Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e203239383032.roa
File: 3130392e3131302e3137312e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: VFfktgL4Epi623Se2FgFeHx8bMp1YtMI3GdlVWnsxbc=
Subject key identifier: C5:0A:09:96:9B:1F:B9:5F:64:4A:BA:07:3F:EC:32:6B:CF:79:19:A6
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 596EF2D76C7FEF92EFC9711ACB0DF53DBE93F2C0
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e203239383032.roa
Signing time: Sun 04 May 2025 11:54:03 +0000
ROA not before: Sun 04 May 2025 11:49:03 +0000
ROA not after: Sun 03 May 2026 11:54:03 +0000
asID: 29802
IP address blocks: 109.110.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:6e:f2:d7:6c:7f:ef:92:ef:c9:71:1a:cb:0d:f5:3d:be:93:f2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: May 4 11:49:03 2025 GMT
Not After : May 3 11:54:03 2026 GMT
Subject: CN=C50A09969B1FB95F644ABA073FEC326BCF7919A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ac:5b:34:b3:ea:63:13:b8:d3:e4:d5:f5:05:
4e:fc:31:bc:be:65:62:7f:4e:37:2d:b1:6f:87:d8:
17:b1:99:e7:ce:b0:78:d9:18:bb:c6:b6:54:11:af:
f4:2a:ce:54:2e:61:95:10:2e:59:0f:af:f3:63:b8:
ea:93:ef:0b:28:b0:dd:39:be:87:1d:00:9e:60:b5:
d6:d7:d1:92:2b:26:79:4a:a9:8e:58:76:8b:29:04:
e9:ba:43:c1:60:52:dd:a5:d0:46:c0:41:f4:f1:3f:
74:7a:38:4b:e1:a4:f6:63:4d:93:21:1c:78:05:18:
56:46:99:f6:55:50:53:bd:79:ba:6c:7c:7d:76:af:
e0:0f:5d:7a:67:34:61:05:24:7f:4f:49:a7:26:08:
24:13:58:30:20:6f:e4:b6:a1:57:b0:74:dc:b2:df:
f7:7b:24:ec:37:7b:31:71:15:94:32:32:79:01:a2:
0e:ce:69:0e:c7:6c:c5:0c:54:3a:33:33:2b:e7:2a:
fc:3f:60:0e:c2:2b:8d:c0:3b:7e:82:53:9c:b9:cf:
06:a7:a9:f2:20:56:bb:6c:b5:a9:d4:70:4f:79:f7:
ab:b5:46:ac:84:a3:02:10:c6:b3:d9:3e:b9:7a:34:
07:16:78:b9:27:63:68:24:f4:b2:53:2c:70:8b:36:
37:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0A:09:96:9B:1F:B9:5F:64:4A:BA:07:3F:EC:32:6B:CF:79:19:A6
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137312e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.171.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:42:ba:fc:14:b9:69:2e:d5:63:5d:8a:ee:0f:2a:de:78:35:
df:ca:2f:39:17:3a:4b:08:62:c7:58:44:ff:e7:93:d2:aa:9a:
ef:fe:93:14:ee:68:df:b6:c5:6b:4a:d5:a9:a1:8f:29:d8:8f:
3f:34:24:f0:c4:11:21:5f:18:b8:2b:b3:9c:9f:54:54:85:04:
c7:d9:78:c9:5c:b1:d6:d0:c5:d2:32:31:0e:e9:10:e3:3a:f0:
8b:94:7c:a5:90:98:54:b5:6a:1e:b3:69:a8:0a:b5:5d:e2:34:
8e:5f:0f:d9:32:4f:88:a1:34:06:c6:ca:6e:15:59:bf:7b:41:
6d:56:6a:5b:fc:10:af:01:22:aa:1b:54:8b:89:2d:9f:e8:bd:
9c:ff:88:0f:75:74:f4:11:1a:ef:6c:59:a0:4b:b2:7f:03:04:
9e:73:e9:35:34:81:5c:90:39:70:e4:3d:25:82:7e:07:cc:d9:
fd:e6:b4:20:aa:d7:79:90:3e:27:5a:56:45:b7:12:79:8d:67:
6d:76:8b:65:fc:62:83:1f:d7:5e:71:5b:44:8e:e9:23:41:aa:
b5:2e:51:63:1f:07:ce:2a:03:4f:3f:17:d2:9e:87:16:8e:19:
60:57:48:75:85:00:63:c2:ce:4b:2c:7b:67:0d:cc:0b:1b:9f:
cd:5e:65:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:54:50 2025 by rpki-client