Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a663a3a2f34382d3438203d3e203530333931.roa
File: 326131313a323963303a663a3a2f34382d3438203d3e203530333931.roa (raw, json)
Hash identifier: jZAatWCRnF1zC6sLCylJuoUdZcAUOX4SEluSdJX6dUs=
Subject key identifier: CA:6C:CD:D7:82:1F:77:38:A2:81:28:23:B3:31:6F:FC:80:3C:DC:B7
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 53AC1FD7EB760318ED37BE003B2FBE99C9E6F763
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a663a3a2f34382d3438203d3e203530333931.roa
Signing time: Wed 21 May 2025 14:05:54 +0000
ROA not before: Wed 21 May 2025 14:00:54 +0000
ROA not after: Wed 20 May 2026 14:05:54 +0000
asID: 50391
IP address blocks: 2a11:29c0:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ac:1f:d7:eb:76:03:18:ed:37:be:00:3b:2f:be:99:c9:e6:f7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: May 21 14:00:54 2025 GMT
Not After : May 20 14:05:54 2026 GMT
Subject: CN=CA6CCDD7821F7738A2812823B3316FFC803CDCB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b8:6e:11:26:d8:0b:47:6c:b9:29:d9:67:d3:
fa:04:b6:d3:57:3b:c3:5f:b0:b2:54:d4:cb:d2:87:
77:fb:5c:24:c0:95:2d:e0:86:a5:40:29:3d:79:5e:
5e:1d:1b:02:ff:ef:56:20:d5:48:17:6d:be:e3:cc:
87:f3:1e:ad:ba:49:54:eb:03:91:f2:db:07:1f:49:
58:af:44:0f:ad:24:30:72:43:2f:56:1f:31:aa:ff:
4f:81:8b:43:6c:8e:d0:d8:6d:19:de:a1:51:0b:79:
89:6e:d5:f6:2f:ad:fa:67:d1:e1:49:f9:e1:4d:f7:
d9:60:39:1b:57:05:17:dd:79:cc:01:fc:d9:4a:db:
fb:14:34:07:e2:23:df:e6:ec:19:5b:b8:2c:86:57:
f9:a1:40:1d:8b:14:6b:7a:bb:57:6f:32:8c:bf:c7:
54:13:66:1b:06:8d:1d:cd:1e:0a:4a:5c:38:a2:d2:
f2:4a:66:aa:5b:d6:a3:75:ea:99:6b:dd:c9:68:9a:
17:dc:9c:2a:7a:95:a7:46:84:37:e9:17:00:cd:ed:
c3:4a:6e:41:e9:a7:d4:24:42:e1:aa:3a:e0:82:50:
b4:9e:45:dc:01:e4:86:ac:1d:99:5e:3c:cd:e4:3f:
24:db:b3:3c:b9:f5:56:53:fa:8b:9b:de:6d:23:84:
c2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6C:CD:D7:82:1F:77:38:A2:81:28:23:B3:31:6F:FC:80:3C:DC:B7
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a663a3a2f34382d3438203d3e203530333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:f::/48
Signature Algorithm: sha256WithRSAEncryption
11:58:b0:9a:d6:8a:01:40:a5:7a:a1:43:ad:6e:87:93:f6:bf:
4b:63:fb:b0:09:90:e0:21:7c:c3:7f:0a:df:a7:f3:8b:d4:14:
9e:ac:b7:e6:9b:7c:b7:98:96:72:3e:1a:a7:75:c4:37:76:b4:
c9:e0:5a:32:fb:92:37:dc:06:eb:2c:45:a0:59:1a:56:37:78:
89:8b:c8:c6:05:b9:6e:36:06:39:0d:4e:9d:98:54:8a:49:e2:
90:f6:c7:4c:48:72:ea:1b:8d:30:36:41:1b:cb:21:65:57:e2:
00:6c:67:41:88:b9:db:83:8d:ba:89:a7:a2:0b:7a:36:1d:f7:
ab:dd:06:cd:ab:e1:da:9a:33:e2:6a:c9:9d:61:34:45:9d:29:
dd:ff:9e:a1:02:78:bc:13:44:fc:b9:14:ab:2b:b2:01:81:f3:
24:59:5a:82:52:6f:d4:1a:c4:f3:96:28:f5:d1:b4:76:53:cb:
21:54:d6:e1:b8:32:1a:17:f0:65:33:81:bc:6d:a7:7e:96:dc:
5f:97:8a:da:bd:bd:dd:d9:c3:6a:dc:57:fa:55:11:37:d7:a4:
a5:85:69:9c:e4:af:53:1d:c3:b3:4d:a2:06:c0:0e:9c:69:e8:
4a:e1:a5:42:06:6a:ca:96:53:d3:86:6c:b8:24:32:de:20:14:
a8:87:77:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:10:36 2025 by rpki-client