Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33392e31302e302f32342d3234203d3e203631333137.roa
File: 3139332e33392e31302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: tYlw2I/lAbH8jBnjuvV/U9keY55JFpaq/LeMhE1kr2I=
Subject key identifier: 04:B9:00:09:C4:27:A0:B0:A2:E4:6E:B4:A4:7F:29:7F:28:FA:1C:73
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 7E21B28C9F397BAF0D898B367499CF3CF6EF6DFD
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33392e31302e302f32342d3234203d3e203631333137.roa
Signing time: Mon 09 Jun 2025 16:54:09 +0000
ROA not before: Mon 09 Jun 2025 16:49:09 +0000
ROA not after: Mon 08 Jun 2026 16:54:09 +0000
asID: 61317
IP address blocks: 193.39.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:21:b2:8c:9f:39:7b:af:0d:89:8b:36:74:99:cf:3c:f6:ef:6d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jun 9 16:49:09 2025 GMT
Not After : Jun 8 16:54:09 2026 GMT
Subject: CN=04B90009C427A0B0A2E46EB4A47F297F28FA1C73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fa:c1:91:50:09:4b:b2:c8:c4:0c:8c:68:29:
5c:41:50:03:f5:43:39:27:ed:9f:d0:7f:46:fe:25:
02:9f:50:1c:b5:35:67:76:fe:5f:ad:7e:c0:b3:fc:
a2:77:d5:ed:85:98:98:20:45:9b:c1:89:59:9d:8f:
3a:02:f2:ed:7e:e5:6f:77:4a:45:d6:63:a8:fd:f6:
25:7a:50:b5:28:88:e6:c0:ed:9e:62:d2:de:98:cf:
f6:52:0e:1e:1b:5f:f9:00:0f:74:10:d2:52:97:fc:
69:a9:51:ae:30:6b:cc:b6:d9:df:cd:ce:a3:98:17:
83:1b:55:b1:9b:7b:62:57:32:5c:bb:38:f2:82:e8:
5b:75:be:ca:78:27:6b:83:5b:0c:78:90:ca:29:48:
ea:7e:ac:e5:e3:f5:03:b1:2f:b4:9a:e3:d5:0d:85:
1f:89:ff:c4:29:71:41:81:de:a3:d5:47:12:20:34:
01:26:1f:5c:5d:af:cd:d3:19:db:73:5d:a7:82:0b:
22:6a:ba:43:3b:22:92:87:8d:bf:c4:8e:cd:1e:3e:
d8:f7:ec:46:3b:c1:db:3c:e0:d6:5f:21:db:fa:08:
bc:4b:a5:e5:71:de:2a:19:42:5a:91:c8:9b:4e:d7:
65:3d:77:0a:48:59:dc:c8:44:89:73:16:1e:8b:2d:
92:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B9:00:09:C4:27:A0:B0:A2:E4:6E:B4:A4:7F:29:7F:28:FA:1C:73
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33392e31302e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.10.0/24
Signature Algorithm: sha256WithRSAEncryption
16:5a:68:73:43:76:ff:8a:23:c9:12:91:40:86:dd:7c:51:11:
ed:7c:5a:e7:93:2e:f5:6c:6d:61:ed:92:3a:32:52:c8:a8:d2:
21:68:82:4f:84:d8:e2:c6:b9:02:88:35:31:a5:08:d3:fc:4e:
5a:e7:68:6f:85:26:71:02:ec:af:4d:f2:07:9d:6e:23:37:ac:
f2:73:66:88:42:a4:88:e3:d1:d8:be:54:15:04:88:ab:6d:62:
fc:4f:fb:e9:eb:cf:0c:9c:a4:06:2a:40:9d:9b:37:34:df:6a:
ff:72:26:88:39:55:12:54:04:0c:05:fb:50:ca:bc:9b:15:ee:
57:d7:0a:4c:8a:88:ac:69:41:e6:60:c6:8e:8d:2a:7b:ef:b3:
5e:09:1d:6b:71:1c:62:d4:53:2a:76:1f:8f:f5:ac:0b:42:e3:
81:9b:c1:99:ec:6d:4e:e0:fd:2a:de:a2:65:81:1d:73:1c:9c:
ce:04:ba:16:3d:bb:10:11:6d:aa:ed:69:9c:b6:d8:d1:f6:d0:
da:56:4d:79:ff:ec:0b:4c:1c:51:24:51:bb:fc:da:30:ff:ff:
23:fb:a8:86:d3:ad:30:2b:ab:8a:da:ad:9f:bb:1c:37:d5:31:
e7:d4:ca:42:87:c7:c0:1c:f7:a8:78:00:e0:66:1f:58:ef:80:
1d:c7:54:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:34:50 2025 by rpki-client