:4A:88:E6:12:67:48:F3:DC
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 52C1CE7B1EB3D599F0171A3B87001A46272A3430
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139332e302f32342d3234203d3e20313332393235.roa
Signing time: Fri 02 May 2025 11:53:21 +0000
ROA not before: Fri 02 May 2025 11:48:21 +0000
ROA not after: Fri 01 May 2026 11:53:21 +0000
asID: 132925
IP address blocks: 178.132.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 17:41:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c1:ce:7b:1e:b3:d5:99:f0:17:1a:3b:87:00:1a:46:27:2a:34:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: May 2 11:48:21 2025 GMT
Not After : May 1 11:53:21 2026 GMT
Subject: CN=CF167A16246E1BECD5808EB74A88E6126748F3DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2d:3b:07:7c:57:fe:7f:6a:9e:73:0c:e5:75:
c0:e8:31:29:67:57:d8:40:84:61:21:b7:58:ce:07:
db:bb:bd:7c:43:91:72:c0:32:49:af:52:dd:86:ee:
0c:de:3d:82:eb:6b:40:be:57:2a:8d:18:9e:07:b7:
32:87:ec:ca:ea:4e:d4:91:e6:bd:24:05:74:12:ce:
8a:d8:78:79:ec:60:d6:2b:b9:10:ea:98:92:a1:36:
47:cd:13:7c:ce:b4:41:56:40:02:75:4d:dc:8f:4a:
8f:1d:2c:53:c3:cc:07:9a:2b:18:ac:86:fd:9f:d9:
a2:3b:9b:89:cd:ed:38:2a:f9:ee:48:76:b0:38:14:
1d:fa:ef:96:9d:b6:06:22:a4:3b:53:b3:90:5c:9c:
a2:3a:a3:3d:08:1c:d6:3d:57:90:9d:ec:02:15:a1:
e0:65:d2:34:22:b4:63:75:af:02:03:1e:a0:5c:a4:
2b:0e:31:97:68:f2:04:3d:a1:93:53:32:0b:aa:15:
ec:01:49:5f:97:da:ef:4f:0e:f8:4d:be:1d:b2:74:
31:b3:7e:13:44:cf:7e:25:db:76:b7:af:01:9a:a6:
65:93:4e:ad:65:e5:04:75:e8:2e:b1:85:50:e7:90:
17:32:c9:a7:2e:fd:d2:3d:8e:54:c7:92:b7:0c:b5:
6f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:16:7A:16:24:6E:1B:EC:D5:80:8E:B7:4A:88:E6:12:67:48:F3:DC
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139332e302f32342d3234203d3e20313332393235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.193.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a0:f7:ed:33:05:8b:a1:a4:34:b4:93:1a:9c:41:92:ec:0c:
6e:54:f8:44:78:0a:8d:dd:1f:1c:bf:b0:67:15:13:01:e9:35:
63:47:67:43:0d:af:57:87:ba:5d:db:7a:e2:a4:1d:75:f3:97:
11:42:12:a7:41:8e:f6:d7:9c:5b:1f:74:48:0b:9a:c3:75:59:
a6:86:cb:ec:00:aa:81:09:6f:2d:0f:8e:d4:9d:0d:ce:1f:e7:
ad:5b:d5:77:44:d8:93:c8:07:15:05:ea:16:54:92:e7:95:7c:
90:85:bb:03:07:00:72:a8:59:be:ee:7d:04:1a:60:e2:83:9e:
1f:af:c2:a8:7c:9d:ea:7c:7f:bb:bf:ce:5b:5b:97:b6:0d:e3:
dd:97:3b:26:a9:a9:c0:e4:f4:0e:d5:e0:49:ed:22:e1:e0:2a:
ef:07:6a:58:04:b1:14:89:d9:c3:e2:e0:45:ff:24:df:18:f0:
cc:77:79:b6:ec:d7:b0:11:76:ad:71:ea:71:4f:b2:88:20:15:
87:cd:c8:ff:07:66:11:c6:4c:91:e2:13:b5:90:96:c5:dd:2c:
2d:51:cf:4e:59:06:ff:47:33:5a:af:d6:14:6a:71:f7:19:40:
65:34:1a:60:27:50:d4:77:29:d6:0e:29:06:8b:74:54:7f:06:
d3:2a:a5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:21:19 2025 by rpki-client