Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS396993.roa
File: AS396993.roa (raw, json)
Hash identifier: GYRAdy2qSv9VgI+loiR5tQPAfE3rJ7r/0NAexyGXAaY=
Subject key identifier: FF:F4:D7:A9:0D:C0:5B:1E:C1:E9:25:1A:18:86:E4:E3:5C:6D:93:01
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5B553C0191F8CBBAD66824A8A9C954058AB5DFCB
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS396993.roa
Signing time: Wed 07 May 2025 01:53:11 +0000
ROA not before: Wed 07 May 2025 01:48:11 +0000
ROA not after: Wed 06 May 2026 01:53:11 +0000
asID: 396993
IP address blocks: 2a0f:85c1:84e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:55:3c:01:91:f8:cb:ba:d6:68:24:a8:a9:c9:54:05:8a:b5:df:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: May 7 01:48:11 2025 GMT
Not After : May 6 01:53:11 2026 GMT
Subject: CN=FFF4D7A90DC05B1EC1E9251A1886E4E35C6D9301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:47:35:03:ba:e7:a1:e0:fb:27:7c:76:cc:65:
88:d8:78:87:56:ed:67:71:5d:1d:ad:ae:27:e9:e6:
a5:c5:14:eb:f2:0f:26:55:f2:f1:51:5c:61:d6:0f:
a4:73:bc:49:74:ca:1d:f6:4e:74:07:a2:d0:1a:dd:
d0:90:e8:3d:2a:22:70:35:14:77:cc:fd:49:7e:f8:
0b:92:84:81:c0:c0:47:de:d4:96:95:c6:bd:22:7f:
61:ad:f3:df:8f:53:a1:f6:10:94:17:21:be:18:ef:
42:5f:9c:7a:00:f4:c0:1a:32:99:4b:c7:f1:17:1c:
5d:d6:7b:02:fd:2a:76:1a:3e:04:50:a1:c4:c5:2b:
f8:3a:d6:9d:5e:6f:ac:59:21:b2:ca:2b:cc:76:b4:
c6:e0:0b:4f:be:ff:2a:e8:79:4e:d9:05:d5:21:eb:
e3:1c:bf:65:d6:31:dd:24:05:07:ed:d1:2c:b7:fa:
cc:56:c2:87:8c:d1:c6:82:04:96:08:94:9f:3f:d4:
79:36:d2:b1:63:c4:0b:0b:0d:fb:03:12:fe:52:c0:
d9:2e:5c:08:b3:ba:c3:89:c6:8d:ad:8f:84:de:d9:
f3:e0:63:7a:d0:9a:ac:15:4c:e4:fe:14:6e:06:e8:
0d:9d:f0:f7:47:3a:14:a5:c5:8b:c3:0d:25:c8:fc:
1d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F4:D7:A9:0D:C0:5B:1E:C1:E9:25:1A:18:86:E4:E3:5C:6D:93:01
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS396993.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:84e::/48
Signature Algorithm: sha256WithRSAEncryption
a4:07:78:46:c7:cf:a5:05:18:91:3e:70:05:3e:df:94:b8:6f:
3e:6f:79:99:af:00:cc:1e:40:30:70:72:d8:ab:1d:ff:5f:dd:
79:15:33:4e:be:a6:c4:39:38:5d:d9:a9:a9:35:a5:08:78:ca:
a6:62:63:35:73:ee:27:58:88:32:03:c6:83:93:e6:cf:d9:c1:
e0:01:18:73:45:9d:51:6c:40:c6:07:1f:ac:62:5a:9d:0c:1b:
f2:49:38:97:6d:8d:fb:01:71:f6:37:42:b9:61:55:39:8c:1e:
6a:0d:c5:6c:e6:d1:56:47:78:58:c0:52:21:d5:a1:4d:4c:49:
d2:a9:1f:01:20:6e:70:84:95:0b:95:3b:6c:1d:4b:5c:68:7b:
04:07:de:b6:7c:62:7a:d8:c5:35:96:a2:dd:68:62:02:04:50:
94:55:66:b4:9c:e5:d9:b1:9e:b7:b2:45:d6:2d:f4:83:6a:da:
05:ec:3c:b3:1e:fd:75:46:7f:7b:0c:2f:4e:02:87:59:c0:9b:
45:fc:53:c6:1c:50:53:21:03:75:31:b7:53:70:65:3a:d8:43:
d3:da:cd:a9:89:6e:d6:35:a2:c0:f3:a4:8e:d7:58:de:69:b3:
34:bf:4b:ba:75:ac:2a:0f:41:9b:20:09:ea:95:8f:c9:2e:7e:
ca:06:de:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:34:03 2025 by rpki-client