Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e20323135333034.roa
File: 39332e39352e3131332e302f32342d3234203d3e20323135333034.roa (raw, json)
Hash identifier: 3gfso9hqm5DtBYcsaGKuxKlBtoOtyxWD+cWGZp8ZZBg=
Subject key identifier: EF:20:C0:C5:FB:70:E9:AA:FD:7E:9A:29:C9:FE:1B:FE:80:62:0C:9A
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 17A221474A020BBA30AC4544A7A436A3DED0BD5C
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e20323135333034.roa
Signing time: Tue 15 Apr 2025 23:19:06 +0000
ROA not before: Tue 15 Apr 2025 23:14:06 +0000
ROA not after: Tue 14 Apr 2026 23:19:06 +0000
asID: 215304
IP address blocks: 93.95.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 06:43:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:a2:21:47:4a:02:0b:ba:30:ac:45:44:a7:a4:36:a3:de:d0:bd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Apr 15 23:14:06 2025 GMT
Not After : Apr 14 23:19:06 2026 GMT
Subject: CN=EF20C0C5FB70E9AAFD7E9A29C9FE1BFE80620C9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:22:83:ca:6d:76:42:63:57:14:8f:1c:72:
f2:1a:62:ee:e7:4b:89:36:7d:f5:cf:2b:0b:71:75:
06:2d:67:c5:89:d4:a6:63:3a:b3:d3:16:62:0b:5a:
cb:16:9a:65:66:7e:f1:a3:7f:42:91:c1:34:38:1b:
c6:3d:f4:35:ee:fd:e7:4e:03:2f:0c:aa:76:fa:60:
1c:77:61:3a:5d:e1:e3:8d:f6:11:15:01:0c:b9:79:
a6:fa:35:28:df:a9:58:2e:63:70:88:dc:d9:8b:9f:
6a:51:12:e3:b7:a7:20:87:d9:8a:36:16:48:66:a1:
10:7f:4c:07:44:82:10:a5:db:1c:55:32:46:ca:cd:
af:2b:0f:d1:12:d0:04:26:5e:d4:6c:90:a3:7e:2b:
cf:74:bc:dd:3e:83:5d:e7:fd:74:28:1b:38:c1:65:
71:44:75:a5:0d:c7:a2:93:f7:16:81:79:25:58:af:
c0:5c:6c:4a:5c:a5:52:c7:0b:1b:58:a2:86:10:89:
b7:84:c0:1c:3a:c9:26:3b:f1:a6:c3:fb:89:dd:cb:
33:64:eb:57:1b:8d:10:87:6a:95:18:5a:3c:64:52:
fd:a0:e1:06:4e:b5:b4:1c:a5:a7:98:cc:75:84:3d:
a3:c0:fb:9e:7b:7a:29:36:b0:95:18:06:b5:22:4d:
23:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:20:C0:C5:FB:70:E9:AA:FD:7E:9A:29:C9:FE:1B:FE:80:62:0C:9A
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e20323135333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.113.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:f9:77:91:b8:95:95:df:fb:67:c2:fc:4b:61:58:2b:84:ee:
fd:0c:9d:27:f9:81:86:d1:2b:a1:16:d5:79:cc:0c:c2:bd:5f:
3e:de:dc:0a:3b:cd:ea:6b:e8:2c:a2:8d:7f:51:ef:ea:cd:b7:
37:e7:c9:8e:e0:a5:46:bd:4c:40:a9:7d:92:43:80:4c:d2:fe:
e3:9b:62:c0:94:b3:df:c2:c2:91:09:4a:c6:a1:75:40:48:21:
11:ee:fe:dc:b2:cc:70:aa:26:dd:76:eb:00:91:e4:dc:b5:cb:
bc:3a:43:cb:a2:30:bc:39:38:54:87:22:40:78:2f:25:36:50:
4e:45:3d:d0:5c:c7:21:bb:70:e3:90:79:6f:3f:08:08:08:8c:
9c:fb:f0:aa:89:37:fe:18:31:8c:33:e2:4a:a0:43:2b:dd:f2:
ff:d8:4e:51:5b:b8:e1:0c:eb:a6:38:b6:58:b0:a7:4e:b6:3d:
b7:93:f7:a1:c4:f8:23:e8:ac:22:67:35:a8:13:b3:d1:1f:e8:
2b:43:f6:dd:55:53:23:db:09:ac:c3:61:4c:fa:30:51:a2:98:
f0:34:31:48:5d:a0:de:f4:04:c2:b5:cf:75:85:c8:5c:ce:2b:
ad:8b:24:9c:78:f8:6d:9e:64:2c:fa:fa:bc:2e:c0:2a:cf:8c:
6b:11:0b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:11:42 2025 by rpki-client