Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34342e302f32342d3234203d3e20323131343834.roa
File: 3231322e3130332e34342e302f32342d3234203d3e20323131343834.roa (raw, json)
Hash identifier: JBx8ym7JHWLmUGZKmy6bIQw3WR5rhPzAi99IbVvWGag=
Subject key identifier: DA:67:BD:7F:A9:35:DA:A7:53:1A:9F:38:C9:D4:75:59:6A:50:C1:76
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 27CC2919AA01C2E6838F12AB686281EBF9283FEB
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34342e302f32342d3234203d3e20323131343834.roa
Signing time: Sun 22 Jun 2025 07:38:39 +0000
ROA not before: Sun 22 Jun 2025 07:33:39 +0000
ROA not after: Sun 21 Jun 2026 07:38:39 +0000
asID: 211484
IP address blocks: 212.103.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:cc:29:19:aa:01:c2:e6:83:8f:12:ab:68:62:81:eb:f9:28:3f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Jun 22 07:33:39 2025 GMT
Not After : Jun 21 07:38:39 2026 GMT
Subject: CN=DA67BD7FA935DAA7531A9F38C9D475596A50C176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c2:00:2a:ba:59:33:08:9c:10:40:66:6d:28:
4f:08:54:af:b7:a6:59:ac:55:33:fb:5a:3a:82:a1:
c1:93:01:eb:15:ee:49:a1:c2:e9:c8:b5:e7:c0:94:
9d:48:a9:95:62:5f:bc:ed:bf:89:94:bb:a0:11:b1:
04:6d:cc:84:61:d8:94:6f:a2:2c:ec:93:0e:73:fb:
ad:da:56:17:c2:0c:37:9b:ce:4c:ac:a6:1f:00:63:
63:90:19:2c:17:67:68:75:58:eb:90:4b:00:94:ee:
8e:f6:98:d9:77:35:fd:19:d8:51:a6:a9:57:56:f2:
7d:87:4c:a8:91:30:f1:aa:06:e4:f1:63:02:ba:ae:
b7:d1:3e:f1:f7:83:5d:1b:6e:cb:6a:c8:1f:06:d9:
46:6f:aa:d1:7f:99:5c:c4:2a:2f:19:ff:7f:a3:77:
87:0a:97:74:db:ad:24:5a:d8:52:bb:0a:95:14:a2:
1e:56:96:de:d3:fc:91:ed:5a:8c:ad:36:c2:93:f6:
95:13:05:c2:a0:60:20:b1:e6:36:08:28:84:e9:a0:
72:aa:0c:4a:d5:a3:51:7f:8b:4e:d3:bb:28:aa:89:
e8:08:88:1d:32:d3:28:40:02:fd:77:ab:6b:85:d6:
b4:da:8c:2f:10:a1:44:75:99:09:13:e2:d5:dd:f6:
30:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:67:BD:7F:A9:35:DA:A7:53:1A:9F:38:C9:D4:75:59:6A:50:C1:76
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34342e302f32342d3234203d3e20323131343834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.44.0/24
Signature Algorithm: sha256WithRSAEncryption
16:44:f5:c5:93:27:5d:76:04:63:cf:5c:84:04:69:9c:c1:5e:
d4:c5:7e:f2:f6:28:57:bb:65:2a:07:a8:8b:0e:23:05:42:2c:
8f:f2:1d:cd:4a:b5:50:7f:9f:d1:59:cd:68:63:c9:b1:54:d2:
1d:f3:5f:3b:80:b1:8a:dd:22:82:6e:11:88:28:c9:d4:e9:8f:
6a:aa:05:4f:22:60:d0:3f:33:ce:b8:9a:5f:45:63:1b:dc:71:
e8:45:c8:a6:ec:ae:df:4f:2f:b9:49:bf:ef:dd:e2:ac:b7:d6:
d6:9f:fc:bc:f8:71:de:f0:c1:d2:28:f8:b2:4b:f7:e5:12:65:
1c:9a:9d:21:d4:19:69:54:11:52:df:d5:95:57:97:0d:21:17:
74:5c:06:d5:62:80:f3:a1:f9:52:e1:fb:f2:9d:a8:b3:99:8b:
e4:f0:f9:d8:73:dc:49:81:1f:4c:dc:94:42:09:75:93:e0:46:
5f:87:7d:3e:ae:92:2b:b1:94:23:e2:3c:96:f9:39:ef:10:3f:
f9:d1:68:c6:2c:37:2a:a9:a3:94:99:b2:1f:97:39:a9:1c:86:
87:b0:52:48:b4:ca:d1:c9:df:5d:7e:9a:c5:47:bd:39:04:9c:
d9:00:90:9a:ed:85:b7:99:c0:30:9f:c5:fa:d6:a4:f8:5c:3b:
ed:0e:a1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:24:33 2025 by rpki-client