Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33392e302f32342d3234203d3e203230343733.roa
File: 33312e362e33392e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: 6oGYCrdlRxD+Ff9/8iGOqgAOKamiaEGlhcIjVvNIyyM=
Subject key identifier: FB:14:5F:A8:B0:11:5E:48:D2:BD:2B:A6:C6:07:48:45:48:B4:B8:10
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 540F94CD03935F37E61DD60A6D1071C2AA06F6F9
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33392e302f32342d3234203d3e203230343733.roa
Signing time: Fri 09 May 2025 15:54:08 +0000
ROA not before: Fri 09 May 2025 15:49:08 +0000
ROA not after: Fri 08 May 2026 15:54:08 +0000
asID: 20473
IP address blocks: 31.6.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 05:13:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:0f:94:cd:03:93:5f:37:e6:1d:d6:0a:6d:10:71:c2:aa:06:f6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: May 9 15:49:08 2025 GMT
Not After : May 8 15:54:08 2026 GMT
Subject: CN=FB145FA8B0115E48D2BD2BA6C607484548B4B810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:38:23:22:aa:9d:60:b0:0b:ec:a7:33:17:4d:
51:b5:d3:86:52:06:ab:e4:07:17:95:fe:c6:c8:19:
ae:20:d4:89:8d:07:85:58:31:e5:c4:2b:0a:24:e6:
c9:10:36:99:58:96:81:f3:25:f8:b9:b9:35:fc:dc:
b3:48:c0:62:0d:ea:61:af:3a:dd:78:a1:c4:db:74:
af:e4:0d:7a:6e:b1:9a:c6:65:17:90:8b:c0:ca:05:
69:0b:54:e8:a1:82:59:26:78:13:b3:99:7c:d0:e3:
2c:cc:fe:f4:31:36:f9:75:97:4b:95:3c:9f:f8:f2:
cf:58:7c:b6:61:21:c5:ad:f5:af:26:0d:d6:c5:07:
53:3f:20:30:56:24:af:72:94:99:9f:04:96:77:91:
4d:d6:3e:78:5f:c7:32:82:a9:4e:db:65:00:94:42:
f2:b5:6a:be:bc:50:53:9b:aa:fc:25:f3:45:7b:86:
ff:de:b8:96:45:e4:06:d2:75:6c:31:0b:34:58:bb:
0c:20:cc:8a:7c:af:55:3d:70:c5:8b:eb:0f:de:a1:
21:ae:9b:61:17:81:85:5d:e5:23:7b:49:44:73:b4:
f2:d3:29:98:f6:93:5e:53:c6:74:15:bb:49:70:d6:
1b:09:ee:51:57:6b:e2:71:e7:95:a4:15:8e:4b:4d:
1f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:14:5F:A8:B0:11:5E:48:D2:BD:2B:A6:C6:07:48:45:48:B4:B8:10
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33392e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.39.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:0b:2a:b6:3b:26:18:dd:93:59:e7:c3:08:f7:77:9b:94:d0:
23:51:6e:f2:49:88:06:1d:42:cd:66:c3:3e:9e:6c:51:93:28:
38:cc:84:39:c2:1d:9c:84:16:15:6e:16:33:a3:8d:09:74:bc:
eb:0e:6b:c2:eb:18:22:d8:47:13:c6:5a:3d:15:d9:46:5c:33:
13:bc:fb:fa:fd:be:e1:17:a6:aa:76:0b:07:40:05:50:33:8f:
d9:d6:55:fd:7b:eb:91:20:53:90:25:60:28:ab:70:eb:8b:04:
9d:bc:cf:b2:7e:d9:1b:ee:ec:5f:c3:83:1e:31:40:33:93:f0:
47:42:c9:15:5b:73:a1:08:15:f4:d0:d7:80:ce:aa:ba:05:c3:
90:2d:4d:a4:c4:ec:9c:34:af:32:94:73:85:9e:5b:81:fe:6a:
68:eb:1c:7b:e7:8f:95:f8:51:12:b9:86:08:21:ef:0b:7e:7e:
3e:a6:a2:85:cc:f1:50:1d:d6:47:6f:19:24:43:16:4a:82:0c:
e8:bc:80:40:54:ce:60:6d:b0:93:9f:56:60:40:7c:fc:50:c2:
c3:80:87:45:ce:39:68:a6:8e:a1:16:a1:06:03:b1:c4:37:88:
1b:8b:b9:01:6b:28:d7:67:71:a1:9e:c2:9e:5c:cc:36:a5:1c:
8e:2c:8d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 22:15:10 2025 by rpki-client