Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/3133392e32382e32342e302f32342d3234203d3e20323132363039.roa
File: 3133392e32382e32342e302f32342d3234203d3e20323132363039.roa (raw, json)
Hash identifier: Zbml066pXi3G2h7cDhaY/zBOXtPP1DXZek0hCHsXFhc=
Subject key identifier: 4C:5C:9C:08:CC:2E:0D:09:26:9F:D2:D4:28:4F:6C:3D:7E:A9:FB:3B
Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a
Certificate serial: 7257004726336D8734480BB51EFC499EEFE804DF
Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/3133392e32382e32342e302f32342d3234203d3e20323132363039.roa
Signing time: Tue 06 May 2025 08:44:35 +0000
ROA not before: Tue 06 May 2025 08:39:35 +0000
ROA not after: Tue 05 May 2026 08:44:35 +0000
asID: 212609
IP address blocks: 139.28.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl
rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 08:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:57:00:47:26:33:6d:87:34:48:0b:b5:1e:fc:49:9e:ef:e8:04:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a
Validity
Not Before: May 6 08:39:35 2025 GMT
Not After : May 5 08:44:35 2026 GMT
Subject: CN=4C5C9C08CC2E0D09269FD2D4284F6C3D7EA9FB3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:b6:90:25:8a:82:de:11:46:c3:c0:8b:ea:
43:3d:1a:83:b2:5a:59:fc:28:d6:53:06:25:0e:29:
14:e7:84:8f:ed:e9:8d:f0:d4:5f:07:9f:00:ee:f7:
57:c3:eb:c7:b5:36:2b:63:0b:87:f2:3e:42:8e:ac:
52:c5:55:e7:3a:4b:02:0c:13:ba:fa:cf:be:61:a4:
3e:32:49:11:78:e8:58:4b:78:e3:f0:d8:d5:bf:95:
b5:39:8d:dd:0a:0b:96:05:80:b9:85:b8:78:53:3d:
a0:61:31:de:a1:a0:3d:e1:c1:e8:b7:28:f3:e6:e2:
60:46:f3:23:57:92:0b:c1:0a:ea:d2:e4:38:bf:41:
fb:0a:b7:26:d8:af:4b:12:33:33:9a:9e:47:6e:17:
ed:c3:4b:25:43:25:23:4e:6c:c2:00:99:f9:c8:39:
82:ca:06:5d:c5:c3:5f:1d:b8:a1:7b:6c:b3:13:e8:
c6:67:74:16:3e:e5:51:3d:9b:80:af:f1:56:d4:c7:
ca:e2:cd:f8:c0:b3:eb:00:8d:d3:7b:3f:d2:aa:4b:
6f:80:77:b2:ec:a3:34:bd:e3:74:06:9c:79:de:bd:
cf:27:16:e3:11:1f:f9:fd:42:a1:25:8c:a6:5d:a5:
fe:c9:9e:36:f8:37:4b:08:c3:c2:21:ef:c4:45:c5:
ce:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5C:9C:08:CC:2E:0D:09:26:9F:D2:D4:28:4F:6C:3D:7E:A9:FB:3B
X509v3 Authority Key Identifier:
keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/3133392e32382e32342e302f32342d3234203d3e20323132363039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.24.0/24
Signature Algorithm: sha256WithRSAEncryption
82:de:8c:f5:7e:1c:28:1b:8f:72:d7:e3:02:f9:bb:8c:81:95:
6f:07:18:9c:97:4c:8b:9e:52:65:64:a2:63:e3:59:b9:9b:fd:
39:bd:42:9e:bc:19:f7:3f:97:94:80:83:2b:9f:4c:2e:9b:b8:
c1:6b:2f:6e:b2:58:f8:1f:51:ae:da:18:23:7b:22:df:b1:15:
03:4e:ac:17:05:a7:59:d6:d2:1c:94:ba:da:9b:1f:76:83:93:
1f:73:1e:ad:cc:fb:71:59:a9:ea:f2:bd:10:89:64:0c:47:53:
3a:70:97:95:83:87:91:8b:af:65:05:ab:7c:bb:4f:31:47:fb:
f1:3d:e5:ea:5b:1e:d0:63:31:de:6a:2c:02:ca:ac:15:42:43:
8e:e3:65:92:64:cf:22:58:77:93:7d:1c:3d:7a:7d:9e:e9:20:
30:a3:e2:96:28:77:ba:40:2b:0d:ba:0f:d8:72:da:0e:28:f6:
50:26:ef:f9:fe:35:ca:9f:d6:ac:60:07:2f:e1:98:dd:4c:da:
35:4e:46:95:fd:29:54:26:33:96:2d:d5:f5:c8:da:6e:82:1b:
7b:4b:c4:4c:89:d9:75:69:58:6a:23:c9:9d:b6:6a:88:3d:f8:
fa:c7:62:ba:94:eb:ff:ae:c5:de:ca:18:91:8f:c1:3b:95:2d:
11:d9:48:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:44:26 2025 by rpki-client