Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/39312e3139392e3132332e302f32342d3234203d3e203630343538.roa
File: 39312e3139392e3132332e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier: BatNReK7gXNaqXPa5VRtj5h++zM7ew2F8IoAg/I/2U8=
Subject key identifier: 1E:42:F0:6E:95:87:D8:6F:CA:DB:F9:AF:C0:42:0F:B6:47:DD:E4:20
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 74F5D68BD63CD4E8648E3F5F6926E7D4A537BDF7
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/39312e3139392e3132332e302f32342d3234203d3e203630343538.roa
Signing time: Mon 05 May 2025 06:54:05 +0000
ROA not before: Mon 05 May 2025 06:49:05 +0000
ROA not after: Mon 04 May 2026 06:54:05 +0000
asID: 60458
IP address blocks: 91.199.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:f5:d6:8b:d6:3c:d4:e8:64:8e:3f:5f:69:26:e7:d4:a5:37:bd:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: May 5 06:49:05 2025 GMT
Not After : May 4 06:54:05 2026 GMT
Subject: CN=1E42F06E9587D86FCADBF9AFC0420FB647DDE420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a3:29:53:44:e7:96:43:5b:70:a9:9f:33:96:
ba:f3:6e:0f:91:7d:aa:ff:90:0d:78:ab:66:92:bb:
d9:8e:f8:ee:da:a0:4b:f2:28:b1:0e:a9:80:4a:c5:
07:c7:c6:70:2d:0e:f3:3c:f0:0b:ff:d6:a3:98:ab:
f2:de:f5:13:bf:fc:48:f4:f5:fe:8b:ed:78:35:67:
f2:32:45:6a:0a:92:0b:e2:2c:b4:22:3c:42:36:07:
2d:f7:70:0f:c0:26:9d:bd:36:35:87:46:3f:c2:49:
3c:2c:dc:e6:f8:5b:3e:fa:9b:cf:99:97:81:fd:c3:
b8:30:1c:32:c9:f8:b1:c0:24:60:d9:6a:28:12:fa:
a8:85:39:fb:ab:93:6e:d4:ac:73:eb:15:aa:77:85:
06:f2:da:80:10:22:12:26:5f:c8:43:86:73:c8:7b:
34:eb:98:dc:81:41:24:57:54:a8:91:4f:28:2e:49:
26:0b:8d:7c:1c:7a:67:c4:e1:76:84:a6:1f:63:fe:
85:6a:93:63:2d:c5:ad:8c:6d:6d:d8:cb:e2:17:8d:
86:b4:1a:1a:7b:93:82:79:f1:ad:4d:22:2a:cd:c1:
65:79:87:7b:bc:b1:9a:76:ac:17:d1:24:e1:e0:21:
c4:10:ac:c7:11:fb:87:07:8f:e9:03:df:db:ab:72:
de:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:42:F0:6E:95:87:D8:6F:CA:DB:F9:AF:C0:42:0F:B6:47:DD:E4:20
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/39312e3139392e3132332e302f32342d3234203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.123.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:43:e0:e1:f3:93:b1:29:7b:8a:8a:7b:d8:7a:6e:4c:0c:1e:
23:46:85:97:f3:fc:c8:6c:38:8b:fb:eb:8a:27:41:7e:00:2b:
9b:79:89:ff:1a:3f:a8:6b:94:29:3f:0a:59:bc:9e:9f:38:51:
64:4b:e1:08:1a:d1:9d:db:06:73:0e:5b:7c:77:ae:bd:0a:26:
c2:53:ff:4c:26:a7:e7:79:d7:af:20:f4:90:81:de:75:a6:cd:
92:7a:d2:f5:a9:2b:ca:10:28:60:d2:d9:e4:d5:1c:9c:4c:42:
83:31:9b:dc:9d:90:50:da:b1:55:af:c0:de:3c:98:5a:e2:e7:
2f:67:30:42:8c:0b:ad:d7:4e:19:b4:c2:4a:b1:28:c1:18:05:
f6:eb:d8:e1:9c:c5:5e:c8:a7:b4:3e:62:fd:4a:95:2f:74:0b:
cb:6a:03:08:df:41:d7:2c:10:e3:89:08:c1:96:da:e8:20:62:
6c:2c:f6:44:ff:2d:d9:e1:71:fd:40:b5:fc:c5:b4:82:d9:3a:
fd:2d:4d:5d:c5:6b:16:c0:4b:cc:e5:21:8b:2f:b0:7d:cb:04:
aa:b1:bf:ce:a8:96:c3:ce:0f:a7:35:da:db:08:8d:94:46:bb:
44:35:d6:cb:51:de:e4:c8:66:49:68:04:6b:24:60:9b:89:53:
b0:f4:7a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:54:22 2025 by rpki-client